Network Security Engineer

Our client is seeking an experienced Network Security Engineer with strong hands-on expertise in Fortinet FortiGate firewalls, FortiOS and enterprise network security

This role is suited to a technically strong engineer who can troubleshoot complex network and security issues, maintain secure enterprise environments, and contribute to network design, implementation and optimisation. You will work across firewall infrastructure, routing, VPN connectivity and network security solutions, combining hands-on technical engineering with customer engagement and infrastructure improvement projects

Key Duties and Responsibilities

• Configure, manage and maintain FortiGate firewalls, firewall policies and security configurations
• Implement and troubleshoot VPNs, including site-to-site IPsec and remote-access connectivity
• Diagnose complex network issues involving routing, switching, TCP/IP, VLANs, BGP and OSPF
• Perform advanced troubleshooting using firewall logs, packet captures, Wireshark and tcpdump
• Support network security implementations, infrastructure upgrades and firewall migrations
• Engage with customers and technical teams to resolve incidents, recommend improvements and maintain secure, reliable network environments
• Maintain technical documentation and participate in scheduled support and on-call arrangements as required
• Maintain accurate network diagrams, firewall configurations, technical documentation, change records and incident reports
• Apply change-management procedures and security best practices when implementing infrastructure changes
• Provide technical guidance to customers and internal stakeholders on network security configurations, troubleshooting and infrastructure improvements
• Participate in scheduled support and on-call arrangements as required

Minimum Requirements

• At least 4 years of relevant enterprise network engineering or network security experience
• Strong hands-on experience with Fortinet FortiGate firewalls and FortiOS
• Good knowledge of firewall policies, NAT, VPNs and network security principles
• Solid understanding of TCP/IP, VLANs, subnetting, routing and switching
• Working knowledge of BGP and OSPF
• Experience using network troubleshooting tools such as Wireshark, tcpdump or equivalent
• Strong analytical, troubleshooting and communication skills

Advantageous

• Experience with Palo Alto firewalls, Cisco Meraki SD-WAN, SIEM platforms or Linux/Unix environments
• Relevant Fortinet or networking certifications
• Experience in a managed services or customer-facing technical environment