Retail IT Network Engineer – Relocation to Los Angeles

Goodwin Recruiting; Phoenix (AZ); On-site; USD 115,000 - 130,000; Full time

Benefits offered by this job

Relocation assistance

Health & wellness benefits

Professional development incl. funded–

Hands-on projects and certifications

Job summary

Goodwin Recruiting seeks a Retail IT Network Engineer to join a 50+ location enterprise network. You will configure Fortinet firewalls, VPNs, switches, and NAC while collaborating across a distributed team.

Relocation to Los Angeles is provided, with regional travel up to 25%. The role focuses on hybrid cloud networking with AWS Transit Gateway and VPCs, alongside ongoing training and certifications.

Qualifications

• 3+ years of multi-site network operations experience with hands-on configuration and troubleshooting of firewalls, routing, switching, and VPNs.
• Hands-on enterprise experience with FortiGate and FortiManager; FortiSwitch, FortiNAC, and FortiAnalyzer is highly desirable.
• Experience supporting a distributed network across 20+ sites; solid firewall policy design and secure change management.
• Hybrid cloud networking experience with VPCs, VPNs, and Transit Gateway; Azure experience not a substitute.

Responsibilities

• Configure, maintain, and troubleshoot Fortinet firewalls, switches, routing, VPNs, and connectivity across 50+ locations.
• Lead NAC deployment activities with FortiNAC, endpoint profiling, posture assessment, and 802.1X enforcement.
• Implement identity-based authentication, dynamic VLAN assignment, and micro-segmentation across devices and store systems.
• Audit, migrate, and consolidate distributed networks using FortiManager administration.
• Maintain secure site-to-cloud connectivity using VPNs, SD-WAN, AWS VPCs, and Transit Gateway architectures.
• Manage FortiGate policies, improve rule hygiene, and support change control.
• Serve as Tier 3 escalation for routing, switching, firewall, VPN, and site connectivity issues.

Skills

Multi-site network operations

Firewall configuration & troublesh.

VPN & routing troubleshooting

Security design & least-privilege

On-call & maintenance readiness

Tools

FortiGate/FortiManager/FortiNAC/FortiAnalyzer

FortiSwitch

AWS VPCs & Transit Gateway

Job description

Join a collaborative, forward-thinking IT infrastructure team as a hands-on Retail IT Network Engineer, helping secure and modernize a 50+ location enterprise network. You'll work alongside experienced engineers on high-impact initiatives spanning Fortinet networking, Zero Trust security, Network Access Control (NAC), and AWS connectivity. This is an opportunity to own meaningful engineering projects, expand your technical expertise, and make a real impact in a supportive environment that invests in your growth.

This role requires relocation to Los Angeles and will come with assistance.

Retail IT Network Engineer Perks

• $115,000–$130,000 base salary plus a 10% annual bonus
• Relocation allowance available for qualified candidates moving to Los Angeles
• Competitive benefits package, including health and wellness coverage
• Work alongside experienced, collaborative engineers who value knowledge-sharing and professional development
• Hands-on engineering projects from day one, with opportunities for funded training and industry certifications

Retail IT Network Engineer Requirements

• 3+ years of multi-site network operations experience, with hands-on configuration and troubleshooting of firewalls, routing, switching, and VPNs
• Strong preference for hands-on enterprise experience with FortiGate and FortiManager; FortiSwitch, FortiNAC, and FortiAnalyzer experience is highly desirable
• Experience supporting a distributed network across multiple locations; experience with 20+ sites
• Solid understanding of firewall policy design, network segmentation, least-privilege access, and secure change management
• Hands-on experience with hybrid cloud networking, including VPCs, VPNs, routing, and ideally AWS Transit Gateway. Azure-only experience is not a substitute
• Must live in or relocate to Los Angeles, and be comfortable working onsite, traveling regionally up to 25%, and participating in scheduled after-hours maintenance and a shared on-call rotation

Retail IT Network Engineer Responsibilities

• Configure, maintain, and troubleshoot Fortinet firewalls, switches, routing, VPNs, and network connectivity across 50+ locations
• Lead NAC deployment activities to implement FortiNAC, endpoint profiling, posture assessment, and 802.1X access enforcement
• Implement identity-based authentication, dynamic VLAN assignment, and micro-segmentation across corporate devices, retail IoT, and store systems
• Audit, migrate, and consolidate distributed network environments using centralized FortiManager administration
• Maintain secure site-to-cloud connectivity using VPNs, SD-WAN, AWS VPCs, and Transit Gateway architectures
• Manage FortiGate firewall policies, improve rule-set hygiene, support change control, and use FortiAnalyzer for logging and incident investigation
• Serve as a Tier 3 escalation resource for routing, switching, firewall, VPN, and site connectivity issues
• Participate in scheduled maintenance, shared on-call coverage, incident response, documentation, and continuous network improvement