L2/L3 Network Security Engineer - Fortigate Firewall

Description :

Job Title :

L2/L3 Network Security Engineer Fortinet Firewall Specialist.

Experience :

L2: 35 years in Network Security with hands-on Fortinet experience.

L3: 610+ years with advanced troubleshooting and design expertise.

Certifications (Preferred) :

NSE 4 (Fortinet Network Security Professional) Mandatory for L2.

NSE 7 or NSE 8 Preferred for L3.

Additional: ITIL, CISSP (optional).

Key Responsibilities :

L2 Responsibilities :

- Day-to-day administration and monitoring of Fortinet Firewalls (FortiGate, FortiManager, FortiAnalyzer).

- Implement basic policy changes, NAT, VPN configurations.

- Perform incident analysis, troubleshooting, and escalate complex issues to L3.

- Monitor logs and alerts via FortiAnalyzer/SIEM tools.

- Ensure compliance with security standards and assist in audits.

- Work on change requests and maintain documentation.

L3 Responsibilities :

- Design and architecture of Fortinet firewall solutions for enterprise environments.

- Advanced troubleshooting for complex network security incidents.

- Configure and optimize high availability (HA), SD-WAN, IPS, Application Control, Web Filtering, and SSL Inspection.

- Perform firmware upgrades, migrations, and integration with cloud security (FortiGate on AWS/Azure).

- Conduct root cause analysis, prepare RCA reports, and drive automation (Python/Ansible).

- Mentor L1/L2 teams and create SOPs.

- Ensure compliance with ISO 27001, PCI-DSS, NIST frameworks.

Technical Skills Required :

- Fortinet Products: FortiGate, FortiManager, FortiAnalyzer, FortiAuthenticator.

- VPN Technologies: IPSec, SSL.

- Routing Protocols: BGP, OSPF.

- Security Features: IPS, Web Filtering, Application Control, SD-WAN.

- Automation: Python, Ansible (for L3).

- Cloud Security: FortiGate on AWS/Azure/GCP.

Soft Skills :

- Strong analytical and troubleshooting skills.

- Ability to work under pressure and handle escalations.

- Excellent communication and documentation skills.