Network Engineer – Fortinet (FortiGate, SD-WAN, BGP/OSPF) – Onsite NYC

MaxIT Consulting - Max Corporate Group; New York (NY); On-site; USD 120,000 - 150,000; Full time

Job summary

MaxIT Consulting – Max Corporate Group is seeking a hands-on Network Engineer with strong Fortinet expertise to join in NYC. You will own escalated network incidents, design secure LAN/WAN, SD-WAN and firewall solutions for a multi-site enterprise.

This senior, hands-on role requires 5–7 years of experience, Fortinet certifications, and expertise with FortiGate, FortiManager, Fortinet Secure SD-WAN and FortiAnalyzer.

Qualifications

• 5 to 7 years of professional network engineering experience.
• Fortinet certification at professional or expert level: FCP, FCSS or NSE 4-8 (required).
• Advanced hands-on experience with FortiGate, FortiManager, Fortinet Secure SD-WAN and FortiAnalyzer.
• Strong knowledge of routing protocols and technologies: eBGP, iBGP, OSPF, IPSEC, traceroute, NetFlow.
• Extensive experience designing and managing enterprise-grade firewall solutions and network security architectures.
• LAN/WAN administration: DHCP, DNS, VLANs, NAT, wireless and switches.
• Experience designing multi-site environments with VLANs, MPLS, SSL and IPSEC.
• Strong analytical, problem-solving and communication skills.
• Bachelor's degree.

Responsibilities

• Design, implement and transition firewalls, switches, access points and other network solutions.
• Troubleshoot LAN/WAN, SD-WAN, routing, switching, VPN, firewall and VoIP equipment (predominantly Fortinet).
• Perform root cause analysis for P1/P2/P3/P4 incidents and critical outages.
• Produce network assessments, capacity plans, detailed designs, implementation/test plans, configuration templates and scripts.
• Create accurate network diagrams and design documentation (Visio).
• Support web-proxy environments such as Zscaler or McAfee Web Proxy.
• Escalate service issues and risks, and provide guidance to team members.

Skills

Analytical thinking

Problem-solving

Communication skills

Education

Bachelor's degree

Tools

FortiGate

FortiManager

Fortinet Secure SD-WAN

FortiAnalyzer

Zscaler

McAfee Web Proxy

Visio

BGP/OSPF/IPsec

Job description

Network Engineer – Fortinet (FortiGate, SD-WAN, BGP/OSPF) – Onsite NYC

New York City, NY | On-site | Full-Time | Permanent Employment | Mid-Senior Level

MaxIT Consulting – Max Corporate Group is looking for a hands-on Network Engineer with strong Fortinet expertise to join a global professional services organization supporting clients in the financial services and commercial banking sector.

You will own escalated network incidents, root cause analysis and the design of secure LAN/WAN, SD-WAN and firewall solutions for a multi-site enterprise environment.

THE CHALLENGE

This is a senior, hands-on engineering role: you will design, implement and troubleshoot enterprise networks built predominantly on Fortinet, resolve P1-P4 incidents, and guide stakeholders through technical decisions. The environment runs 24x7, so flexibility to support critical incidents is required.

KEY RESPONSIBILITIES

• Design, implement and transition firewalls, switches, access points and other network solutions.
• Troubleshoot LAN/WAN, SD-WAN, routing, switching, VPN, firewall and VoIP equipment (predominantly Fortinet).
• Perform root cause analysis for P1/P2/P3/P4 incidents and critical outages.
• Produce network assessments, capacity plans, detailed designs, implementation/test plans, configuration templates and scripts.
• Create accurate network diagrams and design documentation (Visio).
• Support web-proxy environments such as Zscaler or McAfee Web Proxy.
• Escalate service issues and risks, and provide guidance to team members.

WHAT WE ARE LOOKING FOR

• 5 to 7 years of professional network engineering experience.
• Fortinet certification at professional or expert level: FCP, FCSS or NSE 4-8 (required).
• Advanced hands-on experience with FortiGate, FortiManager, Fortinet Secure SD-WAN and FortiAnalyzer.
• Strong knowledge of routing protocols and technologies: eBGP, iBGP, OSPF, IPSEC, traceroute, NetFlow.
• Extensive experience designing, configuring and managing enterprise-grade firewall solutions and network security architectures.
• LAN/WAN administration: DHCP, DNS, VLANs, NAT, wireless and switches.
• Experience designing and deploying multi-site environments with VLANs, MPLS, SSL and IPSEC.
• Strong analytical, problem-solving and communication skills.
• Bachelor's degree.

NICE TO HAVE

• Cisco or Check Point certifications.
• Zero Trust frameworks and NIST CSF or similar standards.
• Pulse Secure Access Gateway and Citrix NetScaler ADC load balancers.
• Consultative experience guiding the selection of technical solutions.

POSITION DETAILS

• Work arrangement: On-site
• Schedule: Full-time, in a 24x7 environment
• Employment type: Permanent employment
• Seniority: Mid-Senior
• Location: New York City, New York, United States
• Travel: OccasionalRelocation assistance: Not available

The position offers a full benefits package and annual bonus eligibility.

WORK AUTHORIZATION

Candidates authorized to work in the United States are welcome to apply, and candidates who require a visa will also be considered. No security clearance is required.