Level 2 Network Engineer
Role details
Job location
Tech stack
Job description
We are seeking a Network Engineer (Level 2) with solid hands-on experience in firewall and IP networking who has exposure to Fortinet technologies (e.g., FortiGate). The successful candidate will provide L2 support, configuration, and troubleshooting across enterprise network and security infrastructure, focusing on firewall policies, VPNs, and core routing/switching.dice+3, * Provide Level 2 support for escalated network and security incidents, including firewalls, VPNs, and connectivity issues.hirist+2
- Configure, maintain, and troubleshoot Fortinet FortiGate firewalls (policies, NAT, VPNs, UTM features) and related network components.scribd+3
- Manage and optimize firewall rules, security policies, and VPN configurations (IPSec/SSL) in line with best practices.dice+2
- Perform advanced troubleshooting using packet captures, logs, and monitoring tools (e.g., Wireshark, syslog, SIEM, SolarWinds/PRTG).linkedin+3
- Support core routing and switching (TCP/IP, VLANs, OSPF/BGP basics, DHCP, DNS, QoS) to ensure stable and secure network operations.scribd+3
- Implement approved changes in production environments, including firewall changes, network configuration updates, and VPN deployments.hirist+2
- Collaborate with L1 engineers as an escalation point and with senior/L3 engineers on complex or design-level issues.linkedin+2
- Create and maintain clear technical documentation, including network diagrams, standard operating procedures, and change records.jobs.jobvite+2
- Generate and review security and compliance reports using firewall logs and reporting tools (e.g., FortiAnalyzer or similar).dice+1
- Communicate incident status, risks, and remediation steps effectively to internal stakeholders and, where applicable, customers.jobs.jobvite+2, * Level 2, operational-focused role with responsibility for handling escalated issues and implementing changes, not just monitoring.jobs.jobvite+2
- Works in a fast-paced, mission-critical environment supporting enterprise or MSP customers.indeed+3
- Typically part of a broader network/security team with clear escalation paths to L3/architecture.dice+2
If you want, I can tailor this JD to your specific environment (MSP vs in-house, on-call expectations, remote vs onsite, and your exact Fortinet stack). What kind of environment is this hire going into-MSP-style client support or an internal corporate network team?
Requirements
- 3-5 years of experience in network engineering or network security operations, with at least some hands-on Fortinet firewall experience.indeed+4
- Practical experience configuring and supporting Fortinet FortiGate firewalls (policies, VPNs, NAT, basic UTM features).indeed+4
- Strong understanding of networking fundamentals: TCP/IP, VLANs, routing (static, OSPF/BGP basics), DNS, DHCP, NAT.scribd+4
- Experience with IPsec and SSL VPN configuration and troubleshooting.hirist+4
- Familiarity with core security concepts: firewalling, IPS/IDS, content filtering, application control, and threat prevention.linkedin+3
- Ability to use network analysis tools (e.g., Wireshark/Ethereal) and monitoring platforms for diagnostics and performance tuning.jobs.jobvite+3
- Solid written and verbal communication skills for documentation, incident updates, and stakeholder-facing communication.dice+2
- Bachelor's degree in Computer Science, Information Technology, or related field (or equivalent experience).hirist+1
Preferred Skills / Nice to Have
- Fortinet NSE 4 certification or higher; NSE 5/6 modules considered an advantage.linkedin+2
- Experience with additional Fortinet products such as FortiManager and FortiAnalyzer.scribd+3
- Exposure to other firewall platforms (Cisco ASA, Palo Alto, Check Point, Meraki, Juniper).scribd+5
- Experience with SD-WAN concepts and deployments, ideally in Fortinet environments.scribd+2
- Knowledge of scripting/automation (e.g., Python, Ansible) for network operations and configuration management.hirist+1
- Familiarity with ITIL processes and ITSM tools (e.g., ServiceNow, Jira).hirist
- Additional networking/security certifications (e.g., CCNA, Network+, ITIL Foundation).linkedin+1