Network Engineer

Job description

**Key Responsibilities** - Design, implement, and optimize FortiGate‑based SD‑WAN (business intent overlays, SLA policies, application steering, local breakout). - Engineer and maintain Firewall security: zones, objects, policies, NAT (central NAT), UTM profiles, SSL inspection, IPS/DoS policies, logging. - Plan and deploy site‑to‑site VPNs (route/policy‑based), IPsec HA, and hub‑and‑spoke topologies alongside Internet/MPLS underlays. - Lead campus switching design: STP/RSTP/MST, VLANs, link aggregation (LACP/EtherChannel), access control, QoS marking, storm control. - Build L3 segmentation (VRFs), inter‑VLAN routing, and east‑west policies across access/distribution with clear zone models. - Implement high availability: FortiGate A‑P/A‑A clusters, dual‑homed uplinks, first‑hop redundancy (VRRP/HSRP/GLBP as applicable). - Create and maintain network documentation: HLD/LLD, diagrams, IP addressing, security baselines, SOPs, and migration runbooks. - Establish monitoring & telemetry: SNMP, NetFlow/IPFIX, Syslog, SOC/SIEM integration; define alerting thresholds & runbooks. - Drive capacity planning, performance tuning, and proactive lifecycle management (firmware, images, templates). - Collaborate with security, apps, and infra teams for change planning, DR/BCP, and audit/compliance requirements. - Contribute to automation (nice‑to‑have): Ansible/Terraform/Git pipelines for config templates, compliance checks, and push operations. - Provide Tier‑3/4 escalation support and participate in on‑call as needed.