Fortinet Network Security Engineer

About Rozmith:

• Rozmith is a managed IT services and cybersecurity provider that helps organizations run, secure, and scale their technology with confidence. From core managed services to advanced security and compliance programs, our clients rly on us as an extension of their own teams. That trust is earned through consistent, high-quality service delivery - and that's where you come in.

About the Role:

• Rozmith is looking for a Fortinet Network Security Engineer to design, deploy, and support Fortinet security solutions across our client environments. You will own the day-to-day health of FortiGate firewalls and the surrounding Fortinet Security Fabric, act as a technical escalation point for our service desk, and work directly with clients to harden, troubleshoot, and improve their network security posture.
• This is a hands-on, mid-level engineering role. You should be comfortable working independently on firewall deployments and migrations, confident trouleshooting complex network and VPN issues under pressure, and motivated to keep growing your Fortinet expetrise through certifaction and lab work.

What You'll Do:

• Deploy, configure, and maintain FortiGate firewalls (physical and virtual) across client environments, including HA clusters, SD-WAN, and multi-site topologies.
• Administer the broader Fortinet Security Fabric - FortiManager, FortiAnalyzer, FortiSwitch, FortiAP, and FortiClient EMS - for centralized management, logging, and endpoint control.
• Build and support site-to-site and remote-access VPNs (IPsec and SSL), including troubleshooting tunnel, routing, and performance issues.
• Configure and tune security profiles: IPS, antivirus, web filtering, application control, DNS filtering, and SSL/TLS inspection.
• Plan and execute firewall migrations and firmware upgrade cycles with minimal client disruption, including rollback planning and post-change validation.
• Serve as an escalation point for network and security incidents, performing packet captures, debug analysis, and root-cause investigation.
• Monitor client environments, respond to security events and alerts, and recommend remediation and hardening improvements.
• Produce and maintain accurate documentation: network diagrams, configuration standards, runbooks, and change records.
• Participate in client onboarding projects, security assessments, and firewall policy reviews and cleanup.
• Collaborate with project and account teams on solution design, scoping, and implementation for new client engagements.
• Participate in a rotating on-call schedule for after-hours escalations.

What You'll Bring:

• 3-5 years of hands-on network/security engineering experience, with at least 2 years administering FortiGate firewalls in production.
• Strong working knowledge of the FortiOS CLI and GUI, including policy design, NAT, routing, and diagnostics (CLI debug, packet sniffer, flow trace).
• Experience with IPsec and SSL VPN design and troubleshooting.
• Experience with high availability configurations (FGCP) and firmware lifecycle management.
• Ability to read and interpret logs and traffic data in FortiAnalyzer or a SIEM to investigate incidents.
• Clear written and verbal communication skills - you can explain technical issues and recommendations to non-technical client contacts.
• Strong documentation habits and disciplined change management practices.
• Fortinet Certified Professional (FCP) in Network Security - or the legacy NSE 4 certification - or the ability to achieve it within 6 monts of hire.

Nice to Have:

• Fortinet Certified Solution Specialist (FCSS) or progress toward the Fortinet Certified Expert (FCX) track.
• Experience in an MSP or MSSP environment supporting multiple client networks.
• Hands-on experience with Fortinet SD-WAN design and application steering at scale.
• Familiarity with FortiEMS, FortiSASE, FortiNAC, FortiAuthenticator (MFS/SSO), or FortiWeb.
• Exposure to network automation and scripting (Python, Ansible, REST APIs) for configuration and reporting tasks.
• Experience with other security stacks (Cisco, Palo Alto, Check Point) and multi-vendor environments.
• Additional certifications such as CCNA, Network+, or Security+.
• Experience supporting compliance-driven environments (PCI DSS, HIPAA, CMMC) and audit evidence gathering.

Why Rozmith:

• Work across a diverse portfolio of client environments - no two weeks look the same.
• A team that invest in growth: paid certification exams, lab environments, and dedicated training time.
• Modern tooling and a mature engineering practice with real documentation and change control.
• A collaborative culture where engineering have a direct voice in how solutions are designed and delivered.