Implementation Engineer 4 (Perimeter) 732

We’re looking for an experienced Perimeter Implementation Engineer to join our Network Delivery and Execution team and support enterprise cybersecurity and firewall lifecycle initiatives.

In this role, you’ll work hands-on with enterprise perimeter security infrastructure, leading implementations involving firewall and IDS/IPS hardware and software refreshes, platform migrations, upgrades, replacements, capacity expansions, decommissions, and new secure environment deployments.

This is a highly technical role for someone who is comfortable building and configuring firewalls, troubleshooting complex network issues, and executing changes in large enterprise environments with a strong focus on security, stability, and minimal production impact.

What You’ll Do

• Build, configure, deploy, upgrade, and support Fortinet FortiGate firewalls and TippingPoint IPS platforms in enterprise environments.
• Lead firewall and IDS/IPS lifecycle activities, including refreshes, migrations, upgrades, replacements, and decommissions.
• Plan and execute implementation and maintenance activities, including pre-checks, validation, post-installation support, and back-out planning.
• Troubleshoot network connectivity, routing, traffic inspection, firewall policies, platform performance, and configuration issues.
• Develop detailed implementation procedures, deployment guides, technical documentation, and low-level configuration details.
• Assess complex technical requests and translate approved designs into successful implementations.
• Collaborate with engineering, operations, architecture, and project teams to identify and address technical risks before implementation.
• Support vulnerability remediation and other initiatives designed to reduce operational and security risk.
• Maintain accurate technical records, asset information, inventory, and project close-out documentation.
• Identify opportunities to improve service delivery through automation, standardization, and process improvements.
• Support scheduled maintenance windows, including nights and weekends when required.

Internet Security, Firewalls, Intrusion Prevention Systems, Intrusion Detection Systems, Security Infrastructure, Enterprise Protection, Systems Administration/Management, Firewall Administration, Network Administration/Management, Validation Testing, * Bachelor’s degree or equivalent experience.

• 8+ years of IT experience working with firewall solutions, including hands-on experience building firewalls from scratch.
• Strong hands-on experience with Fortinet FortiGate and TippingPoint IPS.
• Experience with FortiOS and TippingPoint software upgrades and lifecycle management.
• Strong understanding of enterprise networking fundamentals, including routing, switching, Layer 2/Layer 3 protocols, multicast, and traffic flows.
• Strong troubleshooting and problem-solving skills across network and security infrastructure.
• Experience supporting production implementations, maintenance activities, and technical incidents.
• Ability to create and maintain detailed technical implementation documentation.
• Strong communication skills and the ability to clearly communicate technical risks, issues, implementation status, and remediation plans.
• Strong organizational skills and attention to detail.
• Flexibility to support scheduled maintenance windows, including nights and weekends as needed.

Nice to Have

• Experience with Python, Shell scripting, JSON, APIs, or similar technologies for automation and operational tooling.
• Experience improving processes through automation, standardization, or operational optimization.
• Experience working in large-scale enterprise environments with multiple concurrent projects and strict change-management processes.
• Knowledge of enterprise DMZ architectures, perimeter security controls, and supporting network infrastructure.
• Knowledge of Cisco routing and switching.
• Strong understanding of networked applications and services such as HTTP/HTTPS, SSH, BGP, SNMP, multicast, DHCP relay, and Anycast.