> Markdown version of [/jobs/ext/4623623-fortinet-engineer](https://www.wearedevelopers.com/jobs/ext/4623623-fortinet-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Fortinet Engineer - **Company:** IBSS Corp. - **Location:** Silver Spring, MD, United States - **Experience:** Experienced - **Salary:** $90,000.0 - $110,000.0 - **Contract:** Permanent contract - **Skills:** Audit Trail, Border Gateway Protocol, Cyber Security, Computer Networks, Dynamic Host Configuration Protocol, Network Address Translation, Domain Name System (DNS), Firmware, Network Topologies, IP Addressing, Internet Protocol Security (IP SEC), Internet Services, Virtual Private Networks (VPN), Network Security, Nagios, Network Monitoring, Routing, Network Segmentation, Open Shortest Path First (OSPF), Remote Access Technology, Zero Trust Network Access, SAP Sales and Distribution, Service Pack, Virtual Local Area Networks, Wide Area Networks, Computer Networking Systems, Transport Layer Security, Enterprise Software Applications, Computer Network Operations, Firewalls (Computer Science), SolarWinds (Software), Nessus, Fortinet, Firewall Services Module, Cisco, SSL VPN, Servicenow, ManageEngine - **Published:** November 7, 2026 - **Apply:** https://www.careerbuilder.com/job-details/fortinet-engineer-silver-spring-md--c17bded7-acb7-4db3-8ab2-f85c4ebc3c47 ## About the Role * 3+ years of network security or network engineering experience, including at least 2 years administering FortiGate firewalls in an enterprise environment. * Associate's Degree. * Fortinet Certified Professional (FCP) in Network Security, or legacy NSE 4 certification. * Hands-on experience with FortiManager, FortiOS policy and object management, IPsec/SSL VPN, NAT, and security profiles. * Working knowledge of routing (BGP, OSPF), VLANs, DNS/DHCP, and network monitoring tools. * Familiarity with federal IT security requirements (FISMA, NIST 800-53) and change-controlled environments. * Must be able to obtain and maintain a High Risk Public Trust background investigation through the Department of Commerce. U.S. citizenship is required for any position requiring a security clearance. * Ability to work on-site in Silver Spring, MD, 3 days a week. Desired Skills: * Fortinet Certified Solutions Specialist (FCSS) in Network Security or Enterprise Firewall. * Cisco Certified Network Associate (CCNA) and experience with Cisco or Arista switching. * Experience with FortiAnalyzer, FortiSwitch, FortiAP, or Fortinet SD-WAN. * Experience supporting maritime, aviation, or remote field networks with limited or satellite connectivity. * Familiarity with Zero Trust network concepts and ServiceNow change management. ## Description IBSS is seeking a Fortinet Engineer to support the NOAA Office of Marine and Aviation Operations (OMAO) Marine and Aviation Cyber Center (MACC). OMAO operates NOAA's fleet of research ships, specialized aircraft, and uncrewed systems. MACC is responsible for the performance, availability, and security of OMAO's data network across headquarters, field centers, and operational platforms. The Fortinet Engineer will administer OMAO's Fortinet environment, including FortiGate firewalls managed through FortiManager. The role maintains firewall policies, VPNs, network segmentation, and security zones. It also coordinates connectivity between the NOAA2220 enterprise system and mission systems with the NOAA Network Operations Center (NOC), NWave, and carrier partners. This role requires participation in on-call rotation for Severity 1 outages, with surge support during hurricane and field seasons., * Administer, configure, and maintain FortiGate firewalls and related Fortinet Security Fabric components (e.g., FortiManager, FortiAnalyzer, FortiSwitch, FortiAP) across OMAO facilities and platforms. * Use FortiManager to centrally manage firewall policies, objects, address groups, and device configurations. * Develop, implement, and troubleshoot firewall policies, NAT, security profiles, network segmentation, and security zones in accordance with approved change management procedures. * Configure and support site-to-site IPsec and remote access VPNs, including SSL/IPsec VPN with FortiClient. * Plan and execute FortiOS firmware upgrades and security patches with minimal disruption to mission operations. Work with the ISSO to remediate vulnerabilities identified through Nessus/Tenable scanning. * Configure and troubleshoot routing (static, BGP, OSPF), SD-WAN, and VLANs on Fortinet devices. Document IP addressing, routing configurations, and DNS/NAT assignments for NOAA2220. * Monitor firewall and network performance, logs, and throughput using FortiAnalyzer, FortiManager, and other approved tools (SolarWinds, Nagios, ManageEngine). Support audit log collection and the quarterly Network Performance Report. * Support 99.9% core network availability and restore service within contract targets (1 hour for Severity 1 outages, 4 hours for Severity 2). * Prepare Change Requests and complete approved changes on time and without rework (routine changes within 24 hours, urgent changes within 4 hours). * Coordinate circuit troubleshooting and outage resolution with NWave, the NOAA NOC, public carriers, and internet service providers. * Maintain documentation, including firewall policy and object records, network topologies, routing diagrams, IP addressing tables, and Interconnection Security Agreements. * Recommend firewall and segmentation improvements based on Fortinet and industry best practices, and contribute to the network modernization roadmap. * Participate in primary/alternate on-call rotation for Severity 1 outages and perform scheduled maintenance after hours or on weekends as approved by the Government. Occasional travel to OMAO field sites may be required.