Fortinet Network Security Engineer (FortiGate)

Position: Fortinet Network Security Engineer (FortiGate)

Location: Hybrid- Toronto, ON

Job type: Full-Time/Permanent Hiring

As a Senior Fortinet Network Security Engineer, you will design, configure, manage, and troubleshoot Fortinet security solutions and hybrid cloud network environments across Azure, AWS, and OCI. The role requires deep expertise in FortiGate/FortiOS, FortiManager, FortiAnalyzer, Fortinet SD-WAN, cloud networking, routing, VPN, and network security automation .

Required Skills

• 6–8 years of overall experience in Network Security / Network Engineering , with 4+ years of hands-on Fortinet experience.
• Deep expertise in FortiGate and FortiOS , including security policies, user authentication, SSL VPN, and IPsec VPN.
• Strong experience with IPS rule creation, application control, and Fortinet security capabilities .
• Enterprise-scale FortiGate management using FortiManager and FortiAnalyzer .
• Strong knowledge of Fortinet SD-WAN .
• Experience deploying and managing FortiGate-VM in public cloud environments.
• Strong understanding of BGP, OSPF, and static routing in hybrid cloud architectures.
• Hands-on experience with Azure, AWS, and/or OCI networking , including virtual networks, configuration, and peering.
• Experience with Azure ExpressRoute, AWS Direct Connect, and OCI FastConnect .
• Knowledge of User-Defined Routes (UDRs) and routing traffic through FortiGate as a cloud NVA.
• Strong knowledge of cloud networking services including Azure Load Balancer, Azure Route Server, DNS, route tables, and high-availability networking .
• Experience designing and troubleshooting VPN hub architectures, HA/DR, and hybrid connectivity .
• Experience collaborating with ISP/backbone network teams for complex network troubleshooting.
• Automation experience using Terraform, Microsoft Bicep, Python, and/or PowerShell .
• Strong troubleshooting skills across the OSI/network stack .
• Strong understanding of network security standards such as NIST and CIS .
• Excellent communication and technical documentation skills.

Roles & Responsibilities

• Manage and maintain enterprise FortiGate firewall environments and Fortinet security infrastructure.
• Configure FortiOS security policies, authentication, SSL/IPsec VPNs, IPS, and application control .
• Manage FortiGate environments at scale using FortiManager and FortiAnalyzer .
• Design, implement, and troubleshoot Fortinet SD-WAN solutions.
• Deploy and manage FortiGate-VM/NVA instances across Azure, AWS, and OCI.
• Design and support hybrid cloud network architectures using BGP, OSPF, static routing, and cloud connectivity services.
• Configure VNet/VPC networking, peering, route tables, UDRs, and cloud-to-cloud/on-prem connectivity .
• Support ExpressRoute, Direct Connect, and FastConnect implementations.
• Design and troubleshoot VPN hub, HA, and disaster-recovery architectures .
• Automate infrastructure provisioning and configuration using Terraform, Bicep, Python, and PowerShell .
• Troubleshoot complex network and security issues across the OSI stack.
• Collaborate with ISP, infrastructure, cloud, and security teams to resolve connectivity and performance issues.
• Apply NIST/CIS security principles and enterprise security best practices.
• Maintain technical documentation, architecture details, configurations, and operational procedures.

Certifications

• Fortinet NSE 4 / FCP
• Fortinet NSE 6 / NSE 7 / FCSS
• Microsoft AZ-104 / AZ-700
• AWS ANS-C01 or equivalent networking certification