Fortinet Network Security Architect

We are looking for an experienced Fortinet Network Security Architect to design, configure, manage, and support enterprise network security infrastructures. This role focuses on Fortinet technologies such as FortiGate, FortiSwitch, FortiAP, FortiAuthenticator/NAC, FortiSASE, FortiManager, and FortiAnalyzer. The ideal candidate will ensure secure connectivity, identity management, network protection, and infrastructure resilience while effectively diagnosing complex infrastructure issues and responding to security incidents.

Key Responsibilities

- Configure, operate, and maintain FortiGate firewalls and enterprise security infrastructure.
- Design and troubleshoot firewall policies, routing protocols including BGP, OSPF, static routing, SD-WAN, and high-availability configurations.
- Implement and manage IPS, Application Control, and Web Filtering policies.
- Configure and support SSL VPN and IPsec VPN connectivity.
- Analyze and resolve network security incidents and connectivity problems.
- Maintain secure, reliable, and resilient enterprise network architectures.
- Install, configure, and manage FortiSwitch infrastructure, including FortiLink connectivity and switching architecture.
- Deploy, configure, and optimize FortiAP wireless networks with secure wireless access and authentication such as WPA3.
- Implement VLANs, NAC, and network access policies; diagnose and resolve wired and wireless network performance issues.
- Deploy, configure, and maintain FortiAuthenticator and NAC solutions, administering RADIUS and TACACS+ authentication services.
- Integrate authentication systems with LDAP and Active Directory; configure and manage MFA mechanisms.
- Maintain certificate lifecycles, identity authentication policies, and support SSO integration and centralized user identity management.
- Implement and support FortiSASE and secure remote connectivity solutions, developing and managing Zero Trust Network Access (ZTNA) policies.
- Configure and maintain Secure Web Gateway (SWG) functionality; support CASB administration, monitoring, and endpoint onboarding.
- Monitor service performance and troubleshoot SASE connectivity and security issues.
- Administer FortiGate environments through FortiManager, including ADOMs and administrative domains.
- Create, maintain, and deploy firewall policy packages and configurations; maintain backups, change management, and operational controls.
- Use FortiAnalyzer for log aggregation, security analytics, reporting, and monitoring.
- Troubleshoot and maintain centralized Fortinet management and analysis platforms.

Required Qualifications

- Proven enterprise-level experience with Fortinet security and networking technologies.
- Hands-on expertise in FortiGate configuration, administration, and operational support.
- Strong understanding of firewall policies, BGP, OSPF, static routing, SD-WAN, and high-availability design.
- Practical experience configuring IPS, Application Control, Web Filtering, SSL VPN, and IPsec VPN.
- Familiarity with FortiSwitch, FortiAP, FortiLink, VLANs, NAC, and WPA3 wireless security.
- Experience managing FortiAuthenticator, RADIUS, TACACS+, LDAP, Active Directory, MFA, certificates, and SSO.
- Working knowledge of FortiSASE, ZTNA, Secure Web Gateway, and CASB solutions.
- Proficiency with FortiManager and FortiAnalyzer, including ADOM administration, policy deployment, logging, and analytics.
- Strong troubleshooting skills with experience investigating network security incidents.
- Ability to independently manage technical responsibilities while collaborating effectively with business and technical teams.
- Excellent analytical thinking, communication, and problem-solving abilities.

Preferred Qualifications and Benefits

- Fortinet certifications such as Fortinet Certified Professional (FCP) or Fortinet Certified Solution Specialist (FCSS) are highly desirable.
- Experience designing and deploying large-scale enterprise Fortinet security solutions.
- Background supporting hybrid-cloud infrastructure and remote-access security environments.
- Deep understanding of Zero Trust Network Access and SASE design principles.
- Well-defined project scope with clear expectations and deliverables.
- Potential for future assignments and ongoing collaboration based on performance.
- Access to professional guidance and market insights through an established network.

Selection Process

Applicants will be invited to submit their professional profiles for initial review. This is followed by a 30-minute virtual business alignment call with a Human Capital Consultant to discuss project requirements. Candidates will then complete a vetting process, including background and compliance checks. A direct technical discussion with the client and a project-specific technical assessment may be required.

Work Location: This role requires in-person presence at the designated site.