Senior Network Engineer

Senior Network EngineerBonita Springs, FL, USA, 34134 Employment Status: Full-timeJob PurposeThe Senior Network Engineer is a technical position responsible for the design, implementation, and ongoing management of Herc Rentals' enterprise network, with a primary focus on our Fortinet Secure SD-WAN architecture. Herc Rentals operates a nationwide branch network built on FortiGate SD-WAN edge devices, FortiSwitch access-layer switching, FortiExtender out-of-band management, and centralized visibility/management through FortiAnalyzer and FortiManager. This role provides high-level input on SD-WAN topology, WAN circuit strategy (MPLS, DIA, LTE, Broadband), routing design (EIGRP/BGP), and hybrid cloud connectivity (AWS, Azure, OCI) as the company continues to modernize legacy infrastructure onto the Fortinet platform. The incumbent must understand Herc Rentals' business goals and IT Infrastructure's priorities, and collaborate across the Network & Field Services team, managed service providers, Fortinet, Cisco, & Cisco Meraki to support a large, geographically distributed branch and data center footprint within the Infrastructure Services Portfolio, providing design, planning, and mentorship.What You Will DoDesign, configure, implement, and support Fortinet Secure SD-WAN deployments across branch, data center, and cloud-connected environments.Serve as an escalation point for FortiGate, FortiSwitch, FortiExtender, FortiAnalyzer, and FortiManager configuration, troubleshooting, and lifecycle management.Support and troubleshoot SD-WAN routing and underlay/overlay design, including EIGRP, BGP, and dynamic routing across MPLS, DIA, LTE, and Broadband circuits.Partner with cloud and infrastructure teams on connectivity between branch SD-WAN and hosted workloads in CoLo data centers, AWS, Azure, and Oracle Cloud.Lead or support the ongoing migration of legacy Cisco switching/routing infrastructure to the Fortinet stack (FortiSwitch, FortiGate) as part of enterprise network modernization initiatives.Create and maintain comprehensive documentation of SD-WAN topology, branch network templates/greenfield build standards, HA designs, VPN-to-VPN connectivity, and as-built network diagrams.Oversee Managed Service Provider (MSP)/NOC partners to ensure Fortinet-related network incidents and problems are resolved or escalated within SLA (e.g., firewall monitoring, telecom circuit troubleshooting, out-of-band management via FortiExtender).Provide Engineering-level support for incident and problem management across the SD-WAN environment, including site-specific firewall rules and local policy exceptions.Analyze FortiAnalyzer/FortiManager reports, system logs, and health monitoring data (CPU, memory, sessions, HA status) to proactively identify and remediate issues.Collaborate with vendors (Fortinet, telecom carriers, MSPs) and internal technical teams to plan branch network deployments, greenfield builds, and data center transitions.Develop and manage SD-WAN project plans, including resource estimates, timelines, and stakeholder communication.Advise management on SD-WAN technology roadmap, Fortinet product evaluation, and recommendations for upgrades or new capabilities.Provide on-call support, including nights, weekends, and/or holidays, for SD-WAN and network-related incidents.Train, mentor, and educate other network engineers on Fortinet SD-WAN standards, topology, and troubleshooting methodology.Requirements10+ years' experience in enterprise networking, with hands-on experience designing, deploying, and maintaining Fortinet SD-WAN environments (FortiGate, FortiSwitch, FortiExtender, FortiAnalyzer, FortiManager)Deep working knowledge of FortiOS, FortiGate, FortiManager, and secure SD-WAN.Demonstrated experience with large-scale SD-WAN topology design, including hub-and-spoke, dual-ISP/dual-WAN failover, and HA architecturesExperience provisioning and managing diverse WAN circuit types: MPLS, DIA, LTE, and BroadbandSolid understanding of dynamic routing protocols in an SD-WAN context: BGP, EIGRPExperience with hybrid/multi-cloud connectivity: AWS, Azure, or OCI (Oracle Cloud Infrastructure)Experience with Cisco networking (ISR routers, switches, ASA firewalls, wireless) — particularly valuable in supporting Herc's ongoing Cisco-to-Fortinet migrationExperience with Cisco Meraki Access PointsOverseeing or working alongside a Managed Services/NOC partner for network monitoring and incident escalationExcellent problem-solving and troubleshooting skills, particularly around SD-WAN failover, QoS, and circuit-level performance issuesExperience with network monitoring/analysis tools (e.g., FortiAnalyzer, SolarWinds) and performance tuningComprehensive understanding of TCP/IP, DHCP, DNS, VPN/VPN-to-VPN connectivity, and DMVPNExperience with LAN hardware including patch panels, fiber optic, Cat5e, and Cat6 wiringExperience supporting IP Telephony, Linux, Microsoft Server, and Windows environmentsKnowledge of carrier services, interfaces, and telecom circuit troubleshootingWorking knowledge of Cisco UCS and VMware virtual environmentsPerform routine firmware upgrades, health checks, patch management, and performance monitoring. Resolve escalated network incidents, perform packet capture (PCAP) and log analysis, and execute root cause investigations.Required EducationBachelor's degree in Computer Science / Information Systems (or Similar) or equivalent experienceActive Fortinet certifications (e.g., NSE 4, NSE 7 Enterprise Firewall or SD-WAN, or FCP/FCSS) or equivalent experienceCisco CCIE or CCNP (Preferred) or equivalent experienceSkillsAbility to lift up to 50 poundsAbility to travel up to 25% for projects at data centers and branch/field locationsProficient in customer knowledge transfer and network topology documentationStrong attention to detail in project planning and SD-WAN configuration documentationAbility to apply judgment, implement solutions, and resolve conflicts in a multi-tasked environmentAbility to communicate clearly and concisely, both verbally and in written documentationAbility to thrive in a growing, fast-paced environment undergoing active network modernizationAbility to provide architectural design to new and evolving business requirements.Req #: 70739Pay Range: Based on qualifications.