Senior Network Engineer

Sr. Network Engineer – NAC Specialist (Fortinet)This is a newly added Senior Network Engineer position, working alongside our existing network team, with a specific focus on Network Access Control (NAC). The company is deep into an active FortiNAC deployment and needs a specialist with hands-on, day-to-day NAC operational experience who can be immediately effective, in addition to strong general networking skills. This position requires a highly skilled and motivated professional who can manage complex network systems in a dynamic and fast-paced environment, and who can take ownership of NAC policy, troubleshooting, and rollout as a subject matter expert.· Design, operate, and continuously improve LAN, WAN, and wireless networks· Strong knowledge of LAN/WAN fundamentals, including TCP/IP, VLANs, Routing protocols, SDWAN, and wireless technologies· Monitor and maintain all network / WAN connectivity to support efficient branch office communications and perform capacity planning.· Collaborate with other network staff to find solutions to networking issues.· Propose design improvements, make recommendations, and perform implementations to achieve best practices.· Strong written and verbal communication skills, with the ability to explain complex technical topics clearly to a range of audiences.· Interact with internal clients to resolve issues; communicate with internal clients in a professional manner maintaining discretion.· Deep understanding of physical network infrastructure, such as MDF/IDF design, cabling, optics, and circuit provisioning.· Coordinate with 3rd party support on complex infrastructure issues and serve as incident owner through full incident lifecycle including reporting, researching, resolution, RCA and lessons learned.· Operate enterprise remote access solutions such as SSL VPNs, SASE, SSE· Serve as the team's subject matter expert for Network Access Control (NAC), owning policy design, troubleshooting, and ongoing operational support within an active, in-progress deployment· 10+ years' experience in related IT infrastructure· Deep, hands-on expertise in Network Access Control (NAC) required — FortiNAC strongly preferred; verifiable experience with Cisco ISE or Aruba ClearPass will also be considered given the transferable concepts· SASE, SSE experience· General firewall experience (required); Fortinet firewall experience is a plus· Scripting skills are a plus (Ansible, Python)· Strong understanding of all aspects of design and implementation of corporate networking and systems infrastructure, including SDWAN, MPLS, VPN, DMVPN, network connectivity, Internet access, email, servers, etc.· Strong knowledge and Hands on experience in configuring BGP, OSPF, IPSEC site to site VPN, DMPVN, VoIP, HSRP, NAT, SDWAN templates and service policies.· Demonstrated proficiency with IPSEC VPN technology from multiple vendors· Wireless Access Points and wireless security protocols such as EAP with RADIUS· Able to troubleshoot network issues from network connectivity, routing, and firewall issues.· Produce and maintain excellent documentation.· Capacity planning· Microsoft Windows Server operating systems· DNS and DHCP in a global Windows environment· Proficient with backup and restore technologies and best practices· Agile project management and operational practice