Senior Network & Security Engineer -Fortinet SASE Specialist

Paxus; Sydney; On-site; AUD 170,000 - 230,000; Full time

Job summary

Paxus is seeking a Senior Network & Security Engineer / Fortinet SASE Specialist in Sydney to lead a large-scale Fortinet SASE transformation across enterprise environments including data centers, Azure cloud, and branch locations. The role requires deep Fortinet expertise and strong routing, security policy design, and cloud connectivity skills.

The successful candidate will design and implement secure, scalable networks with redundancy and cutover support, aligning with IT infrastructure,

Qualifications

• Minimum 5+ years in network and security engineering roles.
• Hands-on Fortinet SASE deployment experience.
• Experience with data center, Azure cloud, and branch connectivity.

Responsibilities

• Design and implement Fortinet SASE architecture across enterprise environments.
• Deploy FortiSASE capabilities: SD-WAN, FWaaS, SWG, CASB, ZTNA.
• Implement secure connectivity across data centers, Azure, and branches.
• Configure FortiGate firewalls across enterprise sites.
• Ensure high availability and resilient network designs.
• Configure and troubleshoot BGP, OSPF, IPSec VPN, and traffic segmentation.
• Collaborate with infrastructure, cloud and security teams.
• Produce HLD/LLD and implementation documentation.

Skills

Fortinet SASE

SD-WAN

IPSec VPN

BGP

OSPF

Azure Networking

F5 LTM

Network Segmentation

ZTNA

Troubleshooting

Education

Fortinet NSE / FCSS / FCX

Cisco CCNP

Job description

Senior Network & Security Engineer -Fortinet SASE Specialist

Location:Sydney
Duration:6 months + 6 months

Security Clearance: Must have Baseline Clearance or higher

Senior Network & Security Engineer / Fortinet SASE Specialist

Overview
We are seeking a highly experienced Senior Network & Security Engineer / Fortinet SASE Specialist to lead and support the implementation of a large-scale Fortinet SASE transformation across the departments enterprise environments. The environment includes enterprise Data Centers, Azure cloud infrastructure, and multiple branch locations with full redundancy and high availability requirements. The successful candidate will possess deep technical expertise across Fortinet security platforms, enterprise networking, cloud connectivity, routing, and data centre technologies.
Key Responsibilities

• Design and implement Fortinet SASE architecture across enterprise environments
• Deploy and configure FortiSASE capabilities (SD-WAN, FWaaS, SWG, CASB, ZTNA)
• Implement secure connectivity across Data Centers, Azure cloud, branch offices, Internet and SaaS services
• Configure and support FortiGate firewalls across enterprise sites
• Implement high availability and resilient network designs
• Configure and troubleshoot BGP, OSPF, IPSec VPN, dynamic routing, traffic steering and segmentation
• Support integration with Cisco Nexus data centre infrastructure
• Configure and support F5 load balancing environments
• Configure FortiClient VPN and ZTNA solutions
• Support migration and cutover activities
• Produce HLD/LLD and implementation documentation
• Perform complex troubleshooting
• Collaborate with infrastructure, cloud and security teams
• Provide technical leadership
• Lead or support migration of email gateway to Azure-based services
• Design secure mail flow including SMTP and MX records
• Ensure anti-spam, anti-phishing and DLP controls
• Perform testing and cutover

Technical Skills

• Strong hands-on experience implementing Fortinet SASE solutions
• Strong enterprise routing and switching knowledge
• Experience with BGP, OSPF, SD-WAN, IPSec VPN, HA
• Azure networking and hybrid connectivity
• F5 load balancers (LTM)
• Network segmentation and security policy design
• Strong troubleshooting skills

Desirable Certifications

• Fortinet NSE / FCSS / FCX
• Cisco CCNP or CAzure Networking certifications

Paxus values diversity and welcomes applications from Indigenous Australians, people from diverse cultural and linguistic backgrounds and people living with a disability. If you require an adjustment to the recruitment process, including the application form in an alternate format, please contact me on the above contact details.