Fortinet Network Security Engineer (L2)

Description GSPANN is hiring a Fortinet Network Security Engineer (L2) to support, secure, and optimize enterprise network security environments. The role focuses on Fortinet firewall administration, VPN management, SD-WAN operations, security monitoring, and incident resolution while ensuring compliance and business continuity. Roles and Responsibilities Provide Level 2 (L2) support for Fortinet security solutions and ensure timely resolution of incidents within defined Service Level Agreements (SLAs). Monitor firewall performance and security events, and troubleshoot network and security-related issues proactively. Perform root-cause analysis for recurring incidents and implement corrective and preventive measures. Participate in on-call support rotations and manage major incident response activities. Configure, manage, and optimize Fortinet FortiGate firewalls, including security policies, Network Address Translation (NAT), routing, and Virtual Private Networks (VPNs). Configure, support, and troubleshoot Internet Protocol Security (IPSec) VPN and Secure Sockets Layer (SSL) VPN connections. Perform firmware upgrades, patch management, health checks, and routine system maintenance activities. Analyze security logs and events to identify threats and recommend mitigation and remediation actions. Manage and fine-tune security services, such as Intrusion Prevention System (IPS), Antivirus, Web Filtering, and Application Control. Support security audits, compliance initiatives, vulnerability assessments, and remediation activities. Implement firewall rule changes, security policy updates, and support deployment and upgrade activities. Maintain configuration backups, ensure disaster recovery readiness, and prepare rollback plans for critical changes. Troubleshoot VPN tunnels, internet connectivity issues, and Software-Defined Wide Area Network (SD-WAN) environments. Review and optimize firewall rules and validate High Availability (HA) failover mechanisms to ensure business continuity. Obtain or maintain certifications such as Fortinet Network Security Expert (NSE) 4 or NSE 5, Information Technology Infrastructure Library (ITIL) Foundation, and Cisco Certified Network Associate (CCNA) or Cisco Certified Network Professional (CCNP) Security. Skills and Experience Demonstrate strong knowledge of networking and security fundamentals, including Transmission Control Protocol/Internet Protocol (TCP/IP), routing, switching, and subnetting. Manage Fortinet FortiGate firewalls, including security policies, NAT configurations, routing policies, and firewall operations. Configure, support, and troubleshoot IPSec VPN and SSL VPN environments, including VPN tunnels and remote access connectivity issues. Handle firewall and security operations, including policy creation, modification, optimization, and incident resolution within an L2 support environment. Monitor firewall performance, troubleshoot internet connectivity issues, support SD-WAN environments, and perform root-cause analysis of service disruptions. Analyze security logs and investigate security events using technologies such as IPS, Antivirus, Web Filtering, Application Control, and Uniform Resource Locator (URL) Filtering. Manage change requests, implement firewall rule updates, perform firmware upgrades, execute patch management activities, and maintain rollback plans. Configure and validate High Availability (HA) environments, maintain configuration backups, and support disaster recovery and business continuity requirements. Support compliance and audit requirements, vulnerability remediation programs, and SLA-driven operational support. Hold or be willing to obtain certifications such as Fortinet NSE 4/NSE 5, ITIL Foundation, CCNA Security, or CCNP Security. Related Jobs Senior SailPoint Engineer-Identity Security Cloud (ISC) Gurugram / Hyderabad, IN · Full-time Application Security Specialist – SSDLC Operations Gurugram / Hyderabad, IN · Full-time Penetration Testing and Offensive Security Engineer Gurugram / Hyderabad, IN · Full-time