Senior Network Engineer

Sr. Network Engineer – NAC Specialist (Fortinet)

This is a newly added Senior Network Engineer position, working alongside our existing network team, with a specific focus on Network Access Control (NAC). The company is deep into an active FortiNAC deployment and needs a specialist with hands-on, day-to-day NAC operational experience who can be immediately effective, in addition to strong general networking skills. This position requires a highly skilled and motivated professional who can manage complex network systems in a dynamic and fast-paced environment, and who can take ownership of NAC policy, troubleshooting, and rollout as a subject matter expert.

· Design, operate, and continuously improve LAN, WAN, and wireless networks

· Strong knowledge of LAN/WAN fundamentals, including TCP/IP, VLANs, Routing protocols, SDWAN, and wireless technologies

· Monitor and maintain all network / WAN connectivity to support efficient branch office communications and perform capacity planning.

· Collaborate with other network staff to find solutions to networking issues.

· Propose design improvements, make recommendations, and perform implementations to achieve best practices.

· Strong written and verbal communication skills, with the ability to explain complex technical topics clearly to a range of audiences.

· Interact with internal clients to resolve issues; communicate with internal clients in a professional manner maintaining discretion.

· Deep understanding of physical network infrastructure, such as MDF/IDF design, cabling, optics, and circuit provisioning.

· Coordinate with 3rd party support on complex infrastructure issues and serve as incident owner through full incident lifecycle including reporting, researching, resolution, RCA and lessons learned.

· Operate enterprise remote access solutions such as SSL VPNs, SASE, SSE

· Serve as the team's subject matter expert for Network Access Control (NAC), owning policy design, troubleshooting, and ongoing operational support within an active, in-progress deployment

· 10+ years' experience in related IT infrastructure

· Deep, hands-on expertise in Network Access Control (NAC) required — FortiNAC strongly preferred; verifiable experience with Cisco ISE or Aruba ClearPass will also be considered given the transferable concepts

· SASE, SSE experience

· General firewall experience (required); Fortinet firewall experience is a plus

· Scripting skills are a plus (Ansible, Python)

· Strong understanding of all aspects of design and implementation of corporate networking and systems infrastructure, including SDWAN, MPLS, VPN, DMVPN, network connectivity, Internet access, email, servers, etc.

· Strong knowledge and Hands on experience in configuring BGP, OSPF, IPSEC site to site VPN, DMPVN, VoIP, HSRP, NAT, SDWAN templates and service policies.

· Demonstrated proficiency with IPSEC VPN technology from multiple vendors

· Wireless Access Points and wireless security protocols such as EAP with RADIUS

· Able to troubleshoot network issues from network connectivity, routing, and firewall issues.

· Produce and maintain excellent documentation.

· Capacity planning

· Microsoft Windows Server operating systems

· DNS and DHCP in a global Windows environment

· Proficient with backup and restore technologies and best practices

· Agile project management and operational practice