Fortinet Network Engineer: Enterprise Security & SD-WAN

Tusker; Downers Grove (IL); On-site; USD 110,000 - 120,000; Full time

Job summary

Tusker is seeking an experienced Network Engineer with deep Fortinet expertise to design, implement, and secure enterprise networks across data centers, campuses, cloud, and branches. You will own complex network architecture, mentor junior engineers, and serve as an escalation point for the toughest issues.

The role emphasizes FortiGate/Fortinet Security Fabric, SD-WAN, VPNs, and automation, with strong collaboration across security/ops teams in a fast-paced environment.

Qualifications

• 7–10+ years of network engineering experience, with 5+ years focused on Fortinet products.
• 2+ years in a client-facing management capacity.
• NSE 4 certification required; NSE 5–7 preferred.
• Expert knowledge of FortiOS CLI/GUI.
• Strong TCP/IP, routing/switching, VLANs, VPNs, and network security fundamentals.
• Hands-on with FortiManager, FortiAnalyzer, FortiGate HA clustering.
• SD-WAN design and implementation experience.
• Cloud FortiGate deployments (AWS/Azure/GCP) familiarity.
• Scripting/automation (Python, Ansible, REST API) a plus.
• Strong documentation/communication; BS degree or equivalent.
• Proven ability to manage multiple client accounts; ITIL familiarity.
• Experience with PSA tools (ConnectWise Manage).
• Excellent written and verbal communication; cross-team collaboration.
• Ability to work in fast-paced environments; data-informed decision making.

Responsibilities

• Design, deploy, and manage FortiGate NGFW across data center, campus, cloud, and branch environments.
• Configure FortiManager and FortiAnalyzer for centralized policy management, logging, and reporting.
• Architect and support SD-WAN deployments with FortiGate SD-WAN capabilities.
• Implement and manage site-to-site and remote-access VPNs (IPsec, SSL-VPN).
• Configure and troubleshoot routing protocols (BGP, OSPF) with FortiGate deployments.
• Manage the Fortinet Security Fabric: FortiSwitch, FortiAP, FortiClient EMS, FortiAuthenticator, FortiSandbox, FortiWeb, FortiADC.
• Develop firewall policies, NAT rules, security profiles; enforce Zero Trust Network Access (ZTNA).
• Perform firmware upgrades, patching, and lifecycle management across Fortinet estate.
• Provide Tier 3/4 escalation support; conduct root-cause analysis for complex incidents.
• Collaborate with SOC on threat detection, incident response, and log analysis.
• Mentor junior engineers; participate in change management/CAB processes.
• Join on-call rotation for infrastructure support.

Skills

Fortinet FortiGate

FortiManager

FortiAnalyzer

SD-WAN design

VPN administration

Networking protocols (BGP/OSPF)

Fortinet Security Fabric

Automation scripting (Python/Ansible)

ITIL familiarity

Customer-facing experience

Education

Bachelor’s degree in related field

Tools

FortiGate HA clustering

ConnectWise Manage

Cloud FortiGate (AWS/Azure/GCP)

Fortinet device management

Job description

Tusker is seeking an experienced Network Engineer with deep Fortinet expertise to design, implement, and secure enterprise networks across data centers, campuses, cloud, and branches. You will own complex network architecture, mentor junior engineers, and serve as an escalation point for the toughest issues.

The role emphasizes FortiGate/Fortinet Security Fabric, SD-WAN, VPNs, and automation, with strong collaboration across security/ops teams in a fast-paced environment.