Senior Network Engineer - Aruba & Fortinet FortiGate

Job Description

We're seeking a Senior Network Engineer to lead the design, deployment, and support of enterprise network and security infrastructure across approximately 50 sites and 4 data centers. This hands-on role will focus on Aruba switching/wireless, Fortinet FortiGate SD-WAN and security, and overall network architecture, reliability, and performance.

Location: Remote Travel: Varies as needed - once per quarter

Key Responsibilities Design, implement, and support enterprise LAN, WAN, WLAN, and security solutions. Lead FortiGate SD-WAN engineering, including BGP routing, ISP connectivity, VPNs, failover, and branch standardization. Manage Fortinet security infrastructure, including firewall policies, segmentation, IPS, web filtering, and FortiManager administration. Design and support Aruba switching and wireless environments, including Aruba Central/AirWave and ClearPass. Drive Zero Trust initiatives, network segmentation, NAC, 802.1X, and secure remote access solutions. Lead complex troubleshooting, incident response, root cause analysis, and performance optimization. Develop network standards, documentation, diagrams, and operational runbooks. Mentor junior engineers and collaborate with security, infrastructure, telecom, and application teams.

Skills and Requirements

• 7+ years of progressive experience in network engineering (enterprise or MSP environments), including multi-site WAN operations.

• Strong hands-on expertise with Fortinet FortiGate, including: o SD-WAN design/operations, VPN (IPsec/SSL), routing, NAT, security profiles, and segmentation. o BGP (iBGP/eBGP), route policy, and troubleshooting in multi-site environments. o Proven experience designing/operating multi-homed / dual-ISP connectivity at data centers. o FortiManager (must-have) for centralized configuration and policy management at scale.

• Strong hands-on expertise with HPE Aruba in production, including: o Aruba switching and enterprise WLAN. o Aruba Central/AirWave administration. o ClearPass (or equivalent NAC) for 802.1X/guest workflows.

• Experience executing Zero Trust concepts in real environments (segmentation, least privilege, identity-aware access, and operational telemetry).

• Deep understanding of core networking: o TCP/IP, subnetting, routing (BGP required; OSPF preferred), switching, VLANs, STP, QoS. o DNS/DHCP fundamentals and common troubleshooting patterns.

• Proven ability to troubleshoot complex issues using packet captures, logs, and structured RCA.

• Experience with change management, maintenance windows, and production cutovers.

• Strong documentation and communication skills; comfortable leading remote deployments with on-site coordination.

• Ability to travel up to 50% for the first 6 months.

• Fortinet: ADVPN (design, deployment, and troubleshooting), advanced SD-WAN design patterns, HA/cluster design, advanced UTM tuning, ZTNA/SASE exposure.

• FortiAnalyzer experience (reporting, event investigation, log retention strategy).

• Aruba: advanced RF optimization, large-scale Aruba Central operations, ClearPass posture/profiling at scale.

• Multi-vendor experience (Cisco/Juniper/Arista/Palo Alto) and hybrid environments.

• Automation/scripting: Python, Ansible, Terraform, or API-driven network operations.

• Monitoring/observability: SNMP/NetFlow/sFlow, syslog/SIEM integration, synthetic monitoring.

• Cloud networking exposure (Azure/AWS networking, VPN/ExpressRoute/Direct Connect). Certifications (preferred)

• Fortinet: NSE 4+ (or current Fortinet certification equivalents).

• Aruba: ACMP/ACSP (or equivalent Aruba switching/wireless certs).

• Other relevant certs: CCNP, JNCIP, Security+.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [email protected].