Location: Sydney
Duration: 6 months + 6 months

Security Clearance: Must have Baseline Clearance or higher

Senior Network & Security Engineer / Fortinet SASE Specialist

Overview
We are seeking a highly experienced Senior Network & Security Engineer / Fortinet SASE Specialist to lead and support the implementation of a large-scale Fortinet SASE transformation across the departments enterprise environments. The environment includes enterprise Data Centers, Azure cloud infrastructure, and multiple branch locations with full redundancy and high availability requirements. The successful candidate will possess deep technical expertise across Fortinet security platforms, enterprise networking, cloud connectivity, routing, and data centre technologies.
Key Responsibilities

• Design and implement Fortinet SASE architecture across enterprise environments
• Deploy and configure FortiSASE capabilities (SD-WAN, FWaaS, SWG, CASB, ZTNA)
• Implement secure connectivity across Data Centers, Azure cloud, branch offices, Internet and SaaS services
• Configure and support FortiGate firewalls across enterprise sites
• Implement high availability and resilient network designs
• Configure and troubleshoot BGP, OSPF, IPSec VPN, dynamic routing, traffic steering and segmentation
• Support integration with Cisco Nexus data centre infrastructure
• Configure and support F5 load balancing environments
• Configure FortiClient VPN and ZTNA solutions
• Support migration and cutover activities
• Produce HLD/LLD and implementation documentation
• Perform complex troubleshooting
• Collaborate with infrastructure, cloud and security teams
• Provide technical leadership
• Lead or support migration of email gateway to Azure-based services
• Design secure mail flow including SMTP and MX records
• Ensure anti-spam, anti-phishing and DLP controls
• Perform testing and cutover

Technical Skills

• Strong hands-on experience implementing Fortinet SASE solutions
• Extensive FortiGate firewall experience
• Strong enterprise routing and switching knowledge
• Experience with BGP, OSPF, SD-WAN, IPSec VPN, HA
• Cisco Nexus, VLANs, VPC, VXLAN
• Azure networking and hybrid connectivity
• F5 load balancers (LTM)
• Network segmentation and security policy design
• Strong troubleshooting skills

Desirable Certifications

• Fortinet NSE / FCSS / FCX
• Cisco CCNP or CAzure Networking certifications

To be considered for the role click the 'apply' button or for more information about this and other opportunities please contact Muhammad Warsi on (0)2 6151 9201 or email: mwarsi@paxus.com.au and quote the above job reference number.

Paxus values diversity and welcomes applications from Indigenous Australians, people from diverse cultural and linguistic backgrounds and people living with a disability. If you require an adjustment to the recruitment process, including the application form in an alternate format, please contact me on the above contact details.