Network Security Engineer – Firewalls, Routing & SD-WAN

MaxIT Consulting - Max Corporate Group; New York (NY); In loco; USD 120.000 - 160.000; Tempo pieno

Vantaggi offerti da questo lavoro

Annual bonus eligibility

Full benefits package

On-site work in NYC

Descrizione del lavoro

MaxIT Consulting – Max Corporate Group is seeking a hands-on Network Security Engineer in New York City to design, implement, and optimize secure LAN/WAN and SD-WAN solutions built around Fortinet technology. The role involves incident ownership, root-cause analysis, and guiding technical decisions in a 24x7 enterprise environment.

The ideal candidate brings 5–7 years of experience, Fortinet professional/expert certs, and deep Fortinet product knowledge to support financial services and banking

Competenze

• 5–7 years of professional network engineering experience.
• Fortinet certification at professional or expert level (FCP, FCSS or NSE 4–8).
• Advanced hands-on with FortiGate, FortiManager, Fortinet Secure SD-WAN and FortiAnalyzer.
• Strong knowledge of routing protocols: eBGP, iBGP, OSPF, IPSEC.

Mansioni

• Design, implement and transition firewalls, switches, access points and other network solutions.
• Troubleshoot LAN/WAN, SD-WAN, routing, switching, VPN, firewall and VoIP equipment (Fortinet primarily).
• Perform root cause analysis for incidents and outages.
• Produce network diagrams, designs, templates and scripts.
• Support web-proxy environments (Zscaler or McAfee Web Proxy).
• Escalate issues and guide team members.

Conoscenze

Fortinet certification

FortiGate

FortiManager

Fortinet Secure SD-WAN

FortiAnalyzer

eBGP

iBGP

OSPF

IPSEC

VPN

LAN/WAN

VLANs

NAT

Wireless

Switches

MPLS

Descrizione del lavoro

Network Security Engineer – Firewalls, Routing & SD-WAN

Network Security Engineer – Firewalls, Routing & SD-WAN

New York City, NY | On-site | Full-Time | Permanent Employment | Mid-Senior Level

MaxIT Consulting – Max Corporate Group is looking for a hands-on Network Engineer with strong Fortinet expertise to join a global professional services organization supporting clients in the financial services and commercial banking sector.

You will own escalated network incidents, root cause analysis and the design of secure LAN/WAN, SD-WAN and firewall solutions for a multi-site enterprise environment.

THE CHALLENGE

This is a senior, hands-on engineering role: you will design, implement and troubleshoot enterprise networks built predominantly on Fortinet, resolve P1–P4 incidents, and guide stakeholders through technical decisions. The environment runs 24x7, so flexibility to support critical incidents is required.

KEY RESPONSIBILITIES

• Design, implement and transition firewalls, switches, access points and other network solutions.
• Troubleshoot LAN/WAN, SD-WAN, routing, switching, VPN, firewall and VoIP equipment (predominantly Fortinet).
• Perform root cause analysis for P1/P2/P3/P4 incidents and critical outages.
• Produce network assessments, capacity plans, detailed designs, implementation/test plans, configuration templates and scripts.
• Create accurate network diagrams and design documentation (Visio).
• Support web-proxy environments such as Zscaler or McAfee Web Proxy.
• Escalate service issues and risks, and provide guidance to team members.

WHAT WE ARE LOOKING FOR

• 5 to 7 years of professional network engineering experience.
• Fortinet certification at professional or expert level: FCP, FCSS or NSE 4–8 (required).
• Advanced hands-on experience with FortiGate, FortiManager, Fortinet Secure SD-WAN and FortiAnalyzer.
• Strong knowledge of routing protocols and technologies: eBGP, iBGP, OSPF, IPSEC, traceroute, NetFlow.
• Extensive experience designing, configuring and managing enterprise-grade firewall solutions and network security architectures.
• LAN/WAN administration: DHCP, DNS, VLANs, NAT, wireless and switches.
• Experience designing and deploying multi-site environments with VLANs, MPLS, SSL and IPSEC.
• Strong analytical, problem-solving and communication skills.

NICE TO HAVE

• Cisco or Check Point certifications.
• Zero Trust frameworks and NIST CSF or similar standards.
• Pulse Secure Access Gateway and Citrix NetScaler ADC load balancers.
• Consultative experience guiding the selection of technical solutions.

POSITION DETAILS

• Work arrangement: On-site
• Schedule: Full-time, in a 24x7 environment
• Seniority: Mid-Senior
• Location: New York City, New York, United States
• Travel: Occasional

The position offers a full benefits package and annual bonus eligibility.

WORK AUTHORIZATION

Candidates authorized to work in the United States are welcome to apply, and candidates who require a visa will also be considered. No security clearance is required.