Architect - Fortinet Security Gateway

About the role

Bridge Talent is seeking an experienced Fortinet Security Gateway Engineer to support, maintain and enhance carrier-grade security infrastructure in a telecommunications environment. The role covers the design, implementation, operation and optimization of Fortinet security platforms so that critical network services remain available, performant and secure. It is a hybrid position based in Colombo.

Key responsibilities

• Design, deploy, configure and support Fortinet Security Gateway solutions
• Manage and administer FortiGate Next-Generation Firewalls (NGFW)
• Implement and maintain security policies, access controls and firewall rules
• Support IPSec VPN, SSL VPN and secure remote access solutions
• Perform security hardening, vulnerability remediation and compliance activities
• Monitor and troubleshoot security incidents, network issues and service outages
• Support carrier-grade telecommunications infrastructure and critical business services
• Review firewall rules, optimize policies and plan capacity
• Take part in change management, releases and major incident resolution
• Develop operational procedures, technical documentation and knowledge articles
• Work with network, cloud, cyber security and application teams

Required profile

• Minimum 8-12 years of experience in network and cyber security engineering, architecture and operations
• Minimum 5 years of hands-on experience designing and implementing Fortinet security solutions in enterprise or telecom environments
• Strong hands-on experience in Telco Core Networks and Ericsson Core Network technologies
• Proven experience with large-scale, high-availability security infrastructures and carrier-grade networks
• Demonstrated experience leading security transformation, migration and modernization initiatives
• Experience providing technical leadership and architectural governance across multiple domains

Required skills

• Fortinet: FortiGate, FortiManager, FortiAnalyzer, FortiOS, FortiAuthenticator, FortiClient; FortiSandbox desirable
• NGFW, IPS, web filtering, application control, anti-malware, network segmentation, Zero Trust
• VPN: IPSec, SSL, site-to-site and remote access
• Networking: TCP/IP, routing and switching, BGP, OSPF, VLANs, DNS, DHCP, NAT
• Preferred: mobile core networks, OSS/BSS platforms, carrier networks, enterprise connectivity services
• Preferred certifications: Fortinet NSE 4, NSE 5, NSE 7