What are the responsibilities and job description for the Sr. Network & Security Engineer position at AEG Vision?
#12973
Addison, Texas, USA
Full-Time/Part-Time
Full-time
Job Description
The Sr. Network and Security Engineer will work to implement network strategies to support business needs in a secure and cost-effective manner, as well as the ability to perform administration, support, and in-depth troubleshooting of listed technologies.
Fortinet Network & Security Engineering
Requirements
Addison, Texas, USA
Full-Time/Part-Time
Full-time
Job Description
The Sr. Network and Security Engineer will work to implement network strategies to support business needs in a secure and cost-effective manner, as well as the ability to perform administration, support, and in-depth troubleshooting of listed technologies.
Fortinet Network & Security Engineering
- Design, implement, and support Fortinet firewalls (FortiGate), VPNs, security policies, HA, and micro-segmentation.
- Manage FortiSwitch and FortiAP environments including VLANs, Wi-Fi, QoS, and secure segmentation.
- Utilize FortiAnalyzer and FortiManager for centralized logging, reporting, and configuration management.
- Support FortiMail for secure email, anti-phishing, and anti-spam.
- Build and maintain Fortinet SD-WAN for multi-site connectivity and carrier diversity.
- Administer Cato VPN / Cato SASE for user and site connectivity.
- Engineer multi-carrier BGP for high availability, redundancy, and traffic engineering.
- Troubleshoot complex connectivity issues across sites, cloud, and remote users.
- Support Cisco MDS Fibre Channel switches, zoning, and fabric management.
- Collaborate with storage/server teams to ensure reliable SAN performance.
- Configure and support F5 load balancers including VIPs, pools, SSL offload, and monitoring.
- Manage Kemp LoadMaster appliances for internal and external workloads.
- Partner with application owners to design highly available, load-balanced solutions.
- Support VMware networking (vSphere, vCenter, vDS, NSX), VLANs, routing, and micro-segmentation.
- Assist with performance tuning and capacity planning.
- Configure Cloudflare DNS, WAF, Zero Trust, CDN, and DDoS protections.
- Optimize Cloudflare rules to enhance both security and performance.
- Maintain LogicMonitor (or similar tools) for monitoring and alerting.
- Build observability across SNMP, NetFlow/sFlow/IPFIX, syslog, and dashboards.
- Support CrowdStrike endpoint protection and coordinated remediation.
- Onboard log sources into a next-gen SIEM and fine-tune alerts, correlation rules, dashboards, and detection workflows.
- Contribute to network/SOC runbooks, standards, and escalation paths for 24×7 monitoring.
- Act as Tier 3/4 escalation for complex network and security incidents.
- Manage incidents, changes, and problems using ITSM tools (e.g., Zendesk).
- Document network topologies, design standards, IP schema, and firewall/SD-WAN policies.
- Create knowledge base articles and support documentation for operational excellence.
- Participate in an on-call rotation and support after-hours deployments.
- Work closely with teams across cloud, security, DevOps, helpdesk, field services, and application groups.
- Translate technical concepts into clear communications for both technical and non-technical audiences.
Requirements
- 7 years of experience in enterprise or multi-site network and infrastructure engineering.
- Fortinet expertise including FortiGate (policies, VPNs, SD-WAN, HA, segmentation/micro-segmentation), FortiSwitch, FortiAP, FortiAnalyzer, FortiManager, and FortiMail; experience with Fortinet deployments and migration projects.
- SASE & VPN experience with Cato or comparable cloud-based SASE/VPN platforms.
- Advanced routing skills, including hands-on multi-carrier BGP for redundant ISP connectivity and failover.
- Strong experience in network segmentation and micro-segmentation (Fortinet, VMware NSX, or similar).
- Hands-on experience with Cisco MDS Fibre Channel switches in SAN environments.
- Proficiency with load balancing, including F5 and Kemp LoadMaster.
- Strong VMware networking background (vSphere/vCenter, vDS, VLANs, routing, NSX or similar).
- Working knowledge of Cloudflare (DNS, WAF, CDN, reverse proxy).
- Practical experience with enterprise monitoring and security tools, including:
- LogicMonitor or similar NMS/NPM
- SNMP, NetFlow/flow monitoring
- CrowdStrike, syslog ingestion, and NG-SIEM platforms
- Experience serving as a Tier 3/4 escalation resource and incident lead for complex network/security issues.
- Experience using Zendesk or similar ITSM tools for incident, request, and change management.
- Experience contributing to or helping build a NOC/SOC or network monitoring function.
- Strong understanding of core network technologies including TCP/IP, routing (BGP/OSPF), switching, VLANs, STP, QoS, VPNs, and firewall rule design/segmentation.
- Excellent cross-functional collaboration and communication skills, with the ability to translate technical concepts for varied audiences.
- Strong documentation skills, including network diagramming (Visio, Lucidchart, etc.).
- Proven ability to lead medium-to-large infrastructure projects from design through implementation.
Salary : $100,000 - $120,000