Firewall Engineer

Tekshapers; Toronto; On-site; CAD 110,000 - 150,000; Full time

Job summary

Tekshapers is seeking a senior security network engineer with deep Fortinet FortiGate expertise and strong cloud networking experience across Azure, AWS, and OCI. The role focuses on deploying and managing FortiGate in complex, hybrid environments with FortiManager/Analyzer for centralized policy and logging.

The ideal candidate will design secure hybrid networks, configure IPS rules and application control, and ensure robust routing using BGP/OSPF.

Qualifications

• 4+ years hands-on experience with Fortinet security stack and public cloud networking (Azure/AWS/OCI).
• Deep expertise in FortiOS including configuring security policies, user authentication, and SSL/IPSec VPNs.
• Experience creating IPS rules and application control.
• Experience managing FortiGate devices at scale using FortiManager and FortiAnalyzer.
• Strong knowledge of Fortinet SD-WAN.
• FortiGate virtualization experience deploying FortiGate-VM in public clouds.
• Proficiency in routing protocols: BGP, OSPF, and static routing, used in hybrid cloud.
• Azure/AWS: Virtual Networks design, configuration, and peering.
• ExpressRoute/DirectConnect/OCI FastConnect and UDRs to manage traffic through FortiGate NVA.
• ISP backbone collaboration and troubleshooting.
• Soft Skills: Troubleshooting complex issues across the OSI stack.
• Strong grasp of security concepts and standards (NIST/CIS).
• Excellent communication and documentation skills.

Skills

Fortinet expertise

FortiOS knowledge

Cloud networking

Networking protocols (BGP/OSPF)

Troubleshooting OSI stack

Documentation

Communication skills

Security concepts (NIST/CIS)

Tools

FortiOS

FortiManager

FortiAnalyzer

FortiGate-VM

Azure

AWS

OCI

Job description

• We are looking for deep expertise in Fortinets security stack with a strong command of public cloud networking ecosystem (Azure/AWS/OCI).
• Candidate will have minimum 4 years of hands-on experience with latest tools and software.
• FortiGate:- Deep expertise in FortiOS is essential, including configuring security policies, user authentication, and SSL/IPSec VPNs.
• Proficiency with advanced capabilities like Intrusion Prevention System (IPS) rule creation and application control is also required.
• Experience managing FortiGate devices at scale using FortiManager and FortiAnalyzer is critical for enterprise deployments.
• Strong knowledge of Fortinet SD-WAN.
• FortiGate Virtualization Prior experience deploying and managing FortiGate-VM instances in public cloud environments.
• The candidate must also demonstrate proficiency in standard routing protocols, particularly BGP, OSPF, and static routing, which are heavily used in hybrid cloud architectures.
• Azure/AWS: Virtual Networks Design, configuration, and peering.
• ExpressRoute/DirectConnect/OCI FastConnect- User-Defined Routes (UDRs), to manage traffic through the FortiGate NVA
• ISP backbone network collaboration and troubleshooting.
• Soft Skills: Troubleshooting complex issues across the OSI stack
• Strong grasp of security concepts and standards (NIST/CIS)
• Excellent communication and documentation skills