Senior Network Security Engineer

DO WHAT YOU LOVE!

Unique Vacations, Inc. -- an affiliate of the worldwide representative for Sandals Resorts and Beaches Resorts -- is seeking a forward-thinking Senior Network Security Engineer to join its remarkable Miami-based, in-house team.

WHO ARE WE?

Unique Vacations, Inc. is an affiliate of the worldwide representative of Sandals Resorts and Beaches Resorts. We provide exclusive, marketing, public relations, advertising, promotions, and creative services to showcase the Luxury Included experience, which guests have come to adore for 40 years and counting for Sandals & Beaches Resorts. You can learn more about the brands we represent by visiting and We are ever-dedicated to our customers, vendors, and our most precious commodity -- our TEAM! At Unique Vacations, Inc. we know our company is most powerful when everyone can make their mark. When you do what you love, you will be empowered to create the future that you want!

APPLY, CREATE, IMPACT:

If you're ready to make an impact on one of the world's most renowned hospitality brands, we invite you to apply for the Senior Network Security Engineer via our career portal:

JOB DESCRIPTION:

The Senior Network Security Engineer is a hands-on technical role responsible for managing and continuously hardening the network security controls and tools of Unique Vacations, Inc. (UVI) across its data centers, corporate offices, call centers, and cloud environments. The role owns FortiManager and the FortiGate security policies, FortiAnalyzer, FortiClient EMS and VPN user access, Darktrace network detection and response, and FireMon firewall policy management, and is a primary contributor to PCI DSS network compliance. The position partners closely with Network Engineering, which operates the firewalls and VPN gateways, as well as Systems Administration, the Security Operations team, managed security providers, and vendors. The role has no direct reports at this time and is based in Miami, Florida.

JOB ROLES AND RESPONSIBILITIES:

Firewall Security Management (FortiManager) Own FortiManager as the central security management platform, including policy packages, shared objects, threat feeds, naming standards, upgrades, and backups. Define and maintain FortiGate security controls, including IPS, application control, web and DNS filtering, threat-intelligence and geo-blocking, and centralized IP and URL block lists. Review firewall rule, NAT, and connectivity requests for business need, least privilege, and exposure before implementation by Network Engineering. Perform periodic firewall rule reviews and track remediation of unused or overly permissive rules with Network Engineering. Security Monitoring and Detection Administer FortiAnalyzer, ensuring reliable log collection, retention, reporting, and forwarding to the SIEM. Administer the NDR platform (Platform: Network, Email, and Identity), including appliances, upgrades, model tuning, and integrations. Build and maintain security alert integrations to Microsoft Teams and Jira using properly governed service accounts. VPN User Access Own the VPN access model, including SAML authentication and AD/MFA group mapping, aligned with least privilege. Manage FortiClient EMS (on-premises and cloud), review and approve VPN access requests, and onboard contractors and vendors. Troubleshoot user access issues and escalate gateway or infrastructure issues to Network Engineering. PCI DSS and Firewall Policy Management Operate FireMon for device onboarding, scheduled compliance reports, and change reporting. Perform quarterly network device audits, produce PCI DSS evidence, and drive remediation with Network Engineering. Support the annual PCI network assessment and ensure changes do not expand PCI scope or weaken segmentation. Incident Response and Operations Serve as a technical escalation point for network-related security incidents, including blocking, isolation, and containment. Participate in the Information Security on-call rotation and follow the change-management (CAB) process for all changes. Projects, Documentation, and Vendors Lead the security workstreams of network, data center, and cloud (AWS and Azure) projects. Create and maintain runbooks, standards, and inventories so that no knowledge depends on a single person. Manage relationships and support cases with vendors and partners such as Fortinet, Darktrace, and FireMon. Other duties as required by management.

COMPETENCE REQUIREMENTS:

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. Qualifications include: Fortinet Expertise: Advanced hands-on experience with FortiManager, FortiAnalyzer, FortiClient EMS, and FortiGate security features in a multi-site environment. Network Security: Strong knowledge of TCP/IP, segmentation, NAT, IPS, VPN, DNS, and web filtering, with enough routing and HA knowledge to partner effectively with Network Engineering. Detection and Compliance: Experience with Darktrace or similar NDR, SIEM (Splunk preferred), and PCI DSS 4.0 network requirements. Identity and Automation: Experience with Okta SAML and Active Directory, plus scripting or automation (Python, PowerShell, FortiOS CLI, or Power Automate). Communication and Ownership : Able to work independently, document thoroughly, and drive issues through validated closure.

EXPERIENCE:

Outlined below are the academic qualifications and length and type of experience deemed necessary by Unique Vacations Inc. in order to perform the role of Senior Network Security Engineer competently. Education: Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related discipline preferred. Equivalent relevant experience may be considered in lieu of a degree. Experience: 5+ years of network security or network engineering experience, including 3+ years administering Fortinet security platforms in an enterprise environment. Experience supporting PCI DSS or other regulatory audits with network security evidence. Experience with firewall policy management tools (FireMon, Tufin, AlgoSec, or Nipper) is preferred. Certifications: Fortinet NSE 4 / FCP required or obtained within 6 months; NSE 7 / FCSS, CCNP Security, GIAC, or CISSP preferred.

BENEFITS:

We offer a full benefits package including: Health Dental Vision Employer paid life insurance, STD, and LTD Sick days Vacation days 9 Holidays Tuition assistance Parental leave 401K plan with a generous company match Additional perk: After 6 months of continuous employment, you may visit the resorts we represent at a discounted rate. Once you visit one of the properties, you will not only experience the best of what the brand has to offer but you will get to see first-hand what makes us so passionate and most of all so "Unique".

ABOUT UNIQUE VACATIONS:

Unique Vacations Inc. is an affiliate of the worldwide representative of Sandals and Beaches Resorts - exclusively providing, marketing, public relations, advertising, promotions, and creative services to showcase the Luxury Included experience, which the guests have come to adore for 40 years and counting for Sandals and Beaches Resorts. Designed for couples in love, Sandals Resorts boasts 19 Luxury Included resorts located on the Caribbean's best beaches in Jamaica, Bahamas, Barbados, Antigua, Curaçao, St. Lucia, St. Vincent and Grenada. The family-friend resorts for everyone, Beaches Resorts offers three magnificent locations in Jamaica and Turks & Caicos. We are headquartered in sunny South Florida - a hop, skip and a jump from the glorious Caribbean islands. Learn more about the brands we represent at and Unique Vacations