Role Summa

The Senior Network Security Engineer is responsible for architecting, deploying, and centrally managing enterprise-grade security infrastructure with a primary focus on the Fortinet Security Fabric. This role serves as the subject matter expert for Forti Manager, spearheading the design and execution of automated Zero-Touch Provisioning (ZTP) workflows and Secure SD-WAN deployments across extensive data center, campus, and branch environments.

Key Responsibilities

Automated Provisioning & Centralized Management

• Design and scale automated Zero-Touch Provisioning (ZTP) pipelines to accelerate the deployment of FortiGate firewalls and branch infrastructure.

• Administer Forti Manager centralized environments, establishing standardized Administrative Domains (ADOMs), device life-cycle tracking, provisioning templates, CLI scripts, and policy packages.

• Develop and maintain meta-fields, variables, and runtime scripts within Forti Manager to ensure highly adaptive, programmatic edge configuration rollouts.

Security Architecture & Engineering

• Deploy and operate FortiGate firewalls in High Availability (HA) clusters, Virtual Domains (VDOMs), and multi-tenant architectures.

• Architect Fortinet Secure SD-WAN, including overlay link design, SLA-based path selection rules, application steering, and Auto-Discovery VPN (ADVPN).

• Integrate and maintain the broader Fortinet stack, including Forti Switch, FortiAP, and Forti Analyzer.

• Implement Zero-Trust Network Architecture (ZTNA) and robust micro-segmentation strategies across hybrid environments.

Operations, Compliance & Leadership

• Analyze telemetry data from Forti Analyzer to construct operational dashboards, security event correlation models, and long-term compliance audit reporting. 

• Lead technical project delivery, conduct vulnerability assessments, and act as a Tier-3 escalation point for critical network or security outages. 

• Mentor junior engineering staff and establish consistent configuration standards, runbooks, and architectural documentation

Qualifications & Skills

Technical Requirements

• Deep, expert-level competency in Forti Manager and FortiGate, with documented experience designing complex configuration templates and ZTP blueprints.

• Advanced knowledge of core networking protocols, including BGP, OSPF, IPsec VPNs, advanced routing/switching, and SD-WAN path management.

• Proficiency with scripting languages (e.g., Python, Jinja2, Ansible, or FortiManager CLI scripting) used to optimize network automation workflows. 

• Strong understanding of security frameworks (such as NIST, ISO 27001, or PCI-DSS) to ensure automated templates strictly enforce organizational compliance

ry

The Fortinet Firewall Specialist

Location: US onsite

Resource: US Citizen

Band: B3

Key Responsibilities

VMS/ACS Operations & Administration

• Administer and manage enterprise Video Management Systems (VMS), including camera onboarding, configuration, and lifecycle management.

• Configure recording rules, retention policies, motion detection, analytics, and user access controls.

• Manage camera groups, roles, permissions, views, and evidence handling workflows.

• Ensure optimal system performance, storage utilization, and video availability.

• Administer and manage Access Control Systems including cardholder lifecycle management (creation, modification, deactivation).

• Configure access levels, access groups, schedules, and door permissions as per security policy.

• Manage credential technologies (RFID cards, biometric credentials, mobile credentials, PINs).

• Ensure accurate and timely access provisioning/de‑provisioning aligned with HR and identity workflows.

System Implementation & Integration

• Support deployment and commissioning of IP cameras, encoders, NVRs, VMS servers, and storage infrastructure.

• Integrate VMS with Access Control Systems (ACS), Visitor Management Systems, PSIM, SOC dashboards, and analytics platforms.

• Participate in solution design, capacity planning, storage sizing, and architecture reviews for new and upgraded deployments.

• Coordinate with OEMs, system integrators, and infrastructure teams during rollout and migrations.

• Support implementation and commissioning of access control hardware including controllers, readers, biometric devices, turnstiles, and door hardware.

• Integrate ACS with Identity Management, HR systems, Visitor Management Systems, CCTV/VMS, fire alarm systems, and building management systems.

• Participate in design reviews, technical evaluations, and OEM/vendor coordination during new deployments or modernization projects.

Monitoring, Troubleshooting & Support

• Monitor VMS health, camera status, server services, storage, and network connectivity.

• Troubleshoot application, camera, network, server, and storage‑related issues.

• Provide L2/L3 operational support for incidents, outages, and video retrieval requests within SLA.

• Support critical investigations by ensuring timely and accurate video export and validation.

• Monitor ACS system health, logs, alarms, and events to ensure system availability.

• Troubleshoot ACS application, controller, network, and device‑level issues.

• Provide L

• 2/L3 support for incidents, outages, and access issues within SLA.

• Coordinate with OEMs and integrators (VENDORS ) for defect resolution and upgrades.

Video Retrieval, Export & Compliance

• Perform secure video export for investigations, legal, audit, and customer requests.

• Apply encryption, watermarking, password protection, and chain‑of‑custody controls during video handling.

• Ensure retention policies (FIFO / statutory retention) are enforced consistently across sites.

• Support audits by providing logs, evidence records, and system reports.

Security, Compliance & Governance

• Ensure VMS/ACS operations comply with organizational security policies, privacy requirements, and contractual obligations.

• Maintain audit trails for camera access, live viewing, exports, and configuration changes.

• Support vulnerability remediation, system hardening, and periodic security reviews.

• Ensure compliance with customer MSA, regulatory, and data‑retention requirements.

• Maintain logs, audit trails, and reports for investigations, audits, and compliance reviews.

• Support periodic access reviews and certification activities.

• Ensure fail‑safe and life‑safety compliance for emergency exits and fire‑alarm integrations.

Change & Release Management

• Raise and execute Change Management Requests (CMR/ECR) for VMS/ACS upgrades, patches, configuration changes, and design modifications.

• Perform risk assessment, rollback planning, and post‑change validation.

• Coordinate planned maintenance and downtime with stakeholders.

• Coordinate with stakeholders for planned downtime and maintenance windows.

Documentation & Knowledge Transfer

• Maintain SOPs, system architecture diagrams, runbooks, and asset inventories.

• Support Knowledge Transfer (KT) for operations and secondary support teams.

• Prepare audit‑ready documentation and handover artifacts.

Technical Skills & Competencies

• Strong hands‑on experience with enterprise VMS platforms (e.g., centralized VMS, distributed architectures).

• Knowledge of IP cameras, codecs (H.264/H.265), streaming, and recording mechanisms.

• Experience with storage technologies (SAN/NAS, RAID, retention sizing).

• Good understanding of networking (TCP/IP, multicast, VLANs, bandwidth optimization).

• Familiarity with video analytics, AI‑based detection, and event correlation.

• Experience integrating VMS with ACS and SOC platforms.

• Strong knowledge of Access Control Systems (enterprise‑grade ACS platforms).

• Hands‑on experience with controllers, readers, biometric devices, turnstiles, and exit systems.

• Understanding of ACS communication protocols (e.g., OSDP, Wiegand).

• Experience in system integrations using APIs or middleware.

• Good understanding of networking concepts (TCP/IP, VLANs, firewalls) relevant to ACS.

• Familiarity with databases, logs, and reporting tools.

• Knowledge of security best practices, compliance, and physical security standards.

Certification (Mandatory):

1. VMS:

• Milestone

1. ACS:

• Lenel

Soft Skills

• Strong troubleshooting and analytical capabilities.

• Clear, professional communication with business, security, and leadership stakeholders.

• Process‑driven with strong focus on documentation and compliance.

• Ability to support critical / time‑sensitive investigation scenarios.

• Ability to work in 24x7 operational environments (if applicable).