L2 / L3 Network Security Engineer – Fortinet Firewall Specialist-Immediate Joiner

Job Title :

L2 / L3 Network Security Engineer – Fortinet Firewall Specialist

Experience :

L2 : 3–5 years in Network Security with hands-on Fortinet experience

L3 : 6–10+ years with advanced troubleshooting and design expertise

Certifications (Preferred) :

NSE 4 (Fortinet Network Security Professional) – Mandatory for L2

NSE 7 or NSE 8 – Preferred for L3

Additional : ITIL, CISSP (optional)

Key Responsibilities :

L2 Responsibilities :

Day-to-day administration and monitoring of Fortinet Firewalls (FortiGate, FortiManager, FortiAnalyzer).

Implement basic policy changes , NAT, VPN configurations.

Perform incident analysis , troubleshooting, and escalate complex issues to L3.

Monitor logs and alerts via FortiAnalyzer / SIEM tools .

Ensure compliance with security standards and assist in audits.

Work on change requests and maintain documentation.

L3 Responsibilities :

Design and architecture of Fortinet firewall solutions for enterprise environments.

Advanced troubleshooting for complex network security incidents .

Configure and optimize high availability (HA) , SD-WAN , IPS , Application Control , Web Filtering , and SSL Inspection .

Perform firmware upgrades , migrations, and integration with cloud security (FortiGate on AWS / Azure) .

Conduct root cause analysis , prepare RCA reports, and drive automation (Python / Ansible).

Mentor L1 / L2 teams and create SOPs.

Ensure compliance with ISO 27001, PCI-DSS, NIST frameworks.

Technical Skills Required :

Fortinet Products : FortiGate, FortiManager, FortiAnalyzer, FortiAuthenticator.

VPN Technologies : IPSec, SSL.

Routing Protocols : BGP, OSPF.

Security Features : IPS, Web Filtering, Application Control, SD-WAN.

Automation : Python, Ansible (for L3).

Cloud Security : FortiGate on AWS / Azure / GCP.

Soft Skills :

Strong analytical and troubleshooting skills.

Ability to work under pressure and handle escalations.

Excellent communication and documentation skills.