Key Responsibilities:
- Configure, manage, and troubleshoot Fortinet solutions, including FortiGate, FortiWeb, FortiADC, FortiManager, and FortiAnalyzer.
- Manage Cisco ACI fabric, policy-based networking, application profiles, tenants, bridge domains, contracts, EPGs, and policies.
- Administer Cisco Firepower Threat Defense (FTD), FMC, FortiGate firewalls, VPNs, and related security appliances.
- Operate and maintain Web Application Firewalls (WAFs) to protect applications.
- Implement and maintain IPSec/SSL VPNs, including site-to-site and remote-access configurations.
- Monitor firewall, IPS, and endpoint security logs and alerts.
- Coordinate with cybersecurity teams on incident detection, response, and forensic investigations.
- Participate in emergency response activities.
- Conduct network and security audits and prepare compliance reports.
- Manage security assets, firmware upgrades, patching, and iOS upgrades.
- Document network designs, configurations, disaster recovery procedures, and change management processes.
- Mentor junior staff and provide Level 3 support for escalated network and security issues.
Minimum Qualifications:
- Bachelor's degree in Computer Science, Information Technology, or a related field.
- 7+ years of enterprise network administration experience.
- 5+ years of experience managing firewalls and cybersecurity systems.
- Proven hands-on experience with FortiWeb, FortiADC, and Cisco ACI.
- Strong experience with FortiGate, Cisco Firepower, and VPN solutions.
- Practical experience deploying and managing Cisco ISE for policy enforcement, 802.1X authentication, posture assessment, and dynamic VLAN assignments.
- Experience provisioning and implementing network firewall and application security solutions.
Required Technical Skills:
- Strong knowledge of Layer 2/Layer 3 networking, EIGRP, and VXLAN.
- Expertise in Cisco ACI architecture and configuration.
- Hands-on experience with Cisco FTD and FMC.
- Proficiency in FortiGate configuration and troubleshooting.
- Experience with NGFW, IDS/IPS, and VPN technologies.
- Understanding of TCP/IP networking and web application architecture.
- Proficiency in Cisco ISE, including profiling, posture assessment, TrustSec, pxGrid integration, and Active Directory integration.
- Python or Ansible scripting and automation knowledge would be an advantage.
Preferred Certifications:
- CCNP Enterprise or Security.
- Cisco Certified Specialist ACI or CCIE Enterprise Infrastructure/Security.
- Fortinet NSE4 NSE7.
- Certified Ethical Hacker (CEH) optional.
- ITIL Foundation an advantage.
Key Soft Skills:
- Strong analytical and problem-solving abilities.
- Ability to manage multiple high-priority tasks and projects.
- Excellent communication and documentation skills.
- Leadership and mentoring capabilities.
- Security-first mindset and attention to detail.
Desired Candidate Profile
- Bachelor's degree in Computer Science, Information Technology, or a related field.
- 7+ years of enterprise network administration experience.
- 5+ years of experience managing firewalls and cybersecurity systems.
- Proven hands-on experience with FortiWeb, FortiADC, and Cisco ACI.
- Strong experience with FortiGate, Cisco Firepower, and VPN solutions.
- Practical experience deploying and managing Cisco ISE for policy enforcement, 802.1X authentication, posture assessment, and dynamic VLAN assignments.
- Experience provisioning and implementing network firewall and application security solutions.
- Strong knowledge of Layer 2/Layer 3 networking, EIGRP, and VXLAN.
- Expertise in Cisco ACI architecture and configuration.
- Hands-on experience with Cisco FTD and FMC.
- Proficiency in FortiGate configuration and troubleshooting.
- Experience with NGFW, IDS/IPS, and VPN technologies.
- Understanding of TCP/IP networking and web application architecture.
- Proficiency in Cisco ISE, including profiling, posture assessment, TrustSec, pxGrid integration, and Active Directory integration.
- Python or Ansible scripting and automation knowledge would be an advantage.
- CCNP Enterprise or Security.
- Cisco Certified Specialist ACI or CCIE Enterprise Infrastructure/Security.
- Fortinet NSE4 NSE7.
- Certified Ethical Hacker (CEH) optional.
- ITIL Foundation an advantage.
- Strong analytical and problem-solving abilities.
- Ability to manage multiple high-priority tasks and projects.
- Excellent communication and documentation skills.
- Leadership and mentoring capabilities.
- Security-first mindset and attention to detail.