Fortinet Network Engineer📣 Job Ad

About the Role

ITBuilders is seeking a Fortinet Network Engineer to join their team in Riyadh. This full-time role is responsible for the architecture, design, deployment, and testing of end-to-end enterprise network, edge security, and SD-WAN solutions, primarily centered around the Fortinet Security Fabric. The position requires advanced knowledge and experience in FortiGate Secure SD-WAN, including next-generation firewalling (NGFW), zero-trust architecture, and cloud connectivity. The role focuses on converting complex enterprise connectivity and compliance requirements into validated Low-Level Designs (LLDs), automated configuration templates, structured migration plans, and seamless operational handoffs.

Key Responsibilities

• Architect scalable FortiGate Secure SD-WAN topologies across multi-region environments, including Hub-and-Spoke, Full Mesh, and Dynamic Mesh VPN (ADVPN) structures with automated BGP routing.
• Design SD-WAN rules, Performance SLAs, link health monitoring probes, and application control steering policies using Dynamic Application Steering to optimize voice, SaaS, and critical business traffic over diverse underlays (DIA, MPLS, 5G/LTE).
• Build comprehensive edge and core security layouts incorporating FortiGate NGFWs, FortiManager, FortiAnalyzer, FortiSwitch, and FortiAP (FortiLAN Cloud/Fabric extensions).
• Standardize complex BGP (iBGP/eBGP), OSPF, VRF, NAT, and IPsec tunnel architectures, integrating SD-WAN overlays with existing enterprise data centers, core switching backbones, and legacy WANs.
• Develop complete High-Level Designs (HLDs), Low-Level Designs (LLDs), IP/VLAN schemes, network topology diagrams, and Bill of Materials (BOMs).

Implementation and Migration

• Configure, stage, and deploy physical and virtual FortiGate appliances, utilizing FortiManager for centralized policy management, device mapping, and revision tracking.
• Author detailed Method of Procedure (MOP) documents, cutover playbooks, rollback strategies, and maintenance window schedules for migrating legacy firewalls and WAN circuits to Fortinet Secure SD-WAN.
• Implement secure cloud edge connectivity, deploying virtual FortiGate instances (FortiGate-VM) in Azure using Cloud On-Ramp methodologies and Transit Gateways.
• Configure FortiSwitch and FortiAP deployments using FortiLink to deliver unified, single-pane-of-glass management through FortiGate controllers.

Automation and Standardization

• Build and maintain standardized CLI scripts, FortiManager Meta-Fields, Normalized Interfaces, and Jinja2 templates to enable zero-touch provisioning (ZTP) for global site rollouts.
• Automate policy pushes, object creation, and compliance checks using Python, Ansible, or Terraform (FortiOS/FortiManager).

Qualifications and Experience

• 0-1 years of experience in a relevant field.
• Advanced knowledge and experience in FortiGate Secure SD-WAN.
• Experience with advanced next-generation firewalling (NGFW), zero-trust architecture, and cloud connectivity.

Work Type and Location

This is a full-time position based in Riyadh.