Skills and Expertise

· Hands-on experience configuring, managing, and troubleshooting firewall policies on FortiGate, including NAT (SNAT/DNAT/VIP), security profiles (IPS, Antivirus, Web Filtering, Application Control), SSL inspection, and interface/zoning, with the ability to analyze and resolve real-world traffic flow issues.

· Strong working knowledge of L2/L3 networking, including VLANs, Trunking, STP, static routing, and routing protocols such as OSPF and BGP (neighbouring, route advertisement/learning), along with hands-on experience with FortiSwitch (or equivalent) for access layer deployment and troubleshooting.

· Strong Knowledge and hands-on expertise of BGP and OSPF routing, to design, implement, and support large enterprise networks.

· Strong Knowledge and hands-on expertise on WLAN networks – Design, Deliver, and Troubleshoot, based on vendors like Fortinet, Cisco, etc.

· Solid understanding of secure remote access technologies, including IPsec and SSL VPN.

· Strong Knowledge and hands-on expertise on SASE solutions – Design, Deliver, and Troubleshoot, specifically based on FortiSASE. Working knowledge of cloud-delivered security concepts such as SDWAN, Secure Web Gateway (SWG), CASB, SIA, SPA, and Zero Trust Network Access (ZTNA), with hands-on involvement in user onboarding, policy enforcement, and troubleshooting remote access issues.

· Strong expertise in identity and authentication solutions using Forti Authenticator, including MFA, SSO, RADIUS/TACACS+, and deep integration with Active Directory/LDAP for role-based access control across network and security platforms.