Senior Network Engineer

Position Summary 

IPRO MSP is adding a senior network engineer to our team to build, manage, and maintain network and security infrastructure for our managed services clients and colocation datacenters. The environment is Fortinet: FortiGate firewalls with HA pairs and SD-WAN, FortiSwitch, and FortiAP, with FortiSASE, FortiEMS, and ZTNA expanding. The position is also our technical point of contact with a third-party SOC. 

This position handles most moves, adds, and changes, and builds out the programs behind them: centralized firewall management, monitoring, lifecycle policy, and documentation. The MSP Manager is a network engineer by background and works the substantial projects alongside this position; day-to-day decisions sit with the engineer. Staff engineers and admins cover routine break/fix. This is a hands-on engineering position. 

More about IPRO at teamipro.com. 

First 90 Days 

A plan and visible movement are expected; completion is not: 

• Audit Fortinet deployments across clients and colos 
• Begin a phased FortiManager rollout 
• Expand Auvik coverage, alerting, and dashboards 
• Draft the network equipment lifecycle policy 
• Map ISP circuit monitoring and begin SOC alert tuning 

Responsibilities 

Network and security operations: 

• FortiGate firewalls across clients and colos: configuration, policy, HA pairs, SD-WAN, IPS/IDS 
• FortiSwitch and FortiAP; VPN, segmentation, and wireless 
• FortiSASE, ZTNA, and FortiEMS administration where deployed 
• Escalated network and security issues; project work with TAMs and sales engineers 

Colocation datacenters: 

• Higher-end Fortinet platforms under redundancy and formal change management; maintenance windows planned and executed with rollback 

SOC partnership: 

• Technical liaison to a Fortinet-specialized SOC; implementations on our side (log forwarding, onboarding) and ongoing alert tuning 
• Investigation and remediation of findings; decision authority on escalated events 

Programs and build-out: 

• New client onboarding: review existing configurations (often non-Fortinet), assess, and provision replacement gear 
• FortiManager deployment; Auvik expansion with ticketing integration 
• Lifecycle policy: firmware, config backups, patch cadence, change management 
• ISP circuit monitoring, carrier escalation, and uptime reporting 
• Documentation in IT Glue; repeatable standards 

Environment 

Core: FortiGate, FortiManager, FortiAnalyzer, FortiSwitch, FortiAP, SD-WAN. Supporting systems: Auvik, NinjaRMM, IT Glue, Salesforce. FortiSASE, FortiEMS, and ZTNA are expanding. Client onboarding regularly involves other vendors' equipment; a senior engineer is expected to assess, support, and replace whatever is in the rack. 

Requirements 

Titles vary from company to company, so demonstrated work counts for more than what the last position was called. Senior engineers, engineers, and senior administrators who have designed, built, and fixed production networks without a script are all worth a conversation. Experience that mostly consists of following procedures someone else wrote is not a fit for this job. 

• Hands-on FortiGate across multiple production environments, including HA pairs, where the design and changes were yours 
• Fundamentals solid enough to troubleshoot from first principles: TCP/IP, routing (BGP/OSPF), switching/VLANs, VPN, DNS, DHCP 
• A record of writing network or security standards and policies, not only working within them 
• Centralized firewall management; FortiManager strongly preferred 
• Deployment or substantial tuning of a network monitoring platform 
• Experience working with a SOC, MSSP, or security monitoring partner 
• Datacenter experience under formal change management 

Certifications: NSE, FCP, or FCSS is a plus, and the company pays for more of them. Production work counts for more than any certificate. 

Preferred: 

• MSP experience 
• FortiSASE, ZTNA, FortiEMS, or SD-WAN deployments 
• Auvik; ISP carrier management; Azure networking 

Schedule and Expectations 

• Monday–Friday, 8:00 AM–5:00 PM Central, based in Van Alstyne, TX; most weeks hold to it 
• Time is logged in tickets, as at any MSP; the job is measured on work completed, not minutes at a desk 
• Maintenance windows and occasional incidents happen after hours; after-hours time is taken back as comp time 
• No standing on-call rotation; after-hours security escalations are rare, and handling them is part of the job 
• Hybrid is set by the work: staging and buildouts require being on site with the gear — racking, cabling, console access; monitoring, tuning, and administrative work can be done remotely 
• Occasional client site visits and colo trips 

Compensation and Benefits 

• $85,000–$120,000/year, set by demonstrated level 
• Health, dental, and vision insurance 
• 401(k) with 4% company match 
• 13 days of PTO per year (prorated in year one), plus one additional day per year of service; PTO covers both vacation and sick time. Paid holidays in addition 
• Comp time for after-hours and overtime work 
• Company-paid training and certifications where there is a business case 

IPRO is an equal opportunity employer. 

IPRO is a Dallas-based Managed Services Provider (MSP) and VoIP cloud hosting company founded in 2004. Focused on flexible hosted solutions for local small and medium-sized businesses, IPRO has grown into a trusted IT partner for national and global enterprises. The company specializes in delivering proactive, customized IT solutions that streamline operations, enhance security, and support digital transformation.

IPRO’s services include managed IT, cloud infrastructure, VoIP systems, and hybrid workspace solutions. Their approach emphasizes operational efficiency, cost-effective scalability, and hands-on support—allowing clients to focus on their core business while IPRO handles the technology. With a strong leadership team and a commitment to tailored service, IPRO positions itself as a strategic partner in long-term business growth