Senior Network Security Engineer - Fortinet Implementation FocusedReports to: Director of Service Delivery • In person, Richardson, TX • Full-time, Exempt • Travel 20-30%
About the RoleThe Senior Network Security Engineer leads Fortinet implementations from discovery through cutover and handoff. You will own the technical outcome on your projects: running design sessions with the customer, building and migrating FortiGate, SD-WAN and Security Fabric deployments, and reviewing the work of other engineers on the project. We are looking for someone who has already delivered end-to-end FortiGate deployments for external customers and can do it again from day one.
Key Responsibilities- Lead discovery and design workshops, and produce high-level and low-level designs for FortiGate, SD-WAN and Security Fabric deployments
- Implement FortiGate next-generation firewall: policy and NAT, IPS, web filtering, application control, SSL inspection, VDOMs and HA clustering
- Design and deploy Fortinet SD-WAN, including hub-and-spoke and ADVPN overlays, performance SLAs and SD-WAN rules
- Migrate customers from other firewall platforms (Palo Alto Networks, Cisco ASA/FTD, Check Point, SonicWall), including policy conversion, testing and cutover
- Migrate remote access from SSL VPN tunnel mode to IPsec VPN and ZTNA as customers move to FortiOS 7.6.3 and later
- Deploy and configure FortiManager and FortiAnalyzer: ADOMs, templates, device provisioning, logging and reporting
- Integrate FortiAuthenticator and FortiToken with RADIUS, LDAP and SAML identity sources, and FortiSwitch and FortiAP into the Security Fabric where in scope
- Deploy FortiGate-VM in AWS and Azure
- Act as technical lead on assigned projects: manage technical risk, review configurations and mentor other engineers
- Support pre-sales with scoping, level-of-effort input and bill-of-materials review
- Deliver knowledge transfer sessions and as-built documentation
- Maintain customer documentation in SharePoint and record time and project notes in Odoo daily
Required Qualifications- 7 or more years of enterprise networking and network security experience
- 4 or more years of hands-on FortiGate design and implementation, including end-to-end enterprise deployments you led
- 2 or more years deploying Fortinet SD-WAN in production
- 5 or more years with a value-added reseller, systems integrator, managed services provider or professional services firm, consulting directly with customers: requirements gathering, design and implementation
- Active Fortinet NSE 4 certification (FortiOS Administrator) and an active NSE 5 or NSE 6 certification, preferably in the Secure Networking track, such as FortiManager Administrator or FortiAnalyzer Administrator
- Strong command of TCP/IP, BGP, OSPF, IPsec, NAT, DNS, DHCP and IPv6
- Ability to explain design decisions to both technical and non-technical stakeholders
- Able to travel 20 to 30 percent, including overnight travel, and to support after-hours cutovers
- Authorized to work in the United States. Visa sponsorship is not available for this role
Preferred Qualifications- Fortinet NSE 7 Secure Networking Architect or SASE Architect
- FortiNAC, FortiClient EMS or FortiSASE deployment experience
- Experience with compliance frameworks such as PCI DSS, HIPAA, NERC CIP or IEC 62443
- Experience securing industrial and OT networks
- Python, Ansible or the FortiOS REST API for automation
- CCNP Security, PCNSE or another professional-level security certification
- Bachelor's degree in a technical discipline, or equivalent experience
Core ValuesWe hire for alignment with Traversa's core values:
- Communication
- Ownership
- Drive for Excellence and Growth
- Problem Solving and Innovation
Benefits- 401(k) with up to 3 percent employer match
- Health, dental and vision insurance
- Health savings account with $600 annual employer contribution
- Flexible spending account
- Life insurance
- Paid time off
- Employee assistance program
- Company-paid training and certification exams
Work LocationThis is an in-person role based in our Richardson, TX office (75081).
