Position: Lead Deployment Engineer
Location: Cary, North Carolina
Duration: 12 Months
10+ Years
Lead Deployment Engineer Position
Summary
We are seeking a Lead Deployment Engineer to lead a multi-squad network transformation initiative focused on migrating enterprise security infrastructure from Check Point to Fortinet technologies. This individual will provide technical leadership, coordinate deployment activities, mentor engineering teams, and ensure successful execution of firewall, network, and automation initiatives across a large-scale global environment.
Key Responsibilities
Lead teams responsible for Check Point to Fortinet migration activities.
Oversee deployment, configuration, and optimization of FortiGate firewalls.
Analyze existing Check Point firewall policies, VPNs, NAT configurations, and security architecture.
Coordinate migration planning, execution, testing, and rollback strategies.
Lead network segmentation and security modernization initiatives.
Guide deployment engineers through implementation and troubleshooting activities.
Work closely with NetDevOps and SRE teams to support automation and operational improvements.
Participate in maintenance windows, change management, and production rollouts.
General skills
Must have fortinet checkpoint cisco Nice to have python Languages
Must have English Native or bilingual proficiency
Experience required
We are seeking a Lead Deployment Engineer As a Lead Deployment Engineer you will be responsible for building a new network environment, preparing, documenting, and deploying changes in a network, understanding the issues related to day-to-day operations, troubleshooting network issues with a network sniffer like Wireshark, and liaising with carriers and vendors for installations.
What We Offer You
A diverse and inclusive environment that embraces change, innovation, and collaboration A hybrid working model, allowing for in-office / work from home flexibility, generous vacation, personal and volunteer days Employee Resource Groups support an inclusive workplace for everyone and promote community engagement Competitive compensation packages including health and wellbeing benefits, retirement savings plans, parental leave, and family building benefits Educational resources, matching gift and volunteer programs.
What You'll Do
Responsible for designing and implementing solutions leveraging and expanding on existing design standards, liaising with internal customers, raising changes, and deploying new technologies as required by the project Responsible for planning and building a new network environment Prepare, document, and deploy changes in a network Troubleshoot network issues with a network sniffer like Wireshark Test tools and procedures for voice and data circuits and liaise with carriers and vendors for installations Support both routine changes and large projects in the network backbone, data center, extranets, the trading floor, and the branch network. Projects will range from the design and buildouts of new locations and silos to the rollout of new features and functionality for global initiatives in support of global market data applications, financial systems, and infrastructure involving high volume securities trading and financial transactions Support project managers and the regional management team in project planning, tracking, and reporting when required
Skills You'll Need
Proven experience working in a corporate global network environment, ideally with financial institutions Basic understanding of firewalls, network security concepts, and proxy servers Certified technical engineer (typically Cisco CCNP or comparable)
In-depth hands-on experience with common network hardware including F5 load balancers, Cisco routers, switches, firewalls, etc., together with other preferred technologies
Detailed technical knowledge of routing protocols such as OSPF, EIGRP, BGP, RIP, etc., with the ability to troubleshoot them
Skills That Will Help You Excel
Full understanding of ITIL and service management principles, and hands-on experience with complex LAN/WAN, MAN, DWDM, SONET architecture Full understanding and operational knowledge of loop prevention protocols like spanning tree protocol In-depth working knowledge of IPT implementation and troubleshooting Good technical knowledge of L2 protocols like HSRP, VRRP, VTP, 802.1Q, Flex Link, LACP, etc. Detailed technical knowledge of Cisco operating systems such as IOS and NX-OS, with the ability to troubleshoot them
