Fortinet Firewall Lead
About the role
Location: Secaucus, NJ | Duration: Full Time
The Senior Network Security Engineer is responsible for architecting, deploying, and centrally managing enterprise-grade security infrastructure with a primary focus on the Fortinet Security Fabric. This role serves as the subject matter expert for Forti Manager, spearheading the design and execution of automated Zero-Touch Provisioning (ZTP) workflows and Secure SD-WAN deployments across extensive data center, campus, and branch environments.
Responsibilities
- Automated Provisioning & Centralized Management
- Design and scale automated Zero-Touch Provisioning (ZTP) pipelines to accelerate the deployment of FortiGate firewalls and branch infrastructure.
- Administer Forti Manager centralized environments, establishing standardized Administrative Domains (ADOMs), device life-cycle tracking, provisioning templates, CLI scripts, and policy packages.
- Develop and maintain meta-fields, variables, and runtime scripts within Forti Manager to ensure highly adaptive, programmatic edge configuration rollouts.
- Security Architecture & Engineering
- Deploy and operate FortiGate firewalls in High Availability (HA) clusters, Virtual Domains (VDOMs), and multi-tenant architectures.
- Architect Fortinet Secure SD-WAN, including overlay link design, SLA-based path selection rules, application steering, and Auto-Discovery VPN (ADVPN).
- Integrate and maintain the broader Fortinet stack, including Forti Switch, FortiAP, and Forti Analyzer.
- Implement Zero-Trust Network Architecture (ZTNA) and robust micro-segmentation strategies across hybrid environments.
- Operations, Compliance & Leadership
- Analyze telemetry data from Forti Analyzer to construct operational dashboards, security event correlation models, and long-term compliance audit reporting.
- Lead technical project delivery, conduct vulnerability assessments, and act as a Tier-3 escalation point for critical network or security outages.
- Mentor junior engineering staff and establish consistent configuration standards, runbooks, and architectural documentation.
- Operational Management
- Triaging and resolution of tickets; establish incident monitoring protocols and provide technical guidance to enable permanent fixes for recurring issues.
- SLA Monitoring: Review SLA performance across the team, represent the function in meetings, and ensure consistent delivery quality.
- Performance tuning and optimization: Collaborate with technical teams in managing production support activities regarding incident resolution, efficient deployments, and implementation of changes.
- Perform system improvements: Collaborate with technical teams to review mitigation measures and proposed improvement actions.
- Handling disaster recovery: Develop disaster recovery and data backup plans to ensure system resilience and quick restoration in case of disruptions.
- Reporting and stakeholder engagement: Participate in Quarterly Business Reviews (QBRs), manage client expectations, and ensure alignment with business objectives.
- Team Management: Supervise team members by overseeing daily operations, conducting performance appraisals, and providing feedback.
- Knowledge base and continuous learning: Update and maintain documentation for complex issues, share best practices within the team, and support ongoing knowledge enhancement to improve service efficiency.
Qualifications & Skills
- Technical Requirements
- Deep, expert-level competency in Forti Manager and FortiGate, with documented experience designing complex configuration templates and ZTP blueprints.
- Advanced knowledge of core networking protocols, including BGP, OSPF, IPsec VPNs, advanced routing/switching, and SD-WAN path management.
- Proficiency with scripting languages (e.g., Python, Jinja2, Ansible, or FortiManager CLI scripting) used to optimize network automation workflows.
- Strong understanding of security frameworks (such as NIST, ISO 27001, or PCI-DSS) to ensure automated templates strictly enforce organizational compliance.
- Mandatory Skills
- Fortinet Firewall Experience: 8–10 Years
Pay
The expected compensation for this role ranges from $80,000 to $158,000. Final compensation will depend on various factors, including your geographical location, minimum wage obligations, skills, and relevant experience.
Benefits
Eligible for Wipro's standard benefits including a full range of medical and dental benefits options, disability insurance, paid time off (inclusive of sick leave), and other paid and unpaid leave options.
Schedule
Full Time