T

Senior Network Security Engineer – Fortinet Implementation Focused

Traversa Solutions Inc Town of Clayton, Wisconsin, United States

10 h ago
security Senior (5-10 yrs) Full-time United States
Create a free account to apply — email only, no card. You can also save this posting or score it against your profile with AI.

About the role

The Senior Network Security Engineer leads end-to-end Fortinet implementations, including design, migration, and deployment of security infrastructure. They are responsible for managing technical project outcomes, mentoring team members, and supporting pre-sales activities.

What they look for

FortiGate SD-WAN Network security FortiManager FortiAnalyzer Firewall migration IPsec VPN ZTNA TCP/IP BGP OSPF Network design Security fabric Identity management Cloud security Technical leadership

Requirements

Candidates must have at least 7 years of enterprise networking experience, with 4+ years specifically in FortiGate design and implementation. Active Fortinet NSE 4 and NSE 5 or 6 certifications are required, along with the ability to travel 20-30% of the time.

Benefits

401(k) Health insurance Dental insurance Vision insurance Health savings account Flexible spending account Life insurance Paid time off Employee assistance program Company-paid training Certification exams

Full description

TRAVERSA SOLUTIONS, INC.

Senior Network Security Engineer – Fortinet Implementation Focused

Reports to: Director of Service Delivery  ·  In person, Richardson, TX  ·  Full-time, Exempt  ·  Travel 20–30%

 

About Traversa

Traversa Solutions is a network professional services firm based in Richardson, TX. We design, implement and support enterprise LAN, WLAN, SD-WAN and network security for value-added resellers, manufacturers and their end customers. Fortinet is one of our core practices, alongside HPE Aruba Networking, Juniper, Cisco and Arista, for customers in higher education, K-12, energy, industrial/OT and mid-market enterprise.

About the Role

The Senior Network Security Engineer leads Fortinet implementations from discovery through cutover and handoff. You will own the technical outcome on your projects: running design sessions with the customer, building and migrating FortiGate, SD-WAN and Security Fabric deployments, and reviewing the work of other engineers on the project. We are looking for someone who has already delivered end-to-end FortiGate deployments for external customers and can do it again from day one.

Key Responsibilities

  • Lead discovery and design workshops, and produce high-level and low-level designs for FortiGate, SD-WAN and Security Fabric deployments
  • Implement FortiGate next-generation firewall: policy and NAT, IPS, web filtering, application control, SSL inspection, VDOMs and HA clustering
  • Design and deploy Fortinet SD-WAN, including hub-and-spoke and ADVPN overlays, performance SLAs and SD-WAN rules
  • Migrate customers from other firewall platforms (Palo Alto Networks, Cisco ASA/FTD, Check Point, SonicWall), including policy conversion, testing and cutover
  • Migrate remote access from SSL VPN tunnel mode to IPsec VPN and ZTNA as customers move to FortiOS 7.6.3 and later
  • Deploy and configure FortiManager and FortiAnalyzer: ADOMs, templates, device provisioning, logging and reporting
  • Integrate FortiAuthenticator and FortiToken with RADIUS, LDAP and SAML identity sources, and FortiSwitch and FortiAP into the Security Fabric where in scope
  • Deploy FortiGate-VM in AWS and Azure
  • Act as technical lead on assigned projects: manage technical risk, review configurations and mentor other engineers
  • Support pre-sales with scoping, level-of-effort input and bill-of-materials review
  • Deliver knowledge transfer sessions and as-built documentation
  • Maintain customer documentation in SharePoint and record time and project notes in Odoo daily

Required Qualifications

  • 7 or more years of enterprise networking and network security experience
  • 4 or more years of hands-on FortiGate design and implementation, including end-to-end enterprise deployments you led
  • 2 or more years deploying Fortinet SD-WAN in production
  • 5 or more years with a value-added reseller, systems integrator, managed services provider or professional services firm, consulting directly with customers: requirements gathering, design and implementation
  • Active Fortinet NSE 4 certification (FortiOS Administrator) and an active NSE 5 or NSE 6 certification, preferably in the Secure Networking track, such as FortiManager Administrator or FortiAnalyzer Administrator
  • Strong command of TCP/IP, BGP, OSPF, IPsec, NAT, DNS, DHCP and IPv6
  • Ability to explain design decisions to both technical and non-technical stakeholders
  • Able to travel 20 to 30 percent, including overnight travel, and to support after-hours cutovers
  • Authorized to work in the United States. Visa sponsorship is not available for this role

Preferred Qualifications

  • Fortinet NSE 7 Secure Networking Architect or SASE Architect
  • FortiNAC, FortiClient EMS or FortiSASE deployment experience
  • Experience with compliance frameworks such as PCI DSS, HIPAA, NERC CIP or IEC 62443
  • Experience securing industrial and OT networks
  • Python, Ansible or the FortiOS REST API for automation
  • CCNP Security, PCNSE or another professional-level security certification
  • Bachelor's degree in a technical discipline, or equivalent experience

Core Values

We hire for alignment with Traversa's core values:

  • Communication
  • Ownership
  • Drive for Excellence and Growth
  • Problem Solving and Innovation

Benefits

  • 401(k) with up to 3 percent employer match
  • Health, dental and vision insurance
  • Health savings account with $600 annual employer contribution
  • Flexible spending account
  • Life insurance
  • Paid time off
  • Employee assistance program
  • Company-paid training and certification exams

Work Location

This is an in-person role based in our Richardson, TX office (75081).

 

Traversa does not discriminate in employment on the basis of race, color, religion, sex (including pregnancy and gender identity), national origin, political affiliation, sexual orientation, marital status, disability, genetic information, age, membership in an employee organization, retaliation, parental status, military service, or other non-merit factor.

Similar roles