Senior Network Engineer, Managed Services

Iofortress; San Juan (PR); On-site; USD 90,000 - 150,000; Full time

Job summary

ioFortress Group is seeking a Senior Network Engineer to operate, secure, and scale the network infrastructure for private-sector clients and government agencies across Puerto Rico.

The role emphasizes FortiManager administration, FortiGate deployments, and centralized management across multiple sites. Candidates will work directly with clients and require Spanish/English proficiency.

Qualifications

• Five+ years of hands-on enterprise network engineering experience with production infrastructure.
• FortiManager administration in production environments required; include ADOMs, device onboarding, policy packages, and deployment tasks.
• BGP/OSPF dynamic routing experience and SD-WAN design capabilities.
• Fluency in Spanish and English for documentation and client communications.

Responsibilities

• Administer FortiManager as the central platform for multiple client environments and FortiGate devices.
• Manage FortiAnalyzer for logs, reports, and audit evidence.
• Coordinate Aruba Central for switching and wireless deployments, templates, and firmware.
• Plan and execute configuration changes with approvals, backups, and rollback procedures.
• Produce technical documentation in Spanish for government clients.
• Engage with clients in technical meetings and project planning.

Skills

FortiManager administration

FortiGate administration

FortiAnalyzer

Aruba Central

SD-WAN

BGP

OSPF

VLAN

Education

Networking or network security certification (e.g., Fortinet FCP, Cisco CCNP)

Tools

FortiManager

FortiGate

FortiAnalyzer

Aruba Central

FortiSwitch/ FortiAP

Job description

ioFortress Group is seeking a Senior Network Engineer to operate, secure, and scale the network infrastructure we manage for private-sector clients and government agencies across Puerto Rico.

This role supports multiple client environments and dozens of network and security devices. Our operations rely on centralized management through FortiManager, FortiAnalyzer, and Aruba Central. The successful candidate must be comfortable managing device fleets, standardizing configurations, and deploying controlled changes across multiple sites and customers.

Demonstrated, hands-on experience administering FortiManager is a mandatory requirement for this position. Candidates must be able to manage policy packages, ADOMs, device onboarding, configuration templates, and deployments to production FortiGate devices. Experience with other centralized management platforms is valuable but does not replace the FortiManager requirement. The position reports to the Technical Department and works directly with clients.

Key Responsibilities

Centralized Network Management

Senior Network Engineer

ioFortress Group | Puerto Rico

Position Overview

ioFortress Group is seeking a Senior Network Engineer to operate, secure, and scale the network infrastructure we manage for private-sector clients and government agencies across Puerto Rico.

This role supports multiple client environments and dozens of network and security devices. Our operations rely on centralized management through FortiManager, FortiAnalyzer, and Aruba Central. The successful candidate must be comfortable managing device fleets, standardizing configurations, and deploying controlled changes across multiple sites and customers.

Demonstrated, hands-on experience administering FortiManager is a mandatory requirement for this position. Candidates must be able to manage policy packages, ADOMs, device onboarding, configuration templates, and deployments to production FortiGate devices. Experience with other centralized management platforms is valuable but does not replace the FortiManager requirement. The position reports to the Technical Department and works directly with clients.

Key ResponsibilitiesCentralized Network Management

• Administer FortiManager as the central platform for managing FortiGate devices across multiple client environments, including ADOMs, policy packages, shared objects, dynamic mappings, provisioning templates, scripts, and deployment workflows.
• Review configuration differences, validate installation previews, resolve deployment issues, and maintain consistency between FortiManager and managed devices.
• Plan and execute coordinated configuration changes across multiple devices and clients, following established approval, backup, validation, and rollback procedures.
• Administer FortiAnalyzer, including log retention, analysis, recurring client reports, and evidence collection for audits and incident investigations.
• Manage switching and wireless infrastructure through Aruba Central, including configuration groups, templates, firmware deployments, monitoring, and alert resolution.
• Maintain naming conventions, configuration baselines, and onboarding standards to ensure consistent deployment of new devices.
• Coordinate firmware upgrades across the managed device fleet, including compatibility checks, maintenance windows, post-upgrade validation, and rollback plans.

Network and Security Engineering

• Operate production FortiGate infrastructure ranging from FortiGate 60F appliances to FortiGate 3701F high-availability pairs.
• Design and implement VDOM-based segmentation, including restructuring environments that currently operate within a single root VDOM and migrating policies between devices.
• Configure and troubleshoot site-to-site and remote-access connectivity, including IPsec, dial-up VPN, SSL VPN where supported, LDAPS authentication, and FortiToken.
• Design and maintain SD-WAN configurations and redundant internet connectivity, coordinating circuits with providers such as Claro, Liberty, and Data Access.
• Implement BGP connectivity to interagency networks, including peering, prefix advertisements, routing policies, and BFD.
• Configure switching and VLAN segmentation, including redundant uplinks, trunking, spanning tree, and link aggregation.
• Execute network migration and equipment replacement projects, including configuration cleanup, interface mapping, cutover planning, and service validation.

Operations and Client Engagement

• Own incidents from initial investigation through resolution, including containment, root cause analysis, documentation, and coordination with Fortinet TAC or other vendors.
• Conduct on-site infrastructure assessments and translate findings into prioritized recommendations.
• Produce formal technical documentation in Spanish, including topology diagrams, configuration records, implementation plans, meeting minutes, and post-implementation reports.
• Participate in technical meetings with clients and government agencies to gather requirements and explain technical decisions clearly.
• Support security hardening and compliance initiatives, including the documentation and evidence required by government clients.

Minimum Requirements

• At least five years of hands-on enterprise network engineering experience, with direct responsibility for production infrastructure.
• Proven FortiManager administration experience in production environments. This is a required qualification, not a preferred skill. Experience must include:
• Managing ADOMs and onboarding FortiGate devices.
• Creating, maintaining, and deploying policy packages.
• Managing shared objects and device-specific mappings.
• Working with provisioning templates and scripts.
• Reviewing configuration changes and installation previews.
• Troubleshooting policy installations and configuration synchronization issues.
• FortiGate administration alone does not satisfy the FortiManager requirement. Experience limited to monitoring devices or viewing dashboards is insufficient.
• Demonstrated FortiGate and FortiOS administration experience, including firewall policies, VDOMs, VPNs, routing, and incident troubleshooting.
• Production experience with dynamic routing using BGP, OSPF, or both, including provider peering.
• Strong switching fundamentals, including VLANs, trunking, spanning tree, and link aggregation.
• A current networking or network security certification, such as Fortinet FCP, Cisco CCNP, or an equivalent credential.
• Professional proficiency in spoken and written Spanish and English. Documentation for government clients must be written in Spanish.
• Residence in Puerto Rico and availability for on-site client visits.
• A valid driver’s license and reliable personal transportation.
• Availability for scheduled maintenance outside regular business hours and participation in an on-call rotation.

Applicants should clearly describe their FortiManager experience on their résumé, including the environments managed and the administration and deployment tasks performed.

Preferred Qualifications

Candidates are not expected to meet every qualification below.

• Advanced Fortinet certifications or specialization in enterprise firewalls, SD-WAN, LAN edge, network security, or SASE.
• Experience working for a managed service provider or systems integrator supporting multiple clients simultaneously.
• Experience supporting government contracts in Puerto Rico, including formal documentation and audit evidence requirements.
• Experience with FortiAnalyzer and Aruba Central.
• Experience with Aruba CX or Instant On in multisite environments.
• Automation experience using Python, PowerShell, or the FortiManager and FortiGate REST APIs.
• Experience integrating firewall logs with SIEM platforms such as Elastic, QRadar, or similar solutions.
• Familiarity with cloud networking and security in AWS or Azure, including security groups and route analysis.
• Experience with FortiSwitch, FortiAP, or FortiSASE.

Professional Competencies

• Change discipline: Document changes, back up configurations, assess impact, and establish a rollback plan before modifying production environments.
• Ownership and independence: Drive issues and projects through completion without requiring step-by-step supervision.
• Technical writing: Clearly document work in Spanish so that clients, technical teams, and auditors can understand the actions taken and their results.
• Client communication: Communicate effectively during technical meetings, incident calls, and project presentations.
• Mentorship: Support the development of junior technical staff by sharing knowledge and providing practical guidance.
• ioFortress Group is an equal opportunity employer.