Senior FortiGate / Cisco Security Engineer

Carlysle Human Capital; Centurion; On-site; ZAR 400,000 - 500,000; Full time

Job summary

A leading tech recruitment firm in Centurion is seeking a Firewall Engineer to design, implement, and manage secure firewall solutions. The ideal candidate will have 3-5 years of experience in firewall administration, with hands-on expertise in Fortigate, Cisco ASA, and Firepower technologies. Responsibilities include configuring firewall policies and performing security audits. This is a permanent position in Gauteng.

Qualifications

• 3-5 years of experience in firewall administration.
• Hands-on expertise with Fortigate, Cisco ASA, and Cisco Firepower.
• Strong understanding of network protocols (TCP/IP, BGP, OSPF, VLANs).

Responsibilities

• Configure, monitor, and maintain Fortigate and Cisco firewall appliances.
• Design and implement firewall policies, NAT, VPNs (IPSec/SSL).
• Perform security audits, penetration testing, and vulnerability assessments.

Skills

Firewall administration

Fortigate expertise

Cisco ASA

Cisco Firepower

Network protocols

Security solutions

Education

Fortinet NSE4/5 certification

CCNP Security certification

Job description

Overview

Location: Centurion Eco Park, Gauteng • Job Type: Permanent

Role Purpose: Design, implement and manage secure firewall solutions using Fortigate and Cisco ASA/Firepower technologies. Responsible for maintaining network security and proactively identifying threats and vulnerabilities.

Responsibilities

• Configure, monitor, and maintain Fortigate and Cisco firewall appliances.
• Design and implement firewall policies, NAT, VPNs (IPSec/SSL).
• Perform security audits, penetration testing, and vulnerability assessments.
• Respond to security incidents and provide Level 2/3 support.
• Collaborate with IT teams to ensure secure system design and compliance.
• Generate reports for compliance and analysis.

Requirements

• 3-5 years’ experience in firewall administration.
• Hands-on expertise with Fortigate, Cisco ASA, and Cisco Firepower.
• Strong understanding of network protocols (TCP/IP, BGP, OSPF, VLANs).
• Familiarity with IDS/IPS, SIEM, and endpoint security solutions.
• Certifications: Fortinet NSE4/5, CCNP Security, or similar desirable.