Managed Services Network Engineer - Fortinet

Lever, Inc.; Downers Grove (IL); On-site; USD 110,000 - 120,000; Full time

Job summary

Tusker seeks a highly experienced Network Engineer with Fortinet expertise to design, implement, secure, and maintain enterprise networks across data centers, campuses, cloud, and branches. You will own complex architecture, mentor junior engineers, and drive Fortinet security fabric integration.

Requirements include 7–10+ years in network engineering, 5+ years with Fortinet, NSE4+ certification, and hands-on Fortinet tooling. Strong collaboration and automation skills are essential.

Qualifications

• 7–10+ years of network engineering experience, with 5+ years focused on Fortinet products.
• 2+ years in a client-facing management or account management capacity.
• NSE 4 certification required; NSE 5–7 (or higher) strongly preferred.
• Expert-level FortiOS configuration (CLI and GUI).
• Experience with FortiManager, FortiAnalyzer, and FortiGate HA clustering.
• Experience designing and deploying SD-WAN and cloud Fortinet deployments.
• Scripting/automation (Python, Ansible, REST API) for Fortinet is a plus.
• Bachelor's degree in a related field or equivalent professional experience.

Responsibilities

• Design, deploy, and manage FortiGate NGFWs across data center, campus, cloud, and branch.
• Configure FortiManager and FortiAnalyzer for centralized policy/logging/reporting.
• Architect and support Fortinet SD-WAN deployments and site-to-site VPNs.
• Implement and troubleshoot IPsec/SSL-VPN and routing protocols (BGP, OSPF).
• Lead Firewalld policy, NAT, and security profile enforcement; participate in change mgmt.

Skills

Fortinet expertise

Network engineering

SD-WAN design

Automation scripting

Documentation & communication

Education

Bachelor's degree or equivalent

Tools

FortiGate

FortiManager

FortiAnalyzer

FortiSwitch

FortiAP

FortiClient EMS

FortiAuthenticator

FortiSandbox

FortiWeb

FortiADC

Job description

Tusker is a nationwide technology solutions and services company helping organizations solve complex IT challenges and move their businesses forward. Our expertise spans cloud infrastructure, cybersecurity, managed services, modern workplace, AI, and more. We’re a growing team that values strong relationships, fresh thinking, and doing great work—for our clients and for each other. It all comes back to a simple philosophy that guides who we are: People First. Always.

We are seeking a highly experienced Network Engineer with deep expertise in the Fortinet security ecosystem to design, implement, secure, and maintain enterprise network infrastructure. This role requires advanced hands-on skills with FortiGate firewalls and the broader Fortinet Security Fabric, along with strong troubleshooting ability in complex, multi-site environments. This engineer designs and operates resilient, secure networks at scale and brings a strong automation-first mindset. You’ll own complex network architecture and delivery, mentor junior engineers, and serve as an escalation point for the toughest issues.

Key Responsibilities

• Design, deploy, and manage FortiGate next-generation firewalls (NGFW) across data center, campus, cloud, and branch environments
• Configure and maintain FortiManager and FortiAnalyzer for centralized policy management, logging, and reporting
• Architect and support SD-WAN deployments using FortiGate SD-WAN capabilities, including performance-based routing and application steering
• Implement and manage site-to-site and remote-access VPNs (IPsec, SSL-VPN)
• Configure and troubleshoot routing protocols (BGP, OSPF) in conjunction with FortiGate deployments
• Manage the broader Fortinet Security Fabric: FortiSwitch, FortiAP, FortiClient EMS, FortiAuthenticator, FortiSandbox, FortiWeb, FortiADC
• Develop and enforce firewall policies, NAT rules, security profiles (IPS, AV, web filtering, application control)
• Lead network segmentation initiatives, including Zero Trust Network Access (ZTNA) implementation
• Perform firmware upgrades, patching, and lifecycle management across the Fortinet estate
• Conduct root-cause analysis for complex network/security incidents; provide Tier 3/4 escalation support
• Support compliance and audit requirements (PCI-DSS, HIPAA, SOC 2, NIST) as they relate to firewall/network configuration
• Create and maintain network diagrams, configuration standards, and runbooks
• Collaborate with security operations (SOC) teams on threat detection, incident response, and log analysis
• Mentor junior engineers and contribute to change management/CAB processes
• Participate in on-call rotation for infrastructure support

Required Qualifications

• 7–10+ years of network engineering experience, with 5+ years focused specifically on Fortinet products
• 2+ years in a client-facing management or account management capacity.
• NSE 4 certification required; NSE 5–7 (or higher) strongly preferred
• Expert-level knowledge of FortiOS configuration (CLI and GUI)
• Strong understanding of TCP/IP, routing/switching, VLANs, VPNs, and network security fundamentals
• Hands-on experience with FortiManager, FortiAnalyzer, and FortiGate HA clustering
• Experience with SD-WAN design and implementation
• Familiarity with cloud-based FortiGate deployments (AWS, Azure, or GCP)
• Scripting/automation experience (Python, Ansible, or REST API) for Fortinet device management is a plus
• Strong documentation and communication skills
• Bachelor's degree in a related field or equivalent professional experience
• Proven ability to manage multiple client accounts simultaneously with competing priorities.
• Strong understanding of ITIL framework and IT service management principles.
• Experience with PSA tools (e.g., ConnectWise Manage) for ticket queues.
• Exceptional communication skills — written and verbal — with the ability to translate technical information for non-technical audiences.
• Demonstrated ability to work across teams in a fast-paced environment.
• Strong analytical skills with experience interpreting service metrics and driving data-informed decisions.

Preferred Qualifications

• NSE 7 (Enterprise Firewall) or NSE 8
• CCNP or CCIE (Cisco) as complementary networking credentials
• CISSP or similar security certification
• ITIL v4 Foundation certification or higher.
• Prior experience working within an MSP or technology services organization.

$110,000 - $120,000 a year

Tusker is an equal opportunity employer that is committed to diversity and inclusion in the workplace. We prohibit discrimination and harassment of any kind based on race, color, sex, religion, sexual orientation, national origin, disability, genetic information, pregnancy, or any other protected characteristic as outlined by federal, state, or local laws.

We seek team members from all backgrounds to join our organization, and we encourage our employees to bring their authentic, unique, and best selves to work.

This policy applies to all employment practices within our organization, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, compensation, benefits, and training.

Tusker makes hiring decisions based solely on qualifications, merit, and business needs at the time.