Network Security Engineer – Firewalls, Routing & SD-WAN

MaxIT Consulting - Max Corporate Group; New York (NY); On-site; USD 110,000 - 170,000; Full time

Job summary

MaxIT Consulting – Max Corporate Group is seeking a hands-on Network Engineer with Fortinet expertise to design, implement and support secure LAN/WAN, SD‑WAN and firewall solutions for a multi-site enterprise in financial services. You will own escalated incidents, perform root-cause analysis, and guide technical decisions in a 24x7 on-site environment in New York City.

The role requires 5–7 years of experience and Fortinet certifications; on-site permanent full-time employment with a

Qualifications

• 5 to 7 years of professional network engineering experience.
• Fortinet certification at professional or expert level: FCP, FCSS or NSE 4-8 (required).
• Advanced hands-on experience with FortiGate, FortiManager, Fortinet Secure SD-WAN and FortiAnalyzer.
• Strong knowledge of routing protocols and technologies: eBGP, iBGP, OSPF, IPSEC, traceroute, NetFlow.
• Extensive experience designing, configuring and managing enterprise-grade firewall solutions and network security architectures.
• LAN/WAN administration: DHCP, DNS, VLANs, NAT, wireless and switches.
• Experience designing and deploying multi-site environments with VLANs, MPLS, SSL and IPSEC.
• Strong analytical, problem-solving and communication skills.

Responsibilities

• Design, implement and transition firewalls, switches, access points and other network solutions.
• Troubleshoot LAN/WAN, SD‑WAN, routing, switching, VPN, firewall and VoIP equipment (predominantly Fortinet).
• Perform root cause analysis for P1/P2/P3/P4 incidents and critical outages.
• Produce network assessments, capacity plans, detailed designs, implementation/test plans, configuration templates and scripts.
• Create accurate network diagrams and design documentation (Visio).
• Support web-proxy environments such as Zscaler or McAfee Web Proxy.
• Escalate service issues and risks, and provide guidance to team members.

Skills

Fortinet expertise

Fortinet certifications

Routing protocols

LAN/WAN design

Network troubleshooting

VPN

IPSEC

WAN optimization

Education

Bachelor's degree

Tools

FortiGate

FortiManager

Fortinet Secure SD-WAN

FortiAnalyzer

Visio

NetFlow

Zscaler

McAfee Web Proxy

Job description

Network Security Engineer - Firewalls, Routing & SD-WAN

New York City, NY | On-site | Full-Time | Permanent Employment | Mid-Senior Level

MaxIT Consulting – Max Corporate Group is looking for a hands‑on Network Engineer with strong Fortinet expertise to join a global professional services organization supporting clients in the financial services and commercial banking sector.

You will own escalated network incidents, root cause analysis and the design of secure LAN/WAN, SD‑WAN and firewall solutions for a multi‑site enterprise environment.

THE CHALLENGE

This is a senior, hands‑on engineering role: you will design, implement and troubleshoot enterprise networks built predominantly on Fortinet, resolve P1-P4 incidents, and guide stakeholders through technical decisions. The environment runs 24x7, so flexibility to support critical incidents is required.

KEY RESPONSIBILITIES

• Design, implement and transition firewalls, switches, access points and other network solutions.
• Troubleshoot LAN/WAN, SD‑WAN, routing, switching, VPN, firewall and VoIP equipment (predominantly Fortinet).
• Perform root cause analysis for P1/P2/P3/P4 incidents and critical outages.
• Produce network assessments, capacity plans, detailed designs, implementation/test plans, configuration templates and scripts.
• Create accurate network diagrams and design documentation (Visio).
• Support web‑proxy environments such as Zscaler or McAfee Web Proxy.
• Escalate service issues and risks, and provide guidance to team members.

WHAT WE ARE LOOKING FOR

• 5 to 7 years of professional network engineering experience.
• Fortinet certification at professional or expert level: FCP, FCSS or NSE 4-8 (required).
• Advanced hands‑on experience with FortiGate, FortiManager, Fortinet Secure SD‑WAN and FortiAnalyzer.
• Strong knowledge of routing protocols and technologies: eBGP, iBGP, OSPF, IPSEC, traceroute, NetFlow.
• Extensive experience designing, configuring and managing enterprise‑grade firewall solutions and network security architectures.
• LAN/WAN administration: DHCP, DNS, VLANs, NAT, wireless and switches.
• Experience designing and deploying multi‑site environments with VLANs, MPLS, SSL and IPSEC.
• Strong analytical, problem‑solving and communication skills.
• Bachelor's degree.

NICE TO HAVE

• Cisco or Check Point certifications.
• Zero Trust frameworks and NIST CSF or similar standards.
• Pulse Secure Access Gateway and Citrix NetScaler ADC load balancers.
• Consultative experience guiding the selection of technical solutions.

POSITION DETAILS

• Work arrangement: On-site
• Schedule: Full-time, in a 24x7 environment
• Employment type: Permanent employment
• Seniority: Mid-Senior
• Location: New York City, New York, United States
• Travel: Occasional
• Relocation assistance: Not available

The position offers a full benefits package and annual bonus eligibility.

WORK AUTHORIZATION

Candidates authorized to work in the United States are welcome to apply, and candidates who require a visa will also be considered. No security clearance is required.