Fortinet/Fortinet Firewall Specialist/Network Engineer with Fortinet

Programmers.io; New Jersey; On-site; USD 120,000 - 150,000; Full time

Job summary

Programmers.io in New Jersey is seeking a Senior Network Security Engineer to architect and centrally manage Fortinet security fabrics across data centers, campuses, and branch sites. You will lead automated provisioning, FortiManager workflows, and secure SD-WAN deployments while shaping edge configurations.

The role requires deep Fortinet expertise, advanced networking knowledge, and capability to mentor engineers, delivering scalable, compliant security solutions across hybrid environments.

Qualifications

• Deep, expert-level competency in Forti Manager and FortiGate with ZTP templates and automation.
• Advanced knowledge of core networking protocols (BGP, OSPF, IPsec VPNs, SD-WAN path management).
• Proficiency with scripting languages (Python, Jinja2, Ansible, FortiManager CLI scripting).
• Strong understanding of security frameworks (NIST, ISO 27001, PCI-DSS) for compliance in automation.

Responsibilities

• Design and scale automated ZTP pipelines to deploy FortiGate firewalls and branch infrastructure.
• Administer Forti Manager centralized environments with ADOMs, lifecycle tracking, templates, and policy packages.
• Deploy FortiGate in HA clusters, VDOMs, and multi-tenant architectures; design Secure SD-WAN.
• Integrate Fortinet stack (FortiSwitch, FortiAP, FortiAnalyzer) and enforce Zero-Trust (ZTNA).
• Lead telemetry dashboards, security event correlation, and long-term compliance reporting.
• Mentor junior engineers and establish standard runbooks and architectural documentation.

Skills

FortiManager

FortiGate

ZTP automation

SD-WAN design

BGP/OSPF

Python/Ansible

Tools

FortiManager

FortiGate

Job description

Title: Fortinet Firewall Specialist/Network Engineer with Fortinet

Location: New Jersey NJ- onsite

Duration: Full Time

The Senior Network Security Engineer is responsible for architecting, deploying, and centrally managing enterprise-grade security infrastructure with a primary focus on the Fortinet Security Fabric. This role serves as the subject matter expert for Forti Manager, spearheading the design and execution of automated Zero-Touch Provisioning (ZTP) workflows and Secure SD-WAN deployments across extensive data center, campus, and branch environments.

Key Responsibilities

Automated Provisioning & Centralized Management

• Design and scale automated Zero-Touch Provisioning (ZTP) pipelines to accelerate the deployment of FortiGate firewalls and branch infrastructure.
• Administer Forti Manager centralized environments, establishing standardized Administrative Domains (ADOMs), device life-cycle tracking, provisioning templates, CLI scripts, and policy packages.
• Develop and maintain meta-fields, variables, and runtime scripts within Forti Manager to ensure highly adaptive, programmatic edge configuration rollouts.

Security Architecture & Engineering

• Deploy and operate FortiGate firewalls in High Availability (HA) clusters, Virtual Domains (VDOMs), and multi-tenant architectures.
• Architect Fortinet Secure SD-WAN, including overlay link design, SLA-based path selection rules, application steering, and Auto-Discovery VPN (ADVPN).
• Integrate and maintain the broader Fortinet stack, including Forti Switch, FortiAP, and Forti Analyzer.
• Implement Zero-Trust Network Architecture (ZTNA) and robust micro-segmentation strategies across hybrid environments.

Operations, Compliance & Leadership

• Analyze telemetry data from Forti Analyzer to construct operational dashboards, security event correlation models, and long-term compliance audit reporting.
• Lead technical project delivery, conduct vulnerability assessments, and act as a Tier-3 escalation point for critical network or security outages.
• Mentor junior engineering staff and establish consistent configuration standards, runbooks, and architectural documentation

Qualifications & Skills

Technical Requirements

• Deep, expert-level competency in Forti Manager and FortiGate, with documented experience designing complex configuration templates and ZTP blueprints.
• Advanced knowledge of core networking protocols, including BGP, OSPF, IPsec VPNs, advanced routing/switching, and SD-WAN path management.
• Proficiency with scripting languages (e.g., Python, Jinja2, Ansible, or FortiManager CLI scripting) used to optimize network automation workflows.
• Strong understanding of security frameworks (such as NIST, ISO 27001, or PCI-DSS) to ensure automated templates strictly enforce organizational compliance.