Network Engineer

Job description

About the Company The Network Engineer owns everything that moves traffic and enforces perimeter policy: switches, VLANs, wireless, the FortiGate firewall, and the NPS server that authenticates devices onto the network via EAP-TLS. About the Role Key Responsibilities Switching & Wireless • Manage switch configuration, port security, and VLAN segmentation across sites. • Manage wireless network infrastructure: SSIDs, WLAN controllers, coverage, and capacity planning. • Maintain network topology documentation and IP address management (IPAM). Firewall & Perimeter • Administer the FortiGate firewall(s): rule-base management, NAT, VPN gateway configuration, and site-to-site connectivity. • Manage remote-access VPN and review firewall rule-change. • Own DNS/DHCP infrastructure and network-level traffic monitoring and bandwidth management. Network Access Control • Administer the NPS server for EAP-TLS network authentication (802.1X) for wired and wireless clients, including certificate-based client authentication policy. • Coordinate with the Senior IT Admin on the certificate/PKI lifecycle (AD Certificate Services) that backs EAP-TLS. Architecture & Resilience • Propose network segmentation and architecture changes, implementing them once approved by the CISO. • Own network uptime/performance monitoring and lead the technical response to connectivity incidents. • Maintain change documentation and rollback plans for all network and firewall changes. Qualifications 3–5 years in network engineering or network administration, with hands-on FortiGate (or equivalent next-generation firewall) administration and enterprise switching experience. Exposure to RADIUS/802.1X network authentication is a strong plus. Required Skills • Enterprise switching & VLANs — 802.1Q trunking, spanning tree, port security. • FortiGate/FortiOS administration: policies, NAT, IPsec/SSL VPN, UTM profiles. • Wireless networking — WPA2/3-Enterprise, RF planning. • RADIUS/NPS and 802.1X/EAP-TLS network authentication, certificate-based auth concepts. • DNS/DHCP, IPAM, and routing fundamentals (static routing, OSPF/BGP as applicable). • Network monitoring/observability tooling and packet-capture troubleshooting (Wireshark). • Change documentation and network architecture diagramming. Preferred Skills • Fortinet NSE 5–7, Cisco CCNP, CompTIA Network+, Certified Wireless Network Administrator (CWNA).