Senior Network Security Engineer

ADP, Inc.; Miami (FL); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health insurance

Vision

Employer paid life insurance

STD

LTD

Sick days

Holidays

Tuition assistance

Parental leave

401K plan with company match

Job summary

Unique Vacations, Inc. in Miami is seeking a Senior Network Security Engineer to own and harden Fortinet security platforms across data centers, offices, call centers, and cloud environments.

The role focuses on FortiManager, FortiGate, FortiAnalyzer, FortiClient EMS, Darktrace, and FireMon to maintain PCI DSS alignment. This hands-on engineer partners with Network Engineering and Security Operations, supports VPN access and Identity/AD mappings, and leads security runbooks, incident response,

Qualifications

• Fortinet platforms in a multi-site environment.
• Strong knowledge of TCP/IP, NAT, VPN, DNS, and web filtering.
• Experience with PCI DSS network requirements and audits.
• Scripting or automation skills (Python, PowerShell, FortiOS CLI, or Power Automate).
• Ability to document thoroughly and own issues through closure.

Responsibilities

• Own FortiManager as central security management platform and maintain policies, objects, and blocks.
• Administer FortiAnalyzer, ensure reliable log collection and SIEM forwarding.
• Own VPN access model with SAML authentication and AD/MFA mapping.
• Operate FireMon for device onboarding, audits, and change reporting.
• Lead security workstreams for network, data center, and cloud projects (AWS/Azure).
• Serve as escalation point for network security incidents and follow CAB processes.

Skills

Fortinet Expertise

Network Security

Detection & Compliance

Identity & Automation

Communication & Ownership

Education

Bachelor’s degree in Cybersecurity/IT

Tools

FortiManager

FortiGate

FortiAnalyzer

FortiClient EMS

Darktrace

FireMon

Splunk

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Senior Network Security Engineer

IT Cyber Security Full Time Professional Miami, FL, US

DO WHAT YOU LOVE!

Unique Vacations, Inc. -- an affiliate of the worldwide representative for Sandals Resortsand Beaches Resorts -- is seeking a forward-thinking Senior Network Security Engineerto join its remarkable Miami-based, in-house team.

WHO ARE WE?

Unique Vacations, Inc. is an affiliate of the worldwide representative of Sandals Resorts and Beaches Resorts. We provide exclusive, marketing, public relations, advertising, promotions, and creative services to showcase the Luxury Included experience, which guests have come to adore for 40 years and counting for Sandals & Beaches Resorts.

We are ever-dedicated to our customers, vendors, and our most precious commodity -- our TEAM! At Unique Vacations, Inc. we know our company is most powerful when everyone can make their mark. When you do what you love, you will be empowered to create the future that you want!

JOB DESCRIPTION:

The Senior Network Security Engineer is a hands-on technical role responsible for managing and continuously hardening the network security controls and tools of Unique Vacations, Inc. (UVI) across its data centers, corporate offices, call centers, and cloud environments. The role owns FortiManager and the FortiGate security policies, FortiAnalyzer, FortiClient EMS and VPN user access, Darktrace network detection and response, and FireMon firewall policy management, and is a primary contributor to PCI DSS network compliance. The position partners closely with Network Engineering, which operates the firewalls and VPN gateways, as well as Systems Administration, the Security Operations team, managed security providers, and vendors. The role has no direct reports at this time and is based in Miami, Florida.

JOB ROLES AND RESPONSIBILITIES:

Firewall Security Management (FortiManager)

• Own FortiManager as the central security management platform, including policy packages, shared objects, threat feeds, naming standards, upgrades, and backups.
• Define and maintain FortiGate security controls, including IPS, application control, web and DNS filtering, threat-intelligence and geo-blocking, and centralized IP and URL block lists.
• Review firewall rule, NAT, and connectivity requests for business need, least privilege, and exposure before implementation by Network Engineering.
• Perform periodic firewall rule reviews and track remediation of unused or overly permissive rules with Network Engineering.

Security Monitoring and Detection

• Administer FortiAnalyzer, ensuring reliable log collection, retention, reporting, and forwarding to the SIEM.
• Administer the NDR platform (Platform: Network, Email, and Identity), including appliances, upgrades, model tuning, and integrations.
• Build and maintain security alert integrations to Microsoft Teams and Jira using properly governed service accounts.

VPN User Access

• Own the VPN access model, including SAML authentication and AD/MFA group mapping, aligned with least privilege.
• Manage FortiClient EMS (on-premises and cloud), review and approve VPN access requests, and onboard contractors and vendors.
• Troubleshoot user access issues and elevate gateway or infrastructure issues to Network Engineering.

PCI DSS and Firewall Policy Management

• Operate FireMon for device onboarding, scheduled compliance reports, and change reporting.
• Perform quarterly network device audits, produce PCI DSS evidence, and drive remediation with Network Engineering.
• Support the annual PCI network assessment and ensure changes do not expand PCI scope or weaken segmentation.

Incident Response and Operations

• Serve as a technical escalation point for network-related security incidents, including blocking, isolation, and containment.
• Participate in the Information Security on-call rotation and follow the change-management (CAB) process for all changes.

Projects, Documentation, and Vendors

• Lead the security workstreams of network, data center, and cloud (AWS and Azure) projects.
• Create and maintain runbooks, standards, and inventories so that no knowledge depends on a single person.
• Manage relationships and support cases with vendors and partners such as Fortinet, Darktrace, and FireMon.
• Other duties as required by management.

COMPETENCE REQUIREMENTS:

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Qualifications include:

Fortinet Expertise: Advanced hands-on experience with FortiManager, FortiAnalyzer, FortiClient EMS, and FortiGate security features in a multi-site environment.

Network Security: Strong knowledge of TCP/IP, segmentation, NAT, IPS, VPN, DNS, and web filtering, with enough routing and HA knowledge to partner effectively with Network Engineering.

Detection and Compliance: Experience with Darktrace or similar NDR, SIEM (Splunk preferred), and PCI DSS 4.0 network requirements.

Identity and Automation: Experience with Okta SAML and Active Directory, plus scripting or automation (Python, PowerShell, FortiOS CLI, or Power Automate).

Communication and Ownership : Able to work independently, document thoroughly, and drive issues through validated closure.

EXPERIENCE:

Outlined below are the academic qualifications and length and type of experience deemed necessary by Unique Vacations Inc. in order to perform the role of Senior Network Security Engineercompetently.

Education:

Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related discipline preferred. Equivalent relevant experience may be considered in lieu of a degree.

Experience:

5+ years of network security or network engineering experience, including 3+ years administering Fortinet security platforms in an enterprise environment.

• Experience supporting PCI DSS or other regulatory audits with network security evidence.
• Experience with firewall policy management tools (FireMon, Tufin, AlgoSec, or Nipper) is preferred.
• Certifications: Fortinet NSE 4 / FCP required or obtained within 6 months; NSE 7 / FCSS, CCNP Security, GIAC, or CISSP preferred.

BENEFITS:

We offer a full benefits package including:

• Health
• Vision
• Employer paid life insurance, STD, and LTD
• Sick days
• 9 Holidays
• Tuition assistance
• Parental leave
• 401K plan with a generous company match

Additional perk: After 6 months of continuous employment, you may visit the resorts we represent at a discounted rate.

Once you visit one of the properties, you will not only experience the best of what the brand has to offer but you will get to see first-hand what makes us so passionate and most of all so “Unique”.

ABOUT UNIQUE VACATIONS:

Unique Vacations Inc. is an affiliate of the worldwide representative of Sandals and Beaches Resorts – exclusively providing, marketing, public relations, advertising, promotions, and creative services to showcase the Luxury Included experience, which the guests have come to adore for 40 years and counting for Sandals and Beaches Resorts.

Designed for couples in love, Sandals Resorts boasts 19 Luxury Included resorts located on the Caribbean’s best beaches in Jamaica, Bahamas, Barbados, Antigua, Curaçao, St. Lucia, St. Vincent and Grenada. The family-friend resorts for everyone, Beaches Resorts offers three magnificent locations in Jamaica and Turks & Caicos.

We are headquartered in sunny South Florida – a hop, skip and a jump from the glorious Caribbean islands.