Cloud Network Security Architect

Fortinet, Inc.; Denver (CO); On-site; USD 170,000 - 280,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision care

401(k)

Paid holidays

Vacation time

Sick time

Comprehensive leave program

Job summary

Fortinet is seeking a Cloud Network Security Architect to design and deploy secure, high-performance cloud connectivity across public cloud, data center, and edge environments. You will drive automation, reference architectures, and integrations with DevOps practices.

Ideal candidates bring 5+ years in cloud networking, strong scripting in Python or similar, and expertise in Fortinet SD-WAN, SASE, and cloud routing. This role partners with Product Management, R&D, and customer teams.

Qualifications

• 5+ years in cloud networking, network security, or secure SD-WAN/SASE design.
• Strong development and scripting experience in Python, Node.js, C#, Go, or equivalent.
• Familiarity with CI/CD tools (Git, Jenkins) and IaC (Terraform, Ansible, CloudFormation).
• Experience with IaaS and SaaS networking constructs (VPCs/VNets, route tables, peering, VPNs, load balancers).
• Knowledge of BGP, transitive routing, network segmentation, and cloud traffic engineering.
• Hands-on with Docker and Kubernetes and cloud-native policies.
• Proficiency with YAML, JSON, or XML and cloud security services.

Responsibilities

• Design secure cloud networks using Fortinet SD-WAN, SASE, and cloud-native routing for multi-cloud connectivity.
• Develop automation workflows and DevOps pipelines for provisioning, telemetry, and policy enforcement with Terraform, Ansible, and templates.
• Architect solutions with transitive routing, route services, dynamic path selection, and zero-trust segmentation.
• Lead PoC deployments and customer validations across public and hybrid clouds.
• Create reference architectures, scripts, and repositories applying industry best practices.

Skills

Cloud networking

Secure SD-WAN/SASE

DevOps scripting

Python

Terraform

Ansible

Kubernetes

Docker

CI/CD

Education

Bachelor's in Computer Science or related field

Master's degree preferred

Tools

Terraform

Ansible

CloudFormation

Git

Jenkins

Docker

Kubernetes

Job description

Fortinet is seeking a Cloud Network Security Architect specializing in cloud networking, SD-WAN on-ramp design, and SASE convergence. As part of Fortinet’s Cloud Architecture team, this role drives the design and deployment of secure, high-performance connectivity across public cloud, data center, and edge environments. The ideal candidate combines strong DevOps engineering skills with deep understanding of secure cloud networking architectures, including dynamic routing constructs, transitive routing models, and cloud-native route services. This role will work closely with Product Management, R&D, Field Engineering, and global customers to develop reference architectures, integrations, and automation for secure, adaptive cloud connectivity.

Responsibilities:

• Design and implement secure cloud network architectures that leverage Fortinet SD-WAN, SASE, and cloud-native routing to deliver optimized multi-cloud connectivity.
• Develop automation workflows and DevOps pipelines for network provisioning, telemetry, and policy enforcement, using services such as Terraform, Ansible, and cloud-native templates.
• Architect solutions using transitive routing, route services, dynamic path selection, and zero trust segmentation to enable secure, scalable network topologies.
• Partner with Product Management and Development teams to identify feature integrations that enhance secure cloud networking capabilities.
• Lead proof of concept deployments and customer solution validations across public and hybrid cloud environments.
• Develop and maintain reference architectures, scripts, and code repositories applying industry best practices.
• Provide architectural guidance on secure traffic steering, network segmentation, and cloud interconnects.
• Support Professional Services and Sales Engineering teams in customer design and migration projects.
• Create organizational workflow enhancements to deliver public cloud-sourced services, such hands-on labs, customer POCs, tool integration, data enrichment and other uses
• Provide technical guidance on Public Cloud matters to internal stakeholders
• Document and maintain script and application libraries or repositories
• Provide technical guidance on Public Cloud integration and development, ex. the use of CSP APIs and how they can be leveraged
• Translate business requirements to programmatic logic
• Develop customer-facing documentation
• Create reference designs and code that applies CSP best practices
• Advise Product and field Engineering on solution options, feature requirements, and reference designs.

Requirements:

• 5+ years of experience in cloud networking, network security, or secure SD-WAN/SASE design.
• Strong development and scripting experience in one or more languages (Python, Node.js, C#, Go, or equivalent).
• Familiarity with CI/CD tools (Git, Jenkins) and IaC orchestration (Terraform, Ansible, or CloudFormation).
• Experience with IaaS and SaaS networking constructs such as VPCs/VNets, route tables, peering, VPNs, and load balancers.
• Knowledge of BGP, transitive routing, network segmentation, and traffic engineering in cloud environments.
• Hands-on experience with containerized environments (Docker, Kubernetes) and cloud-native network policies.
• Proficiency with data formats such as YAML, JSON, or XML.
• Familiarity with cloud security services (CNAPP, CASB, CWP, SCA, DAST).
• Strong communication skills and ability to collaborate across engineering, product, and customer-facing teams.
• Experience in network security highly desired, including VPN, Proxies, Authentication, etc.
• Technical writing and network documentation skills highly desired
• Kubernetes and Docker experience required

Education:

• Bachelor’s degree in Computer Science or similar and/or equivalent experience required
• Master’s preferred

Fortinet offers employees a variety of benefits, including medical, dental, vision, life and disability insurance, 401(k), 11paid holidays, vacation time, and sick time as well as a comprehensive leave program.

• medical
• dental
• vision
• life and disability insurance
• 401(k)
• 11paid holidays
• vacation time
• sick time
• comprehensive leave program

Wage ranges are based on various factors including the labor market, job type, and job level. On target earnings for this position is expected to be $170,000 - $280,000 per year.Exact salary offers will be determined by factors such as the candidate's subject knowledge, skill level, qualifications, experience, and geographic location.

All roles are eligible to participate in the Fortinet equity program, and this position is also eligible for commissions based on the terms of the Sales Compensation Plan