Senior Systems Engineer

Network EngineerDesign, configure, and deploy FortiGate, MikroTik, and UniFi firewalls, switches, and routers for internal and client networksStand up and maintain BGP peering with carriers (e.g., regional fiber providers such as 123Net), including new-circuit turn-ups, route advertisement, and failover validationPlan and execute client network migrations and cutovers — phased rollouts, equipment programming and install, circuit migration, and movement of WAN routing onto new firewall pairsBuild and rehearse change plans with clear go/no-go criteria, maintenance windows, and tested rollback / fail-back procedures; coordinate live cutovers over a shared bridge lineDeploy and support SD-WAN (Peplink FusionHub) for multi-site and multi-client connectivityPerform hands-on data-center / colocation work: rack and stack, structured cabling, fiber and SFP+/DAC optics, and accurate port mapping and patchingSupport and modernize legacy Cisco environments (ASA, ASR, Nexus) as they are migrated onto the current platformMaintain accurate network documentation, diagrams, IP/ASN records, and change logs; monitor health and respond to incidentsProvide after-hours and on-call support for scheduled cutovers and critical outagesExperience:5-7 years of proven production experience configuring and troubleshooting FortiGate, MikroTik (RouterOS), and UniFi/Ubiquiti firewalls, switches, and routersHands-on experience with full BGP peering over fiber with one or more upstream carriers, including prefix filtering and multihomed failoverSolid understanding of HA firewall design, WAN failover, NAT, and site-to-site / remote-access VPNExperience planning and executing network migrations and cutovers in maintenance windows, including rollback planningComfortable with hands-on physical work: racking equipment, structured and fiber cabling, and optics (SFP+/DAC)Willingness & availability to work scheduled after-hours cutovers and participate in an on-call rotationStrong troubleshooting discipline and clear written/verbal communication for real-time cutover coordinationPreferred / Bonus QualificationsCisco experience — ASA firewalls, ASR routers, and Nexus (N9K) switchesPeplink / SD-WAN (FusionHub) deployment and administrationSIP / voice networking and session border controllers (e.g., Ingate)Managed Service Provider (MSP) experience supporting multiple client environments concurrentlyRelevant certifications: Fortinet NSE; MikroTik MTCNA / MTCRE; Ubiquiti UEWA; Cisco CCNA/CCNPCISSP certification (or equivalent qualification) – Highly Preferred