Senior Fortinet Security Engineer
Job Description
Brooksource is seeking a Senior Fortinet Security Engineer as a contract role to support a large-scale enterprise environment. This position focuses on Fortinet technical leadership, governance, firewall policy oversight, platform administration, firmware lifecycle management, and escalation-level incident troubleshooting for enterprise security services.
Location and Employment Details
- Location: Jacksonville, FL 32254 (hybrid remote)
- Job Type: Contract
- Expected Hours: 40.0 per week
- Compensation: USD 80 - 95 per hour
Pay range note: The pay range for this job level is a general guideline only and not a guarantee of compensation or salary.
Key Responsibilities
- Act as the primary SME for Fortinet security technologies, standards, and best practices.
- Collaborate with network, security, and infrastructure teams on enterprise security initiatives.
- Provide technical guidance, mentorship, and knowledge transfer to engineering teams.
- Contribute to architecture reviews, design discussions, and strategic planning sessions.
- Recommend improvements to strengthen security posture and operational efficiency.
- Review, assess, and approve firewall policy changes, including proposed rule modifications and their security, operational, and performance impacts.
- Ensure changes align with organizational standards and compliance requirements.
- Identify opportunities for firewall rule optimization and policy standardization.
- Support implementation of approved changes during maintenance windows.
- Administer and support FortiGate Firewalls, FortiManager, and FortiAnalyzer, including monitoring platform health, logging, reporting, and automation capabilities.
- Recommend enhancements to improve visibility, scalability, and security effectiveness.
- Maintain security management platforms and associated configurations.
- Evaluate Fortinet firmware releases and security advisories, conduct risk assessments for upgrades and platform changes, and develop testing plans, implementation strategies, and rollback procedures.
- Assess production impacts prior to deployment and support upgrade execution and post-implementation validation.
- Troubleshoot complex network security incidents and support planned maintenance activities and emergency change events.
- Partner with infrastructure, application, and security teams to resolve critical issues, including participation in root cause analysis and corrective action planning.
- Provide escalation support for enterprise security challenges.
- Deliver technical briefings covering security findings, operational risks, firmware upgrade impacts, troubleshooting outcomes, configuration recommendations, implementation documentation, runbooks, and post-change reports.
- Communicate technical concepts effectively to both engineering and leadership audiences.
Required Technical Technologies
- FortiGate
- FortiManager
- FortiAnalyzer
- IPSec
- SSL VPN
Requirements
- Advanced experience supporting Fortinet security platforms, including FortiGate, FortiManager, and FortiAnalyzer.
- Strong understanding of firewall policy management, network security architecture, routing and switching, IPSec and SSL VPN technologies, High Availability (HA) configurations, and security logging and analysis.
- Experience with security risk assessments, firmware lifecycle management, change management processes, incident response and troubleshooting, and the ability to analyze complex security issues to provide strategic recommendations.
- Excellent verbal and written communication skills, including experience presenting technical findings to technical and non-technical stakeholders.
- Strong mentoring and knowledge-sharing abilities.
- Ability to work effectively in maintenance windows and high-pressure incident response situations.
- Proven ability to collaborate across multiple technical disciplines.
Preferred Qualifications
- Fortinet NSE 4, NSE 5, NSE 6, or equivalent Fortinet certifications.
- Progression within the Fortinet Network Security Expert certification track.
- CISSP, Security+, or other industry-recognized security certifications.
- Experience supporting large enterprise or multi-site environments.
Benefits
- 401(k)
- Dental insurance
- Flexible schedule
- Health Savings Account
- Dependent Care FSA
- Supplemental coverage
- 401k plan includes a company match and is fully vested after you become eligible
- Paid time off
- Sick time
- Paid company holidays
- Employee Assistance Program (EAP) with services such as virtual counseling, financial services, legal services, and life coaching