Fortinet Firewall Lead

Job Description

Title: Fortinet Firewall Specialist

Location: Secaucus  NJ

Duration: Full Time

The Senior Network Security Engineer is responsible for architecting, deploying, and centrally managing enterprise-grade security infrastructure with a primary focus on the Fortinet Security Fabric. This role serves as the subject matter expert for Forti Manager, spearheading the design and execution of automated Zero-Touch Provisioning (ZTP) workflows and Secure SD-WAN deployments across extensive data center, campus, and branch environments.

Key Responsibilities

Automated Provisioning & Centralized Management

• Design and scale automated Zero-Touch Provisioning (ZTP) pipelines to accelerate the deployment of FortiGate firewalls and branch infrastructure.


• Administer Forti Manager centralized environments, establishing standardized Administrative Domains (ADOMs), device life-cycle tracking, provisioning templates, CLI scripts, and policy packages.


• Develop and maintain meta-fields, variables, and runtime scripts within Forti Manager to ensure highly adaptive, programmatic edge configuration rollouts.

Security Architecture & Engineering

• Deploy and operate FortiGate firewalls in High Availability (HA) clusters, Virtual Domains (VDOMs), and multi-tenant architectures.


• Architect Fortinet Secure SD-WAN, including overlay link design, SLA-based path selection rules, application steering, and Auto-Discovery VPN (ADVPN).


• Integrate and maintain the broader Fortinet stack, including Forti Switch, FortiAP, and Forti Analyzer.


• Implement Zero-Trust Network Architecture (ZTNA) and robust micro-segmentation strategies across hybrid environments.

Operations, Compliance & Leadership

• Analyze telemetry data from Forti Analyzer to construct operational dashboards, security event correlation models, and long-term compliance audit reporting. 


• Lead technical project delivery, conduct vulnerability assessments, and act as a Tier-3 escalation point for critical network or security outages. 


• Mentor junior engineering staff and establish consistent configuration standards, runbooks, and architectural documentation

Qualifications & Skills

Technical Requirements

• Deep, expert-level competency in Forti Manager and FortiGate, with documented experience designing complex configuration templates and ZTP blueprints.


• Advanced knowledge of core networking protocols, including BGP, OSPF, IPsec VPNs, advanced routing/switching, and SD-WAN path management.


• Proficiency with scripting languages (e.g., Python, Jinja2, Ansible, or FortiManager CLI scripting) used to optimize network automation workflows. 


• Strong understanding of security frameworks (such as NIST, ISO 27001, or PCI-DSS) to ensure automated templates strictly enforce organizational compliance.

͏

Areas of responsibility

Triaging and resolution of tickets-Establish incident monitoring protocols and provide technical guidance to enable permanent fixes for recurring issues.

SLA Monitoring-Review SLA performance across the team, represent the function in meetings, and ensure consistent delivery quality.

Performance tuning and optimization-Collaborate with technical teams in managing production support activities regarding incident resolution, efficient deployments, and implementation of changes.

Perform system Improvements-Collaborate with technical teams to review mitigation measures and proposed improvement actions.

Handling disaster recovery-Develop disaster recovery and data backup plans to ensure system resilience and quick restoration in case of disruptions.

Reporting and stakeholder engagement-Participate in Quarterly Business Reviews (QBRs), manage client expectations, and ensure alignment with business objectives.

Team Management-Supervise team members by overseeing daily operations, conducting performance appraisals, and providing feedback.

Knowledge base and continuous learning Update and maintain documentation for complex issues, share best practices within the team, and support ongoing knowledge enhancement to improve service efficiency.

͏

͏

͏