Cloud Network Security Architect

Fortinet; Denver (CO); On-site; USD 170,000 - 280,000; Full time

Benefits offered by this job

Equity program

Commissions

401(k) plan

Job summary

Fortinet is seeking a Cloud Network Security Architect to lead secure cloud networking across public cloud, data center, and edge environments. You will design SD-WAN on-ramps, SASE convergence, and dynamic routing models.

Ideal candidates have 5+ years in cloud networking and strong DevOps scripting skills (Python, Terraform, Ansible) and experience with Docker/Kubernetes. This role collaborates with Product Management, R&D, and field engineering to deliver reference architectures and automated

Qualifications

• 5+ years in cloud networking, security, or secure SD-WAN/SASE design.
• Development and scripting experience in Python/Node.js/C#/Go.
• CI/CD tools (Git/Jenkins) and IaC orchestration (Terraform/Ansible/CF).
• IaaS & SaaS networking: VPCs/VNets, routing, VPNs, load balancers.
• Knowledge of BGP, transitive routing, segmentation, traffic engineering in cloud.
• Hands-on with containerized environments (Docker/Kubernetes) and cloud-native network policies.
• Proficiency with YAML/JSON/XML data formats.
• Familiarity with CNAPP, CASB, CWP, SCA, DAST.
• Strong communication and cross-functional collaboration.
• Experience in network security incl. VPN/proxies/authentication.
• Technical writing and network documentation.
• Kubernetes and Docker experience required

Responsibilities

• Design secure cloud network architectures using Fortinet SD-WAN, SASE, and cloud-native routing.
• Develop automation workflows and DevOps pipelines for provisioning, telemetry, and policy enforcement.
• Architect solutions with transitive routing, route services, dynamic path selection, and zero-trust segmentation.
• Partner with Product Management and Development to identify feature integrations.
• Lead PoC deployments and customer solution validations across cloud environments.
• Maintain reference architectures, scripts, and code repositories with best practices.
• Provide guidance on secure traffic steering, network segmentation, and cloud interconnects.
• Support Professional Services and Sales Engineering in design and migration projects.
• Create workflow enhancements for public cloud-sourced services, labs, POCs, and tool integration.
• Provide technical guidance on Public Cloud matters to internal stakeholders.
• Document and maintain script and application libraries or repositories.
• Translate business requirements to programmatic logic and develop customer-facing documentation.
• Create reference designs and code applying CSP best practices.
• Advise on solution options, feature requirements, and reference designs.

Skills

Cloud networking

Network security

Secure SD-WAN

DevOps skills

Python

Node.js

C#

Go

Git/Jenkins

Terraform/Ansible

CloudFormation

IaaS networking

BGP routing

Docker/Kubernetes

CNAPP

YAML/JSON/XML

Communication

Technical writing

Education

Bachelor's degree in CS or similar

Master's degree preferred

Tools

Docker

Kubernetes

Job description

Fortinet is seeking a Cloud Network Security Architect specializing in cloud networking, SD-WAN on-ramp design, and SASE convergence. As part of Fortinet's Cloud Architecture team, this role drives the design and deployment of secure, high-performance connectivity across public cloud, data center, and edge environments. The ideal candidate combines strong DevOps engineering skills with deep understanding of secure cloud networking architectures, including dynamic routing constructs, transitive routing models, and cloud-native route services. This role will work closely with Product Management, R&D, Field Engineering, and global customers to develop reference architectures, integrations, and automation for secure, adaptive cloud connectivity.

Responsibilities:

• Design and implement secure cloud network architectures that leverage Fortinet SD-WAN, SASE, and cloud-native routing to deliver optimized multi-cloud connectivity.
• Develop automation workflows and DevOps pipelines for network provisioning, telemetry, and policy enforcement, using services such as Terraform, Ansible, and cloud-native templates.
• Architect solutions using transitive routing, route services, dynamic path selection, and zero trust segmentation to enable secure, scalable network topologies.
• Partner with Product Management and Development teams to identify feature integrations that enhance secure cloud networking capabilities.
• Lead proof of concept deployments and customer solution validations across public and hybrid cloud environments.
• Develop and maintain reference architectures, scripts, and code repositories applying industry best practices.
• Provide architectural guidance on secure traffic steering, network segmentation, and cloud interconnects.
• Support Professional Services and Sales Engineering teams in customer design and migration projects.
• Create organizational workflow enhancements to deliver public cloud-sourced services, such hands-on labs, customer POCs, tool integration, data enrichment and other uses.
• Provide technical guidance on Public Cloud matters to internal stakeholders.
• Document and maintain script and application libraries or repositories.
• Provide technical guidance on Public Cloud integration and development, ex. the use of CSP APIs and how they can be leveraged.
• Translate business requirements to programmatic logic.
• Develop customer-facing documentation.
• Create reference designs and code that applies CSP best practices.
• Advise Product and field Engineering on solution options, feature requirements, and reference designs.

Requirements:

• 5+ years of experience in cloud networking, network security, or secure SD-WAN/SASE design.
• Strong development and scripting experience in one or more languages (Python, Node.js, C#, Go, or equivalent).
• Familiarity with CI/CD tools (Git, Jenkins) and IaC orchestration (Terraform, Ansible, or CloudFormation).
• Experience with IaaS and SaaS networking constructs such as VPCs/VNets, route tables, peering, VPNs, and load balancers.
• Knowledge of BGP, transitive routing, network segmentation, and traffic engineering in cloud environments.
• Hands-on experience with containerized environments (Docker, Kubernetes) and cloud-native network policies.
• Proficiency with data formats such as YAML, JSON, or XML.
• Familiarity with cloud security services (CNAPP, CASB, CWP, SCA, DAST).
• Strong communication skills and ability to collaborate across engineering, product, and customer-facing teams.
• Experience in network security highly desired, including VPN, Proxies, Authentication, etc.
• Technical writing and network documentation skills highly desired
• Kubernetes and Docker experience required

Education:

• Bachelor's degree in Computer Science or similar and/or equivalent experience required
• Master's preferred

Fortinet offers employees a variety of benefits, including medical, dental, vision, life and disability insurance, 401(k), 11 paid holidays, vacation time, and sick time as well as a comprehensive leave program.

Wage ranges are based on various factors including the labor market, job type, and job level. On target earnings for this position is expected to be $170,000 - $280,000 per year. Exact salary offers will be determined by factors such as the candidate's subject knowledge, skill level, qualifications, experience, and geographic location.

All roles are eligible to participate in the Fortinet equity program, and this position is also eligible for commissions based on the terms of the Sales Compensation Plan