Sr.Architect-Network

<div>Responsibilities:</div><div>Architect enterprise network strategies and frameworks spanning cloud, on-premises, and hybrid environments, with Fortinet as the core platform</div><div>Design and lead Fortinet Secure SD-WAN deployments (FortiGate, FortiOS, FortiManager, FortiAnalyzer), including overlay and underlay topology, SLA-based steering, and failover strategy</div><div>Design and own client and third-party connectivity: site-to-site and partner IPsec VPN, ADVPN, SSL-VPN, and remote access</div><div>Architect NAT strategy for client connectivity, including source and destination NAT, VIPs, IP pools, NAT-T, and overlapping address space resolution</div><div>Evaluate and recommend network technologies, tools, and frameworks, and integrate third-party solutions including firewalls, load balancers, routers, and legacy Palo Alto and Cisco platforms</div><div>Partner with business stakeholders, project managers, and IT teams to align network designs with organizational and client goals</div><div>Ensure designs meet security best practices, regulatory standards (PCI-DSS, SOC 2), and organizational policy</div><div>Produce and maintain documentation, cutover runbooks, and rollback plans for review by client architecture teams</div><div>Serve as senior technical escalation point and mentor to engineers</div><div>Drive innovation by proposing and piloting emerging network technologies</div><div><br></div><div>Education:</div><div>Bachelor’s degree or equivalent practical experience</div><div><br></div><div>Certifications:</div><div>Required: Fortinet NSE 4 minimum</div><div>Strongly preferred: NSE 7 (Enterprise Firewall or SD-WAN) or higher</div><div>Preferred: AWS, Azure, or other cloud networking certification</div><div><br></div><div>Experience:</div><div>15+ years of hands-on network engineering and architecture experience in enterprise or managed services environments</div><div>Significant production experience with Fortinet in complex, multi-site environments</div><div><br></div><div>Knowledge &amp; Skills:</div><div>Deep, hands-on Fortinet expertise: FortiGate, FortiManager, FortiAnalyzer, and Fortinet SD-WAN</div><div>Expert-level IPsec VPN design and troubleshooting (IKEv2, DPD, NAT-T, route-based and policy-based tunnels, ADVPN)</div><div>Expert-level NAT design and troubleshooting across client, partner, and overlapping-subnet scenarios</div><div>Deep expertise in routing and switching protocols (BGP, OSPF, EIGRP, MPLS), including BGP as the SD-WAN underlay and overlay routing protocol</div><div>Strong understanding of firewall policy design, load balancers, QoS, and traffic shaping</div><div>Experience with cloud networking (AWS/Azure VPN gateways, Direct Connect, ExpressRoute)</div><div>Proficiency with network design and diagramming tools (Visio, Lucid, or similar)</div><div>Experience with scripting and automation (Python, Ansible, FortiManager API, or similar)</div><div>Experience leading production cutovers with minimal disruption in regulated environments</div><div>Familiarity with Fortinet ZTNA (access proxy, FortiClient EMS) and zero trust concepts is a plus</div><div>Excellent communication, analytical, and problem-solving skills, with the ability to present to both technical and executive audiences</div>