Client Facing Fortinet Network Engineer Job Description
1 day ago
Philadelphia
Job DescriptionBenefits: • 401(k), • 401(k) matching, • Bonus based on performance, • Competitive salary, • Dental insurance, • Health insurance, • Paid time off Why Square10 We help IT leaders cut through complexity and make confident decisions. Our clientsleading law firms and professional services organizationsstick with us because we deliver real business results and were great to work with. If youre the person teams call in a crunch and you explain the hard stuff in plain English, youll fit right in. The Role This is a hands-on, client-facing network engineering role focused on Fortinet-centric environments. You will support our clients, lead troubleshooting efforts, and design and implement secure, scalable network solutions across multiple client environments. Some days you will be deep in FortiGate flow debugging. Other days you will be leading a migration, coordinating with a carrier, or walking a client through next steps. Variety is the norm. Clear thinking and steady execution are expected. What Youll Do Operational Support and Troubleshooting • Triage, troubleshoot, and resolve network incidents across FortiGate, FortiSwitch, FortiAP, and WAN circuits from Level 1 through Level 3, • Perform structured root-cause analysis and deliver durable fixes rather than temporary workarounds, • Use advanced troubleshooting tools and techniques including:, • FortiGate flow debugging, packet capture, session and routing analysis, and log interpretation, • Wireshark and packet analysis to isolate Layer 3 through Layer 7 issues, • Coordinate with ISPs, carriers, and vendors and own support cases through resolution, • Communicate clearly with clients during incidents, including impact, status, and next stepsDesign, Projects, and Improvements, • Design, implement, and optimize Fortinet-based network and security solutions, • Lead or co-lead project delivery, including:, • Discovery and requirements gathering, • Solution recommendations aligned to client risk and business needs, • Implementation plans with validation and rollback steps, • As-built documentation and operational handoff, • Common project work includes:, • FortiGate deployments, migrations, and FortiOS upgrades, • SD-WAN design and rollout including SLA health checks, traffic steering, and failover behavior, • VPN design and troubleshooting including site-to-site IPsec and client VPNs, • Network segmentation and security posture improvements, • Enterprise wireless design and optimization with FortiAPPlatform Ownership Across Clients, • FortiManager, • Maintain disciplined policy, object, and template workflows, • Enforce standards while accommodating client-specific requirements, • Ensure version control, audit readiness, and consistent change management, • FortiAnalyzer, • Ensure comprehensive logging, visibility, and retention, • Deliver reporting and operational insight that drives action, • FortiClient EMS, • Design and maintain endpoint, VPN, ZTNA, and posture configurations, • Ensure reliable deployment, upgrades, and version control, • Lifecycle, Switching, and Resiliency, • Define and maintain firmware standards for FortiGate, FortiSwitch, and FortiAP, • Plan and execute upgrades using documented runbooks and validation steps, • Design and troubleshoot campus LAN environments including:, • VLANs, trunks, STP or RSTP, LACP, LLDP, and PoE, • Support HA firewall environments, SSL inspection, and routing, • Static routing required; BGP experience preferredDocumentation and Quality, • Own diagrams, IP plans, as-built documentation, and operational notes, • Five (5) or more years designing, implementing, and supporting enterprise network environments, • Strong hands-on experience with Fortinet technologies including FortiGate, FortiSwitch, and FortiAP, • Solid understanding of core networking and security principles including TCP/IP, routing, and switching, • Proven experience with FortiGate SD-WAN, VPN technologies, and high availability firewall environments, • Hands-on use of FortiManager and FortiAnalyzer in production environments, • Experience troubleshooting complex network issues efficiently and calmly, • Ability to design and support secure, scalable network architectures aligned to client needs, • A consulting mindset with the ability to own outcomes, manage priorities, and adapt across client environments, • Strong judgment in production environments with appropriate risk awareness and escalation, • Clear communicator who can explain technical decisions to both technical and non-technical audiences, • Disciplined executor who plans carefully, validates changes, and documents thoroughly, • Self-directed, organized, and accountable for results, • Enjoys client interaction and on-site work, • Continuous learner with interest in evolving network and security technologiesCertifications, • Fortinet NSE 4 required or obtained within an agreed timeframe, • Fortinet NSE 7 preferred, • Azure infrastructure experience, including FortiGate connectivity patterns, • Automation exposure such as FortiOS API or Ansible, • NAC or 802.1X experience, • Network monitoring and management tools Location & Benefits This role is open only to candidates located in the New York City or Philadelphia metro areas. Work is hybrid by design, with remote flexibility balanced by regular client site visits within these regions. Approximately 25 to 40 percent on-site presence is expected, with occasional travel outside the immediate area as needed. This is a full-time, salaried position with bonus potential. Square10 offers a comprehensive benefits package including a 401(k) plan and company-sponsored training and certifications. We also actively encourage you to use your paid time off. Ready to Apply? Send your resume to . If your experience doesnt line up 1:1 but youre clearly strong on modern management and love solving for people, were all ears. EOE: Square10 considers all qualified applicants without regard to race, color, religion, gender, sexual orientation, gender identity, national origin, disability, veteran status, or any other protected characteristic under applicable law. Flexible work from home options available.