L3 Network Engineer

Responsibilities:

• Design, implement and transition CheckPoint & FortiGate firewalls, Catalyst & Nexus switches, load balancers (F5 & Citrix), Web proxy technologies (Zscaler, McAfee) wireless LAN controller, Cisco ISE and other network solutions to meet the needs of customers.
• Troubleshoots LAN/WAN, SD-WAN, routing, switching, VPN, firewall, and VoIP equipment, including a broad range of devices.
• Develop and maintain technical deliverables including network assessments, capacity planning, detailed design documents, implementation/test plans configuration templates and scripts.
• Perform root cause analysis of critical outage and incidents.
• Subject Matter Expert ability to act individually on L3 queries
• Maintain up-to-date industry certifications.

• Understand business requirements and design solutions accordingly
• Resolve incidents, escalate to management and vendors if necessary
• Perform root cause analysis for P1/P2/P3 and P4 incidents and/or proactively based on business needs
• Ensure service performance expectations are met with service levels and quality
• Raise/escalate any service-related issues and risks to management
• Provide guidance and support to team members

Preferred Qualification:

• Professional expert level certification for Fortinet FCSS, Fortinet FCP & Fortinet NSE-4-8
• Strong understanding of routing protocols and network technologies (e.g., eBGP, iBGP, OSPF, IPSEC, trace route, Netflow).
• Advanced, hands-on experience with Fortinet products: FortiGate, FortiManager, Fortinet Secure SDWAN, FortiAnalyzer
• experience with network switches, firewalls, and wireless access points.
• Professional or Expert level network certification is required. Fortinet FCSS, Fortinet FCP, Fortinet NSE 4-8
• Professional or Expert level network certification is preferred. (Cisco, Checkpoint)
• Must have extensive experience designing, configuring, and managing enterprise-grade firewall solutions, with proficiency in network security architectures.
• Must understand routing protocols and network technologies (e.g., eBGP, iBGP, OSPF, IPSEC, trace route, Netflow).
• Must have expertise in LAN/WAN administration, including configuring DHCP, DNS, VLANs, NAT, wireless technologies, and switches, with strong proficiency in network security integration.
• Required expertise in network engineering and security firewall architecture; proficiency with Zero Trust frameworks is a bonus.
• Essential to author and adhere to defined network processes and procedures.
• Should produce accurate network diagrams and detailed design documentation for implementation; proficiency with Visio is highly desired.
• Required to have expertise in architecting, designing, and troubleshooting complex LAN/WAN network solutions; proficiency with SD-WAN networking is preferred.