Firewall Engineer | Network Design Engineer

Position : Perimeter Engineer now moving on interviews -need Fortinet, Arista, Cisco.

Location : Dallas TX- 5 days onsite

Job Description

The Security Engineering Team is seeking a highly skilled Perimeter Design Engineer to support strategic cybersecurity initiatives through the design, engineering, and governance of enterprise perimeter security solutions. This role will focus primarily on Fortinet firewall technologies and will be responsible for developing secure, scalable, and resilient designs that support business growth, regulatory requirements, and security objectives.

The position will drive security architecture initiatives including new deployments, infrastructure modernization, network segmentation, data center transformations, and lifecycle management programs. The engineer will serve as a technical leader responsible for developing standards, design patterns, and reference architectures supporting enterprise security services.

The Perimeter Design Engineer will lead technical design efforts supporting strategic projects and ongoing security engineering initiatives. Responsibilities include technical architecture development, solution design, standards creation, design validation, and engineering governance for Fortinet security technologies across the enterprise.

The candidate must possess deep expertise with Fortinet security platforms and have extensive experience designing enterprise firewall environments. This role requires strong communication and leadership skills to collaborate with architecture teams, operations teams, project managers, and business stakeholders.

The successful candidate will be responsible for translating business and security requirements into detailed high-level and low-level designs while ensuring scalability, maintainability, security, and operational efficiency.

Responsibilities

• Develop High-Level Design (HLD) and Low-Level Design (LLD) documentation for security firewall solutions.
• Define architecture standards, engineering guidelines, and technical roadmaps for firewall and perimeter security technologies.
• Perform technical assessments to evaluate business requirements, security risks, scalability requirements, and infrastructure dependencies.
• Design firewall policies, NAT strategies, VPN connectivity, segmentation solutions, and DMZ architectures.
• Conduct architecture reviews and design validations to ensure adherence to enterprise standards and security policies.
• Collaborate with Security Architecture, Infrastructure, Cloud, and Application teams to deliver secure and scalable solutions.
• Review implementation plans to ensure alignment with approved designs and engineering standards.
• Support lifecycle management efforts, including hardware refreshes, software upgrades, platform migrations, and technology modernization initiatives.
• Develop and maintain engineering standards, reference architectures, design templates, and operational requirements.
• Evaluate emerging technologies and provide recommendations for future adoption.
• Mentor implementation and operations teams on approved designs and best practices.
• Identify opportunities for automation, process improvement, and operational efficiencies across perimeter security platforms.
• Support complex troubleshooting activities and root cause analysis efforts as a senior technical resource.
• Maintain knowledge of technology used, as well as new technologies that may be used in the future.

Preferred Experience and Attributes

• Advanced expertise with Fortinet Security Solutions, including:

• FortiGate
• FortiManager
• FortiAnalyzer
• SD-WAN
• High Availability Architectures
• Security Fabric

• Advanced expertise with Check Point Firewall technologies, is a nice to have, including:

• Security Gateways
• SmartConsole
• Management Servers
• ClusterXL
• VPN Technologies
• NAT
• Policy Design and Optimization

• Strong understanding of enterprise DMZ architectures and perimeter security design principles.
• Strong knowledge of TCP/IP networking fundamentals and routing protocols (OSPF, BGP, Static Routing).
• Experience designing secure segmentation and micro-segmentation solutions.
• Strong analytical, organizational, and problem-solving skills.
• Excellent verbal and written communication skills with the ability to communicate effectively at all organizational levels.
• Proven ability to lead technical discussions, architecture reviews, and design workshops.
• Ability to assess complex technical requirements and translate them into scalable engineering solutions.
• Proven experience collaborating across multiple technology teams and managing competing priorities.
• Fortinet certifications (FCP, FCSS, FCX, NSE 4-8).
• Check Point certifications (CCSA, CCSE, CCSM) Nice to have
• Knowledge of Zero Trust Architecture principles.
• Strong understanding of network routing, switching, and load balancing technologies.
• UNIX/Linux administration experience.
• Financial services or highly regulated industry experience.

Requirements

• Able to pass background check(s).
• Bachelor s degree or equivalent work experience.
• Minimum of three (3) years experience with network administration tools, software, operating systems, and hardware components.
• A minimum of three (3) to five (5) years in providing OS server administration on Windows, UNIX, or LINUX with significant exposure in internetworking technologies.
• VMware Certification: VCP6+-DCV or VCP6+-CMA
• Must have Arista or Arista CVP network experience, as well as Cisco experience.
• Possess heavy knowledge/ experience with BGP, Routing and Switching
• Python and Ansible would be considered.
• Bachelor's degree or equivalent experience in Cybersecurity, Information Technology, Engineering, or related discipline.

Regards,

Adam Jones (Azam)

Direct: 5 5 1 2 6 4 7 2 4 9

Email: Adam (@) pullskill (dot) com