Network Security Engineer (Fortinet)

Us3 Ltd; Amsterdam; On-site; EUR 90,000 - 125,000; Full time

Job summary

Us3 Ltd in Amsterdam is seeking a Senior Network Security Engineer to own the enterprise perimeter and connectivity security, designing and governing secure WAN, internet, and remote access architectures.

The role requires deep Fortinet expertise, 6–8 years in network security, and a proven track record deploying scalable firewall platforms; strong WAN, VPN, Zero Trust, and security automation skills are essential.

Qualifications

• 6–8 years of experience in network security.
• Deep hands-on Fortinet expertise.
• Proven experience designing and operating enterprise firewall platforms at scale.
• Strong WAN (MPLS, SD-WAN, DIA) and cloud connectivity knowledge.
• Experience with IPsec/SSL/site-to-site VPNs and secure remote access.
• Solid grasp of Zero Trust, segmentation, and traffic control.
• Fortinet NSE / CISSP / CCNP Security or equivalent is desirable.

Responsibilities

• Design and govern secure WAN architectures and reference security standards.
• Act as SME for Fortinet firewall platforms; design and maintain policies.
• Oversee Secure Internet Access including SWG, URL filtering, TLS inspection.
• Design and operate VPNs and secure remote access for users and partners.
• Define segmentation and Zero Trust across campus, data center, cloud.
• Serve as escalation point for complex incidents and vulnerability management.
• Drive Security-as-Code and Network-as-Code; automate policy deployment.
• Lead firewall migrations and lifecycle projects.
• Provide incident root cause analysis.

Skills

Fortinet

Security Architecture

Zero Trust

Firewall policies

VPN

WAN Security

SD-WAN

Cloud connectivity

Security automation

SIEM

ITSM

CMDB

Tools

SIEM

ITSM

CMDB

Firewall management tools

Job description

We're hiring a senior Network Security Engineer to take technical ownership of our enterprise perimeter and connectivity security — designing and governing secure WAN, internet, and remote access architectures while acting as SME for our Fortinet firewall platforms.

Key Responsibilities

• WAN Security Architecture: Design and govern secure WAN (MPLS, DIA, SD-WAN, cloud, third-party interconnects); define perimeter/edge security standards and reference architectures; lead design reviews; drive Zero Trust adoption
• Firewalls: Act as technical owner/SME for enterprise firewall platforms; design and maintain policies; lead migration, modernization, and lifecycle projects; define standards for segmentation, internet edge protection, East-West/North-South traffic control, threat prevention, and secure partner connectivity
• Secure Internet Access: SWG, URL filtering, SSL/TLS inspection, malware protection, internet breakout security
• Remote Access & VPN: Design and operate IPsec, SSL, and site-to-site VPNs; secure access for employees, contractors, partners, and suppliers
• Segmentation & Zero Trust: Define segmentation across campus, data center, cloud, and hybrid; limit lateral movement and reduce attack surface
• Security Operations: Escalation point for complex incidents; investigations and root cause analysis; firewall policy reviews and recertification; support vulnerability management
• Automation: Drive Security-as-Code and Network-as-Code; automate policy deployment, validation, and compliance reporting; integrate with monitoring, CMDB, SIEM, and ITSM
• 6–8 years in network security, with deep hands‑on Fortinet expertise
• Proven experience designing and operating enterprise firewall platforms at scale
• Strong WAN (MPLS, SD-WAN, DIA) and cloud connectivity knowledge
• Experience with IPsec/SSL/site-to-site VPNs and secure remote access
• Solid grasp of Zero Trust, segmentation, and East-West/North-South traffic control
• Experience with SSL/TLS inspection, SWGs, and internet edge protection
• Track record leading firewall migrations and acting as incident escalation point

Desirable:

Fortinet NSE / CISSP / CCNP Security or similar; Security-as-Code experience; SIEM/CMDB/ITSM integration exposure