Security Solutions Specialist - Network Operations

• Operate and maintain FortiNAC (or equivalent NAC platform) for day-to-day endpoint visibility, profiling, posture assessment, and access enforcement.
• Monitor access control policies for wired, wireless, OT, and IoT devices, and respond promptly to policy violations or access anomalies.
• Maintain integrations between the NAC platform and switches, wireless controllers, NGFWs, and identity sources; troubleshoot integration failures.
• Run and tune automated endpoint compliance checks, NAC profiling, and remediation workflows; investigate exceptions.
• Operate and maintain RADIUS authentication services for wired and wireless access, including policy sets, authentication/authorization rules, and certificate-based (EAP-TLS) or credential-based access methods.
• Manage TACACS+ for device administration AAA, including per-command authorization, privilege levels, and shell profiles for network and security device access.
• Monitor AAA (Authentication, Authorization, and Accounting) logs and sessions across NAC, RADIUS, and TACACS+ platforms, investigating authentication failures and access anomalies.
• Onboard, classify, and manage diverse device types (corporate endpoints, BYOD, printers, IP phones, cameras, OT/IoT devices) through profiling, fingerprinting, and appropriate access policies.
• Handle day-to-day device lifecycle activities including registration, quarantine, remediation, and offboarding of non-compliant or rogue devices.
• Troubleshoot RADIUS/TACACS+ integration issues with switches, wireless controllers, VPN concentrators, and network devices to maintain uninterrupted authentication services.

Network & Firewall Operations (NGFW)

• Perform day-to-day operation, monitoring, and health checks of routing, switching, and firewall environments.
• Operate and maintain Next-Generation Firewalls (NGFW), including IPS, Web Filtering, Application Control, Antivirus, and NAC integration, ensuring rules and signatures stay current.
• Triage, troubleshoot, and resolve network and firewall-related incidents and performance issues, escalating and driving root-cause analysis as needed.
• Monitor traffic segmentation and policy enforcement across the infrastructure, flagging and remediating drift or misconfiguration.
• Support change management for firewall and network configuration changes, including testing and rollback procedures.
• Operate and troubleshoot MPLS-based WAN infrastructure, including PE/CE configurations, label switching paths, and service provider handoffs.
• Monitor and troubleshoot BGP routing (eBGP/iBGP), including route advertisements, route-maps, prefix filtering, and path selection issues affecting traffic flow.
• Manage VLAN segmentation, trunking, and inter-VLAN routing across switching infrastructure, resolving misconfigurations and broadcast/traffic issues.
• Apply strong TCP/IP fundamentals (addressing, subnetting, routing tables, NAT, QoS) to diagnose and resolve day-to-day connectivity and performance issues.
• Support and troubleshoot EVPN-VXLAN fabrics, including MAC/IP learning, VTEP connectivity, and overlay-underlay integration issues in data center environments.
• Perform packet captures and traffic analysis to isolate routing, switching, and firewall-related faults across MPLS, BGP, VLAN, and EVPN layers.

General Operational Responsibilities

• Serve as a day-to-day operational point of contact for security and network access issues, working closely with network, infrastructure, SOC, and compliance teams.
• Participate in on-call or shift-based support rotations as required to maintain operational uptime and incident response.
• Perform advanced troubleshooting, performance monitoring, and capacity/health checks across network and security layers.
• Maintain accurate operational documentation, configuration records, run-books, and standard operating procedures.
• Track recurring incidents and operational issues to identify trends and drive continuous improvement.
• Ensure all day-to-day operations align with organizational policies, SLAs, and industry best practices.

Required Skills & Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Proven hands-on operational experience with FortiNAC or equivalent NAC platforms (e.g., HPE Aruba ClearPass, Cisco ISE).
• Strong operational expertise in routing, switching, and firewall technologies across Fortinet, Palo Alto Networks, Cisco, Arista, and HPE Aruba platforms.
• Hands-on experience operating and monitoring NGFW capabilities, including IPS, Web Filtering, Application Control, Antivirus, NAC profiling, and posturing.
• Strong understanding of network and security fundamentals (TCP/IP, VLANs, routing, switching).
• Experience monitoring and maintaining integrations between Fortinet solutions and third-party tools (SIEM, IAM, firewalls).
• Ability to analyze logs, alerts, and security events to identify and resolve operational issues.
• Strong troubleshooting, analytical, and incident-response skills in a live production environment.

Desired Candidate Profile

• Experienced Security Solutions Specialist to run day to day operations for our network access control and net work security environment, with hands on expertise across fortinac, HPE Aruba clear pass, and Cisco ISE,alongside routing, switching and firewall platform from fortinet, palo Alto networks, Cisco, Arista, and HPE Aruba. This is an operation focused role : Monitoring,maintaining, troubleshooting, and continuously tuning secure net work access. Identity based control , and next generation firewall infrastructure across a multiple
• vendor enterprise environment.