Firewall Engineer

The engineer will replace existing Cisco ASA and Palo Alto Networks firewalls with Fortinet FortiGate appliances, ensuring secure, reliable, and compliant network operations within critical infrastructure environments., On-Site (1 Day per Location):

• Travel to designated utility substation sites to perform firewall hardware replacements
• Decommission existing Cisco ASA and Palo Alto firewalls
• Rack, install, and physically connect Fortinet FortiGate appliances

• Perform initial configuration, including:

• Interface setup
• Routing (static and/or dynamic)
• VPN configuration (IPSec)
• Basic security policies

Coordinate with remote teams for cutover and validation

Perform initial connectivity and failover testing

Remote (Off-Site Work):

• Complete advanced firewall configuration and rule migration
• Optimize security policies and NAT configurations
• Integrate with centralized management tools (e.g., FortiManager, FortiAnalyzer if applicable)
• Perform post-deployment validation and troubleshooting
• Document configurations, network diagrams, and change records
• Support knowledge transfer and handoff to operations teams

• Proven experience with Fortinet FortiGate firewall deployment and configuration
• Strong hands-on experience with Cisco ASA and/or Palo Alto Networks firewalls

• Solid understanding of:

• Layer 3 networking (routing, VLANs, subnetting)
• VPN technologies (IPSec, site-to-site tunnels)
• NAT and firewall policy design

Experience performing firewall migrations and cutovers in production environments

Ability to work independently in remote and field environments

Strong troubleshooting and documentation skills, * Experience working in utilities, energy, or critical infrastructure environments

• Familiarity with substation networks and OT/ICS environments
• Knowledge of security and compliance frameworks relevant to utilities (e.g., NERC CIP)
• Experience with FortiManager and FortiAnalyzer
• Relevant certifications (e.g., NSE 4/5/7, CCNP Security, PCNSE)