Network Security Admin / Engineer

Vaco is partnering with a national wealth management technology organization to hire a Network Security Engineer with strong hands-on Fortinet experience. This contract role will focus on supporting, maintaining, and improving the organization's network security infrastructure across firewall, VPN, segmentation, monitoring, and threat response capabilities.

This is a practical, hands-on engineering role for someone who can operate independently, troubleshoot complex network security issues, and provide L3 support across a Fortinet-heavy environment. The ideal candidate has experience with the broader Fortinet ecosystem and understands how secure network architecture supports reliability, compliance, and business continuity in a regulated environment.

What You'll Be Doing

• Configure, maintain, and troubleshoot FortiGate firewalls across enterprise network environments
• Support firewall high availability, IPSec VPN, SSL VPN, and UTM security features
• Manage centralized Fortinet operations through tools such as FortiManager, FortiAnalyzer, FortiMonitor, and FortiClient EMS
• Monitor network security events, investigate anomalies, and support incident response activities
• Support network segmentation, secure remote access, and advanced threat protection initiatives
• Provide L3 troubleshooting support for network security issues across routing, switching, firewall, and VPN layers
• Maintain network security documentation including configurations, diagrams, processes, and operational standards
• Collaborate with infrastructure, security, and application teams to support secure connectivity and platform reliability
• Assist with risk assessments, compliance reviews, and remediation activities
• Provide after-hours or weekend support as needed for critical issues, changes, or maintenance windows

• 2 or more years of experience in network security engineering or similar infrastructure security roles
• Hands-on experience with Fortinet technologies including FortiGate, FortiSwitch, FortiAP, FortiManager, FortiAnalyzer, and FortiClient EMS
• Strong understanding of firewalls, IDS/IPS, VPNs, segmentation, and secure remote access
• Experience with routing and switching concepts, including BGP and SD-WAN
• Ability to troubleshoot complex network and security issues across multiple layers
• Strong documentation skills and ability to maintain accurate technical records
• Ability to collaborate with cross-functional technical teams in a fast-moving environment

Nice to Have

• Fortinet NSE 4 certification
• Experience integrating Fortinet with identity platforms such as Entra ID, Azure AD, or Okta
• Exposure to public cloud environments such as Azure or AWS
• Familiarity with cloud security practices
• Scripting or automation experience with Python, Ansible, or similar tools
• Experience working in financial services, healthcare, or another regulated industry, If you are a hands-on network security engineer with strong Fortinet experience and enjoy solving complex firewall, VPN, and secure connectivity challenges, we would welcome the opportunity to connect.

• Hourly rate: $50 to $55 per hour
• W2 employment through Vaco with benefits available, including medical, dental, vision, and 401(k)