Network Engineer

About the Company
The Network Engineer owns everything that moves traffic and enforces perimeter policy: switches, VLANs, wireless, the FortiGate firewall, and the NPS server that authenticates devices onto the network via EAP-TLS.
About the Role
Key Responsibilities
Switching & Wireless
Manage switch configuration, port security, and VLAN segmentation across sites.
Manage wireless network infrastructure: SSIDs, WLAN controllers, coverage, and capacity planning.
Maintain network topology documentation and IP address management (IPAM).
Firewall & Perimeter
Administer the FortiGate firewall(s): rule-base management, NAT, VPN gateway configuration, and site-to-site connectivity.
Manage remote-access VPN and review firewall rule-change.
Own DNS/DHCP infrastructure and network-level traffic monitoring and bandwidth management.
Network Access Control
Administer the NPS server for EAP-TLS network authentication (802.1X) for wired and wireless clients, including certificate-based client authentication policy.
Coordinate with the Senior IT Admin on the certificate/PKI lifecycle (AD Certificate Services) that backs EAP-TLS.
Architecture & Resilience
Propose network segmentation and architecture changes, implementing them once approved by the CISO.
Own network uptime/performance monitoring and lead the technical response to connectivity incidents.
Maintain change documentation and rollback plans for all network and firewall changes.
Qualifications
3–5 years in network engineering or network administration, with hands-on FortiGate (or equivalent next-generation firewall) administration and enterprise switching experience. Exposure to RADIUS/802.1X network authentication is a strong plus.
Required Skills
Enterprise switching & VLANs — 802.1Q trunking, spanning tree, port security.
FortiGate/FortiOS administration: policies, NAT, IPsec/SSL VPN, UTM profiles.
Wireless networking — WPA2/3-Enterprise, RF planning.
RADIUS/NPS and 802.1X/EAP-TLS network authentication, certificate-based auth concepts.
DNS/DHCP, IPAM, and routing fundamentals (static routing, OSPF/BGP as applicable).
Network monitoring/observability tooling and packet-capture troubleshooting (Wireshark).
Change documentation and network architecture diagramming.
Preferred Skills
Fortinet NSE 5–7, Cisco CCNP, CompTIA Network+, Certified Wireless Network Administrator (CWNA).

Work arrangement
No