Senior Network Security Engineer – Fortinet Implementation Focused
Traversa Solutions Inc Town of Clayton, Wisconsin, United States
Applying here? Try the free cover letter tool — paste this posting and your résumé, no account needed.
About the role
The Senior Network Security Engineer leads end-to-end Fortinet implementations, including design, migration, and deployment of security infrastructure. They are responsible for managing technical project outcomes, mentoring team members, and supporting pre-sales activities.
What they look for
Requirements
Candidates must have at least 7 years of enterprise networking experience, with 4+ years specifically in FortiGate design and implementation. Active Fortinet NSE 4 and NSE 5 or 6 certifications are required, along with the ability to travel 20-30% of the time.
Benefits
Full description
TRAVERSA SOLUTIONS, INC.
Senior Network Security Engineer – Fortinet Implementation Focused
Reports to: Director of Service Delivery · In person, Richardson, TX · Full-time, Exempt · Travel 20–30%
About Traversa
Traversa Solutions is a network professional services firm based in Richardson, TX. We design, implement and support enterprise LAN, WLAN, SD-WAN and network security for value-added resellers, manufacturers and their end customers. Fortinet is one of our core practices, alongside HPE Aruba Networking, Juniper, Cisco and Arista, for customers in higher education, K-12, energy, industrial/OT and mid-market enterprise.
About the Role
The Senior Network Security Engineer leads Fortinet implementations from discovery through cutover and handoff. You will own the technical outcome on your projects: running design sessions with the customer, building and migrating FortiGate, SD-WAN and Security Fabric deployments, and reviewing the work of other engineers on the project. We are looking for someone who has already delivered end-to-end FortiGate deployments for external customers and can do it again from day one.
Key Responsibilities
- Lead discovery and design workshops, and produce high-level and low-level designs for FortiGate, SD-WAN and Security Fabric deployments
- Implement FortiGate next-generation firewall: policy and NAT, IPS, web filtering, application control, SSL inspection, VDOMs and HA clustering
- Design and deploy Fortinet SD-WAN, including hub-and-spoke and ADVPN overlays, performance SLAs and SD-WAN rules
- Migrate customers from other firewall platforms (Palo Alto Networks, Cisco ASA/FTD, Check Point, SonicWall), including policy conversion, testing and cutover
- Migrate remote access from SSL VPN tunnel mode to IPsec VPN and ZTNA as customers move to FortiOS 7.6.3 and later
- Deploy and configure FortiManager and FortiAnalyzer: ADOMs, templates, device provisioning, logging and reporting
- Integrate FortiAuthenticator and FortiToken with RADIUS, LDAP and SAML identity sources, and FortiSwitch and FortiAP into the Security Fabric where in scope
- Deploy FortiGate-VM in AWS and Azure
- Act as technical lead on assigned projects: manage technical risk, review configurations and mentor other engineers
- Support pre-sales with scoping, level-of-effort input and bill-of-materials review
- Deliver knowledge transfer sessions and as-built documentation
- Maintain customer documentation in SharePoint and record time and project notes in Odoo daily
Required Qualifications
- 7 or more years of enterprise networking and network security experience
- 4 or more years of hands-on FortiGate design and implementation, including end-to-end enterprise deployments you led
- 2 or more years deploying Fortinet SD-WAN in production
- 5 or more years with a value-added reseller, systems integrator, managed services provider or professional services firm, consulting directly with customers: requirements gathering, design and implementation
- Active Fortinet NSE 4 certification (FortiOS Administrator) and an active NSE 5 or NSE 6 certification, preferably in the Secure Networking track, such as FortiManager Administrator or FortiAnalyzer Administrator
- Strong command of TCP/IP, BGP, OSPF, IPsec, NAT, DNS, DHCP and IPv6
- Ability to explain design decisions to both technical and non-technical stakeholders
- Able to travel 20 to 30 percent, including overnight travel, and to support after-hours cutovers
- Authorized to work in the United States. Visa sponsorship is not available for this role
Preferred Qualifications
- Fortinet NSE 7 Secure Networking Architect or SASE Architect
- FortiNAC, FortiClient EMS or FortiSASE deployment experience
- Experience with compliance frameworks such as PCI DSS, HIPAA, NERC CIP or IEC 62443
- Experience securing industrial and OT networks
- Python, Ansible or the FortiOS REST API for automation
- CCNP Security, PCNSE or another professional-level security certification
- Bachelor's degree in a technical discipline, or equivalent experience
Core Values
We hire for alignment with Traversa's core values:
- Communication
- Ownership
- Drive for Excellence and Growth
- Problem Solving and Innovation
Benefits
- 401(k) with up to 3 percent employer match
- Health, dental and vision insurance
- Health savings account with $600 annual employer contribution
- Flexible spending account
- Life insurance
- Paid time off
- Employee assistance program
- Company-paid training and certification exams
Work Location
This is an in-person role based in our Richardson, TX office (75081).
Traversa does not discriminate in employment on the basis of race, color, religion, sex (including pregnancy and gender identity), national origin, political affiliation, sexual orientation, marital status, disability, genetic information, age, membership in an employee organization, retaliation, parental status, military service, or other non-merit factor.
Similar roles
-
Director of Cybersecurity
Detroit Wayne Integrated Health Network Detroit, Michigan, United States
-
Cybersecurity Administrator
Lutheran Community Services Northwest SeaTac, Washington, United States · $83K–$144K/yr
-
Staff AI Security Engineer
Agoda Singapore, Singapore · SGD 131K–SGD 196K/yr
-
Security Engineer II
Coinstar United States · $117K–$147K/yr
-
Security Engineer
Cala Health United States · $155K–$190K/yr
-
Security Engineer II - Red Team
Microsoft Redmond, Washington, United States · $102K–$219K/yr