Senior Network Security Engineer

JOB DESCRIPTION:

The Senior Network Security Engineer is a hands-on technical role responsible for managing and continuously hardening the network security controls and tools of Unique Vacations, Inc. (UVI) across its data centers, corporate offices, call centers, and cloud environments. The role owns FortiManager and the FortiGate security policies, FortiAnalyzer, FortiClient EMS and VPN user access, Darktrace network detection and response, and FireMon firewall policy management, and is a primary contributor to PCI DSS network compliance. The position partners closely with Network Engineering, which operates the firewalls and VPN gateways, as well as Systems Administration, the Security Operations team, managed security providers, and vendors. The role has no direct reports at this time and is based in Miami, Florida.

JOB ROLES AND RESPONSIBILITIES:

Firewall Security Management (FortiManager)

• Own FortiManager as the central security management platform, including policy packages, shared objects, threat feeds, naming standards, upgrades, and backups.
• Define and maintain FortiGate security controls, including IPS, application control, web and DNS filtering, threat-intelligence and geo-blocking, and centralized IP and URL block lists.
• Review firewall rule, NAT, and connectivity requests for business need, least privilege, and exposure before implementation by Network Engineering.
• Perform periodic firewall rule reviews and track remediation of unused or overly permissive rules with Network Engineering.

Security Monitoring and Detection

• Administer FortiAnalyzer, ensuring reliable log collection, retention, reporting, and forwarding to the SIEM.
• Administer the NDR platform (Platform: Network, Email, and Identity), including appliances, upgrades, model tuning, and integrations.
• Build and maintain security alert integrations to Microsoft Teams and Jira using properly governed service accounts.

VPN User Access

• Own the VPN access model, including SAML authentication and AD/MFA group mapping, aligned with least privilege.
• Manage FortiClient EMS (on-premises and cloud), review and approve VPN access requests, and onboard contractors and vendors.
• Troubleshoot user access issues and escalate gateway or infrastructure issues to Network Engineering.

PCI DSS and Firewall Policy Management

• Operate FireMon for device onboarding, scheduled compliance reports, and change reporting.
• Perform quarterly network device audits, produce PCI DSS evidence, and drive remediation with Network Engineering.
• Support the annual PCI network assessment and ensure changes do not expand PCI scope or weaken segmentation.

Incident Response and Operations

• Serve as a technical escalation point for network-related security incidents, including blocking, isolation, and containment.
• Participate in the Information Security on-call rotation and follow the change-management (CAB) process for all changes.

Projects, Documentation, and Vendors

• Lead the security workstreams of network, data center, and cloud (AWS and Azure) projects.
• Create and maintain runbooks, standards, and inventories so that no knowledge depends on a single person.
• Manage relationships and support cases with vendors and partners such as Fortinet, Darktrace, and FireMon.
• Other duties as required by management.

COMPETENCE REQUIREMENTS:

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Qualifications include:

Fortinet Expertise: Advanced hands-on experience with FortiManager, FortiAnalyzer, FortiClient EMS, and FortiGate security features in a multi-site environment.

Network Security: Strong knowledge of TCP/IP, segmentation, NAT, IPS, VPN, DNS, and web filtering, with enough routing and HA knowledge to partner effectively with Network Engineering.

Detection and Compliance: Experience with Darktrace or similar NDR, SIEM (Splunk preferred), and PCI DSS 4.0 network requirements.

Identity and Automation: Experience with Okta SAML and Active Directory, plus scripting or automation (Python, PowerShell, FortiOS CLI, or Power Automate).

Communication and Ownership: Able to work independently, document thoroughly, and drive issues through validated closure.

EXPERIENCE:

Outlined below are the academic qualifications and length and type of experience deemed necessary by Unique Vacations Inc. in order to perform the role of Senior Network Security Engineer competently.

Education:

Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related discipline preferred. Equivalent relevant experience may be considered in lieu of a degree.

Experience:

5+ years of network security or network engineering experience, including 3+ years administering Fortinet security platforms in an enterprise environment.

• Experience supporting PCI DSS or other regulatory audits with network security evidence.
• Experience with firewall policy management tools (FireMon, Tufin, AlgoSec, or Nipper) is preferred.
• Certifications: Fortinet NSE 4 / FCP required or obtained within 6 months; NSE 7 / FCSS, CCNP Security, GIAC, or CISSP preferred.

BENEFITS:

We offer a full benefits package including:

• Health
• Dental
• Vision
• Employer paid life insurance, STD, and LTD
• Sick days
• Vacation days
• 9 Holidays
• Tuition assistance
• Parental leave
• 401K plan with a generous company match

Additional perk: After 6 months of continuous employment, you may visit the resorts we represent at a discounted rate.

Once you visit one of the properties, you will not only experience the best of what the brand has to offer but you will get to see first-hand what makes us so passionate and most of all so "Unique".