Senior Network Security Engineer – Fortinet Implementation Focused

Traversa Solutions
  • Richardson, Texas
  • Autofill and Review
7 days ago

Job Description

TRAVERSA SOLUTIONS, INC.

Senior Network Security Engineer – Fortinet Implementation Focused

Reports to: Director of Service Delivery  ·  In person, Richardson, TX  ·  Full-time, Exempt  ·  Travel 20–30%

 

About Traversa

Traversa Solutions is a network professional services firm based in Richardson, TX. We design, implement and support enterprise LAN, WLAN, SD-WAN and network security for value-added resellers, manufacturers and their end customers. Fortinet is one of our core practices, alongside HPE Aruba Networking, Juniper, Cisco and Arista, for customers in higher education, K-12, energy, industrial/OT and mid-market enterprise.

About the Role

The Senior Network Security Engineer leads Fortinet implementations from discovery through cutover and handoff. You will own the technical outcome on your projects: running design sessions with the customer, building and migrating FortiGate, SD-WAN and Security Fabric deployments, and reviewing the work of other engineers on the project. We are looking for someone who has already delivered end-to-end FortiGate deployments for external customers and can do it again from day one.

Key Responsibilities

  • Lead discovery and design workshops, and produce high-level and low-level designs for FortiGate, SD-WAN and Security Fabric deployments
  • Implement FortiGate next-generation firewall: policy and NAT, IPS, web filtering, application control, SSL inspection, VDOMs and HA clustering
  • Design and deploy Fortinet SD-WAN, including hub-and-spoke and ADVPN overlays, performance SLAs and SD-WAN rules
  • Migrate customers from other firewall platforms (Palo Alto Networks, Cisco ASA/FTD, Check Point, SonicWall), including policy conversion, testing and cutover
  • Migrate remote access from SSL VPN tunnel mode to IPsec VPN and ZTNA as customers move to FortiOS 7.6.3 and later
  • Deploy and configure FortiManager and FortiAnalyzer: ADOMs, templates, device provisioning, logging and reporting
  • Integrate FortiAuthenticator and FortiToken with RADIUS, LDAP and SAML identity sources, and FortiSwitch and FortiAP into the Security Fabric where in scope
  • Deploy FortiGate-VM in AWS and Azure
  • Act as technical lead on assigned projects: manage technical risk, review configurations and mentor other engineers
  • Support pre-sales with scoping, level-of-effort input and bill-of-materials review
  • Deliver knowledge transfer sessions and as-built documentation
  • Maintain customer documentation in SharePoint and record time and project notes in Odoo daily

Required Qualifications

  • 7 or more years of enterprise networking and network security experience
  • 4 or more years of hands-on FortiGate design and implementation, including end-to-end enterprise deployments you led
  • 2 or more years deploying Fortinet SD-WAN in production
  • 5 or more years with a value-added reseller, systems integrator, managed services provider or professional services firm, consulting directly with customers: requirements gathering, design and implementation
  • Active Fortinet NSE 4 certification (FortiOS Administrator) and an active NSE 5 or NSE 6 certification, preferably in the Secure Networking track, such as FortiManager Administrator or FortiAnalyzer Administrator
  • Strong command of TCP/IP, BGP, OSPF, IPsec, NAT, DNS, DHCP and IPv6
  • Ability to explain design decisions to both technical and non-technical stakeholders
  • Able to travel 20 to 30 percent, including overnight travel, and to support after-hours cutovers
  • Authorized to work in the United States. Visa sponsorship is not available for this role

Preferred Qualifications

  • Fortinet NSE 7 Secure Networking Architect or SASE Architect
  • FortiNAC, FortiClient EMS or FortiSASE deployment experience
  • Experience with compliance frameworks such as PCI DSS, HIPAA, NERC CIP or IEC 62443
  • Experience securing industrial and OT networks
  • Python, Ansible or the FortiOS REST API for automation
  • CCNP Security, PCNSE or another professional-level security certification
  • Bachelor's degree in a technical discipline, or equivalent experience

Core Values

We hire for alignment with Traversa's core values:

  • Communication
  • Ownership
  • Drive for Excellence and Growth
  • Problem Solving and Innovation

Benefits

  • 401(k) with up to 3 percent employer match
  • Health, dental and vision insurance
  • Health savings account with $600 annual employer contribution
  • Flexible spending account
  • Life insurance
  • Paid time off
  • Employee assistance program
  • Company-paid training and certification exams

Work Location

This is an in-person role based in our Richardson, TX office (75081).

 

Traversa does not discriminate in employment on the basis of race, color, religion, sex (including pregnancy and gender identity), national origin, political affiliation, sexual orientation, marital status, disability, genetic information, age, membership in an employee organization, retaliation, parental status, military service, or other non-merit factor.

Numbers & Facts

LocationRichardson, Texas
Websitetraversa.net

Skills

  • Amazon Web Services (AWS)unmatched
  • Ansibleunmatched
  • Application Programming Interface (API)unmatched
  • Automationunmatched
  • BGPunmatched
  • Bill of Materials (BOM)unmatched
  • CCNP - Cisco Certified Network Professionalunmatched
  • Cisco ASA (Adaptive Security Appliance)unmatched
  • Cisco Network Systemsunmatched
  • Consultingunmatched
  • Content Filtering Softwareunmatched
  • Customer/Client Researchunmatched
  • DHCP (Dynamic Host Configuration Protocol)unmatched
  • DNS (Domain Name System)unmatched
  • Dental Insuranceunmatched
  • Develop and Maintain Customersunmatched
  • Documentationunmatched
  • Firewallsunmatched
  • Geneticsunmatched
  • HIPAA (Health Insurance Portability and Accountability Act)unmatched
  • Higher Educationunmatched
  • IPsec (IP Security)unmatched
  • IPv6unmatched
  • International Electro-Technical Commission (IEC)unmatched
  • Intrusion Prevention Systemsunmatched
  • Juniper Networks Product Familyunmatched
  • Knowledge Transferunmatched
  • LDAP (Lightweight Directory Access Protocol)unmatched
  • Local Area Network (LAN)unmatched
  • Low-Level Designunmatched
  • Mentoringunmatched
  • Microsoft SharePointunmatched
  • Microsoft Windows Azureunmatched
  • Militaryunmatched
  • NAT (Network Address Translation)unmatched
  • Network Architecture/Engineeringunmatched
  • Network Monitoringunmatched
  • Network Securityunmatched
  • Open Shortest Path First Protocol (OSPF)unmatched
  • PCI-DSSunmatched
  • Pre-Salesunmatched
  • Problem Solving Skillsunmatched
  • Professional Servicesunmatched
  • Project Designunmatched
  • Python Programming/Scripting Languageunmatched
  • RADIUS (Remote Authentication Dial-In User Service)unmatched
  • REST (Representational State Transfer)unmatched
  • Remote Accessunmatched
  • Risk Managementunmatched
  • SSL-TLS (Secure Socket Layer - Transport Layer Security)unmatched
  • Sales Supportunmatched
  • Security Assertion Markup Language (SAML)unmatched
  • Service Deliveryunmatched
  • Service Level Agreement (SLA)unmatched
  • SonicWALLunmatched
  • System Integration (SI)unmatched
  • Systems Administration/Managementunmatched
  • TCP/IP (Transmission Control Protocol/Internet Protocol)unmatched
  • Technical Leadershipunmatched
  • VPN (Virtual Private Network)unmatched
  • Value-Added Resellers (VAR)unmatched
  • Virtual Machine (VM)unmatched
  • Vision Planunmatched
  • Wide Area Network (WAN)unmatched
  • Willing to Travelunmatched
  • Wireless LANunmatched

Level up your application

Professional resume templates

Browse dozens of recruiter approved resume templates, layouts and formats. Choose your favorite and make it your own in minutes.

Free resume templates

Resume Builder

Improve your existing resume or start from scratch and create a standout, ATS-friendly resume. Add job-specific content, download and apply.

Resume Builder