Firewall Engineer

As a Firewall Engineer at our company, your role involves designing, implementing, optimizing, and troubleshooting firewall infrastructure, secure remote access solutions, routing/switching, and automation tooling to ensure a secure, resilient, and compliant network environment. Key Responsibilities: - Configure, harden, and manage the Fortinet stack (FortiGate, FortiManager, FortiAnalyzer). - Create, review, and optimize firewall rules, NAT configurations, policies, and security objects. - Design and maintain site-to-site and remote-access VPNs (IPSec/SSL) including Zscaler ZPA and FortiClient. - Administer routers, switches, and wireless controllers; analyze traffic flows, ports, and protocols. - Perform firewall policy audits and rule optimization to enforce least-privilege access and reduce redundancy. - Utilize monitoring and policy tools such as SolarWinds, ThousandEyes, AlgoSec. - Support automation initiatives using Terraform, GitHub, and APIs for standardized deployments. - Troubleshoot L2/L3/L7 network issues; conduct RCA and implement corrective actions. - Document configurations, standards, and operational playbooks. - Collaborate with Security, Platform, and Compliance teams to maintain audit readiness. Qualifications Required: - Bachelor's degree in Computer Science, Engineering, Information Systems, or equivalent experience. - 58 years of total experience, with 4+ years in networking/security operations. - Strong hands-on expertise in FortiGate firewalls (FortiManager/FortiAnalyzer preferred). - Deep understanding of IP networking, routing & switching, VPN technologies, and firewall concepts (rules, ports, NAT, objects). - Experience with secure remote access solutions (Zscaler ZPA, FortiClient). - Hands-on experience with monitoring & policy tools (SolarWinds, ThousandEyes, AlgoSec). - Exposure to automation using Terraform and Git-based workflows. - Strong troubleshooting, documentation, and security best practices knowledge. Nice to Have: - Experience with Palo Alto, Cisco ASA/Firepower, or Check Point firewalls. - Exposure to SD-WAN, DNS/DHCP/IPAM (e.g., Infoblox). - Knowledge of identity protocols (RADIUS, TACACS+). - Relevant certifications (NSE 4/5/7, PCNSA, PCNSE). As a Firewall Engineer at our company, your role involves designing, implementing, optimizing, and troubleshooting firewall infrastructure, secure remote access solutions, routing/switching, and automation tooling to ensure a secure, resilient, and compliant network environment. Key Responsibilities: - Configure, harden, and manage the Fortinet stack (FortiGate, FortiManager, FortiAnalyzer). - Create, review, and optimize firewall rules, NAT configurations, policies, and security objects. - Design and maintain site-to-site and remote-access VPNs (IPSec/SSL) including Zscaler ZPA and FortiClient. - Administer routers, switches, and wireless controllers; analyze traffic flows, ports, and protocols. - Perform firewall policy audits and rule optimization to enforce least-privilege access and reduce redundancy. - Utilize monitoring and policy tools such as SolarWinds, ThousandEyes, AlgoSec. - Support automation initiatives using Terraform, GitHub, and APIs for standardized deployments. - Troubleshoot L2/L3/L7 network issues; conduct RCA and implement corrective actions. - Document configurations, standards, and operational playbooks. - Collaborate with Security, Platform, and Compliance teams to maintain audit readiness. Qualifications Required: - Bachelor's degree in Computer Science, Engineering, Information Systems, or equivalent experience. - 58 years of total experience, with 4+ years in networking/security operations. - Strong hands-on expertise in FortiGate firewalls (FortiManager/FortiAnalyzer preferred). - Deep understanding of IP networking, routing & switching, VPN technologies, and firewall concepts (rules, ports, NAT, objects). - Experience with secure remote access solutions (Zscaler ZPA, FortiClient). - Hands-on experience with monitoring & policy tools (SolarWinds, ThousandEyes, AlgoSec). - Exposure to automation using Terraform and Git-based workflows. - Strong troubleshooting, documentation, and security best practices knowledge. Nice to Have: - Experience with Palo Alto, Cisco ASA/Firepower, or Check Point firewalls. - Exposure to SD-WAN, DNS/DHCP/IPAM (e.g., Infoblox). - Knowledge of identity protocols (RADIUS, TACACS+). - Relevant certifications (NSE 4/5/7, PCNSA, PCNSE).