Senior Architect - Network (Fortigate)

Cbts; Chennai; On-site; INR 4,000,000 - 7,000,000; Full time

Job summary

CBTS in Chennai seeks a Sr. Architect Network with 15+ years of hands-on experience to design enterprise networks spanning cloud, on-prem, and hybrid environments.

Lead Fortinet SD-WAN deployments, architect VPNs, NAT, and routing; collaborate with stakeholders, ensure PCI-DSS/SOC2 compliance; mentor engineers.

Strong Fortinet expertise, NSE4 required, NSE7 preferred; AWS/Azure certs welcomed.

Qualifications

• 15+ years hands-on network engineering and architecture experience in enterprise or managed services environments.
• Fortinet experience in complex, multi-site environments.
• Bachelor’s degree or equivalent practical experience.
• Fortinet NSE 4 minimum; NSE 7 or higher preferred; cloud certifications welcome.

Responsibilities

• Architect enterprise network strategies and frameworks spanning cloud, on-premises, and hybrid environments, with Fortinet as the core platform
• Design and lead Fortinet Secure SD-WAN deployments (FortiGate, FortiOS, FortiManager, FortiAnalyzer)
• Design and own client and third-party connectivity: site-to-site and partner IPsec VPN, ADVPN, SSL-VPN, and remote access
• Architect NAT strategy for client connectivity, including source/destination NAT, VIPs, IP pools, NAT-T, and overlapping address space
• Evaluate and integrate third-party solutions including firewalls, load balancers, routers, and legacy Palo Alto and Cisco platforms
• Partner with business stakeholders and IT teams to align network designs with goals
• Ensure designs meet security best practices and regulatory standards (PCI-DSS, SOC 2)
• Produce and maintain documentation, cutover runbooks, and rollback plans
• Serve as senior escalation point and mentor to engineers
• Drive innovation by piloting emerging network technologies

Skills

Fortinet expertise

IPsec VPN design

NAT design

Routing protocols

Firewall policy design

Cloud networking

Scripting automation

Zero trust concepts

Communication skills

Education

Bachelor’s degree or equivalent

Tools

Fortinet FortiGate

Fortinet FortiManager

Fortinet FortiAnalyzer

Fortinet SD-WAN

AWS/Azure VPN gateways

Job description

CBTS is a leading technology provider to more than 3,000 organizations in all industries, including dozens of Fortune 500 and Global 2000 companies. We provide consulting resources and cloud or on-premises technologies that deliver consistent IT performance, reduce costs, and increase operational efficiency. What differentiates CBTS is the agility, flexible delivery models, and client focus of a smaller company coupled with the ability to deliver the resources, scale, and capabilities required by large organizations. With over 800 certified engineers and locations across North America, Europe, and Asia, CBTS offers outstanding expertise in transforming business operations. CBTS stays at the forefront of technology trends to offer best-of-breed solutions to our clients. We partner with all leading technology manufacturers across the broad IT landscape and offer customized solutions to achieve our clients measurable business outcomes.

Client – CBTS Technologies www.cbts.com

Role Sr. Architect Network

Experience – 10+

Location - Chennai

Mode – Permanent

Responsibilities:

• Architect enterprise network strategies and frameworks spanning cloud, on-premises, and hybrid environments, with Fortinet as the core platform
• Design and lead Fortinet Secure SD-WAN deployments (FortiGate, FortiOS, FortiManager, FortiAnalyzer), including overlay and underlay topology, SLA-based steering, and failover strategy
• Design and own client and third-party connectivity: site-to-site and partner IPsec VPN, ADVPN, SSL-VPN, and remote access
• Architect NAT strategy for client connectivity, including source and destination NAT, VIPs, IP pools, NAT-T, and overlapping address space resolution
• Evaluate and recommend network technologies, tools, and frameworks, and integrate third-party solutions including firewalls, load balancers, routers, and legacy Palo Alto and Cisco platforms
• Partner with business stakeholders, project managers, and IT teams to align network designs with organizational and client goals
• Ensure designs meet security best practices, regulatory standards (PCI-DSS, SOC 2), and organizational policy
• Produce and maintain documentation, cutover runbooks, and rollback plans for review by client architecture teams
• Serve as senior technical escalation point and mentor to engineers
• Drive innovation by proposing and piloting emerging network technologies

Education:

Bachelor’s degree or equivalent practical experience

Certifications:

Required: Fortinet NSE 4 minimum

Strongly preferred: NSE 7 (Enterprise Firewall or SD-WAN) or higher

Preferred: AWS, Azure, or other cloud networking certification

Experience:

15+ years of hands-on network engineering and architecture experience in enterprise or managed services environments

Significant production experience with Fortinet in complex, multi-site environments

Knowledge & Skills:

• Deep, hands-on Fortinet expertise: FortiGate, FortiManager, FortiAnalyzer, and Fortinet SD-WAN
• Expert-level IPsec VPN design and troubleshooting (IKEv2, DPD, NAT-T, route-based and policy-based tunnels, ADVPN)
• Expert-level NAT design and troubleshooting across client, partner, and overlapping-subnet scenarios
• Deep expertise in routing and switching protocols (BGP, OSPF, EIGRP, MPLS), including BGP as the SD-WAN underlay and overlay routing protocol
• Strong understanding of firewall policy design, load balancers, QoS, and traffic shaping
• Experience with cloud networking (AWS/Azure VPN gateways, Direct Connect, ExpressRoute)
• Proficiency with network design and diagramming tools (Visio, Lucid, or similar)
• Experience with scripting and automation (Python, Ansible, FortiManager API, or similar)
• Experience leading production cutovers with minimal disruption in regulated environments
• Familiarity with Fortinet ZTNA (access proxy, FortiClient EMS) and zero trust concepts is a plus
• Excellent communication, analytical, and problem-solving skills, with the ability to present to both technical and executive audiences