Fortinet Firewall Lead

Wipro; Port Reading (NJ); On-site; USD 80,000 - 158,000; Full time

Benefits offered by this job

Medical and dental

Disability insurance

Paid time off

Other leave options

Job summary

Wipro Limited in Secaucus, NJ is seeking a Fortinet Firewall Specialist to architect, deploy, and centrally manage enterprise-grade security with Fortinet Security Fabric. You will lead ZTP workflows and Secure SD-WAN across data centers, campuses, and branch sites.

The role demands deep Fortinet expertise, firmware and template automation, and mentoring of engineers. You will collaborate with network and security teams, deliver risk-based security architectures, and drive incident response and

Qualifications

• Advanced Fortinet FortiGate firewall expertise with ZTP automation.
• Strong knowledge of FortiManager, FortiSwitch, FortiAP, and FortiAnalyzer.
• Experience in SD-WAN design and secure architecture.
• Proficiency in Python or FortiManager scripting for automation.

Responsibilities

• Design and deploy FortiGate firewalls in HA and VDOMs.
• Architect Fortinet Secure SD-WAN and ADVPN.
• Maintain Fortinet stack and automation templates.
• Lead incident response and post-incident reviews.
• Mentor junior engineers and document standards.
• Produce dashboards from FortiAnalyzer telemetry.

Skills

Fortinet FortiGate

FortiManager

ZTP deployment

Security architecture

Scripting (Python)

Tools

FortiManager

FortiGate

FortiSwitch

FortiAP

FortiAnalyzer

Job description

Wipro Limited (NYSE: WIT, BSE: 507685, NSE: WIPRO) is a leading technology services and consulting company focused on building innovative solutions that address clients’ most complex digital transformation needs. Leveraging our holistic portfolio of capabilities in consulting, design, engineering, and operations, we help clients realize their boldest ambitions and build future-ready, sustainable businesses. With over 230,000 employees and business partners across 65 countries, we deliver on the promise of helping our customers, colleagues, and communities thrive in an ever-changing world. For additional information, visit us at www.wipro.com.

Job Description

Title: Fortinet Firewall Specialist

Location: Secaucus NJ

Duration: Full Time

The Senior Network Security Engineer is responsible for architecting, deploying, and centrally managing enterprise-grade security infrastructure with a primary focus on the Fortinet Security Fabric. This role serves as the subject matter expert for Forti Manager, spearheading the design and execution of automated Zero-Touch Provisioning (ZTP) workflows and Secure SD-WAN deployments across extensive data center, campus, and branch environments.

Key Responsibilities

• Design and scale automated Zero-Touch Provisioning (ZTP) pipelines to accelerate the deployment of FortiGate firewalls and branch infrastructure.
• Administer Forti Manager centralized environments, establishing standardized Administrative Domains (ADOMs), device life-cycle tracking, provisioning templates, CLI scripts, and policy packages.
• Develop and maintain meta-fields, variables, and runtime scripts within Forti Manager to ensure highly adaptive, programmatic edge configuration rollouts.

Security Architecture & Engineering

• Deploy and operate FortiGate firewalls in High Availability (HA) clusters, Virtual Domains (VDOMs), and multi-tenant architectures.
• Architect Fortinet Secure SD-WAN, including overlay link design, SLA-based path selection rules, application steering, and Auto-Discovery VPN (ADVPN).
• Integrate and maintain the broader Fortinet stack, including Forti Switch, FortiAP, and Forti Analyzer.
• Implement Zero-Trust Network Architecture (ZTNA) and robust micro-segmentation strategies across hybrid environments.

Operations, Compliance & Leadership

• Analyze telemetry data from Forti Analyzer to construct operational dashboards, security event correlation models, and long-term compliance audit reporting.
• Lead technical project delivery, conduct vulnerability assessments, and act as a Tier-3 escalation point for critical network or security outages.
• Mentor junior engineering staff and establish consistent configuration standards, runbooks, and architectural documentation

Areas of responsibility

• Triaging and resolution of tickets-Establish incident monitoring protocols and provide technical guidance to enable permanent fixes for recurring issues.
• SLA Monitoring-Review SLA performance across the team, represent the function in meetings, and ensure consistent delivery quality.
• Performance tuning and optimization-Collaborate with technical teams in managing production support activities regarding incident resolution, efficient deployments, and implementation of changes.
• Perform system Improvements-Collaborate with technical teams to review mitigation measures and proposed improvement actions.
• Handling disaster recovery-Develop disaster recovery and data backup plans to ensure system resilience and quick restoration in case of disruptions.
• Reporting and stakeholder engagement-Participate in Quarterly Business Reviews (QBRs), manage client expectations, and ensure alignment with business objectives.
• Team Management-Supervise team members by overseeing daily operations, conducting performance appraisals, and providing feedback.
• Knowledge base and continuous learning Update and maintain documentation for complex issues, share best practices within the team, and support ongoing knowledge enhancement to improve service efficiency.

Qualifications & Skills

Technical Requirements

• Deep, expert-level competency in Forti Manager and FortiGate, with documented experience designing complex configuration templates and ZTP blueprints.
• Advanced knowledge of core networking protocols, including BGP, OSPF, IPsec VPNs, advanced routing/switching, and SD-WAN path management.
• Proficiency with scripting languages (e.g., Python, Jinja2, Ansible, or FortiManager CLI scripting) used to optimize network automation workflows.
• Strong understanding of security frameworks (such as NIST, ISO 27001, or PCI-DSS) to ensure automated templates strictly enforce organizational compliance.

Mandatory Skills

Fortinet Firewall.Experience: 8-10 Years.The expected compensation for this role ranges from $80,000 to $158,000 .Final compensation will depend on various factors, including your geographical location, minimum wage obligations, skills, and relevant experience. Based on the position, the role is also eligible for Wipro's standard benefits including a full range of medical and dental benefits options, disability insurance, paid time off (inclusive of sick leave), other paid and unpaid leave options.Applicants are advised that employment in some roles may be conditioned on successful completion of a post-offer drug screening, subject to applicable state law.

Equal Opportunity Employer

Wipro provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. Applications from veterans and people with disabilities are explicitly welcome.

We are an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, caste, creed, religion, gender, marital status, age, ethnic and national origin, gender identity, gender expression, sexual orientation, political orientation, disability status, protected veteran status, or any other characteristic protected by law.

Wipro is committed to creating an accessible, supportive, and inclusive workplace. Reasonable accommodation will be provided to all applicants including persons with disabilities, throughout the recruitment and selection process. Accommodations must be communicated in advance of the application, where possible, and will be reviewed on an individual basis. Wipro provides equal opportunities to all and values diversity.