Network Security Engineer – Firewalls, Routing & SD-WAN

New York City, NY | On-site | Full-Time | Permanent Employment | Mid-Senior Level

MaxIT Consulting – Max Corporate Group is looking for a hands-on Network Engineer with strong Fortinet expertise to join a global professional services organization supporting clients in the financial services and commercial banking sector.

You will own escalated network incidents, root cause analysis and the design of secure LAN/WAN, SD-WAN and firewall solutions for a multi-site enterprise environment.

THE CHALLENGE

This is a senior, hands-on engineering role: you will design, implement and troubleshoot enterprise networks built predominantly on Fortinet, resolve P1–P4 incidents, and guide stakeholders through technical decisions. The environment runs 24x7, so flexibility to support critical incidents is required.

KEY RESPONSIBILITIES

• Design, implement and transition firewalls, switches, access points and other network solutions.
• Troubleshoot LAN/WAN, SD-WAN, routing, switching, VPN, firewall and VoIP equipment (predominantly Fortinet).
• Perform root cause analysis for P1/P2/P3/P4 incidents and critical outages.
• Produce network assessments, capacity plans, detailed designs, implementation/test plans, configuration templates and scripts.
• Create accurate network diagrams and design documentation (Visio).
• Support web-proxy environments such as Zscaler or McAfee Web Proxy.
• Escalate service issues and risks, and provide guidance to team members.

WHAT WE ARE LOOKING FOR

• 5 to 7 years of professional network engineering experience.
• Fortinet certification at professional or expert level: FCP, FCSS or NSE 4–8 (required).
• Advanced hands-on experience with FortiGate, FortiManager, Fortinet Secure SD-WAN and FortiAnalyzer.
• Strong knowledge of routing protocols and technologies: eBGP, iBGP, OSPF, IPSEC, traceroute, NetFlow.
• Extensive experience designing, configuring and managing enterprise-grade firewall solutions and network security architectures.
• LAN/WAN administration: DHCP, DNS, VLANs, NAT, wireless and switches.
• Experience designing and deploying multi-site environments with VLANs, MPLS, SSL and IPSEC.
• Strong analytical, problem-solving and communication skills.
• Bachelor's degree.

NICE TO HAVE

• Cisco or Check Point certifications.
• Zero Trust frameworks and NIST CSF or similar standards.
• Pulse Secure Access Gateway and Citrix NetScaler ADC load balancers.
• Consultative experience guiding the selection of technical solutions.

POSITION DETAILS

• Work arrangement: On-site
• Schedule: Full-time, in a 24x7 environment
• Employment type: Permanent employment
• Seniority: Mid-Senior
• Location: New York City, New York, United States
• Travel: Occasional
• Relocation assistance: Not available

The position offers a full benefits package and annual bonus eligibility.

WORK AUTHORIZATION

Candidates authorized to work in the United States are welcome to apply, and candidates who require a visa will also be considered. No security clearance is required.

HOW TO APPLY

If you are a Fortinet-certified network engineer who enjoys solving complex network and security challenges, we would like to hear from you.

Please apply through this platform with your updated resume, your expected gross annual salary and your availability to start.