Role: Sr. Network Engineer – NAC Specialist (Fortinet)
Work Location: Houston, TX preferred (100% remote for daily work; open to non-local candidates)
Number of Positions: 1
Position Type: Fulltime
Reports To: Network Operations Manager
Company Description: Supply Chain / Logistics
US CITIZENS AND GREEN CARD HOLDERS ARE ENCOURAGED TO APPLY. WE ARE UNABLE TO PROVIDE SPONSORSHIP AT THIS TIME.
JOB SUMMARY
This is a newly added Senior Network Engineer position, working alongside our existing network team, with a specific focus on Network Access Control (NAC). The company is deep into an active FortiNAC deployment and needs a specialist with hands-on, day-to-day NAC operational experience who can be immediately effective, in addition to strong general networking skills. This position requires a highly skilled and motivated professional who can manage complex network systems in a dynamic and fast-paced environment, and who can take ownership of NAC policy, troubleshooting, and rollout as a subject matter expert.
Essential Job Responsibilities
· Design, operate, and continuously improve LAN, WAN, and wireless networks
· Strong knowledge of LAN/WAN fundamentals, including TCP/IP, VLANs, Routing protocols, SDWAN, and wireless technologies
· Monitor and maintain all network / WAN connectivity to support efficient branch office communications and perform capacity planning.
· Collaborate with other network staff to find solutions to networking issues.
· Propose design improvements, make recommendations, and perform implementations to achieve best practices.
· Strong written and verbal communication skills, with the ability to explain complex technical topics clearly to a range of audiences.
· Interact with internal clients to resolve issues; communicate with internal clients in a professional manner maintaining discretion.
· Deep understanding of physical network infrastructure, such as MDF/IDF design, cabling, optics, and circuit provisioning.
· Coordinate with 3rd party support on complex infrastructure issues and serve as incident owner through full incident lifecycle including reporting, researching, resolution, RCA and lessons learned.
· Operate enterprise remote access solutions such as SSL VPNs, SASE, SSE
· Serve as the team's subject matter expert for Network Access Control (NAC), owning policy design, troubleshooting, and ongoing operational support within an active, in-progress deployment
Requirements:
· 10+ years’ experience in related IT infrastructure
· Deep, hands-on expertise in Network Access Control (NAC) required — FortiNAC strongly preferred; verifiable experience with Cisco ISE or Aruba ClearPass will also be considered given the transferable concepts
· SASE, SSE experience
· General firewall experience (required); Fortinet firewall experience is a plus
· Scripting skills are a plus (Ansible, Python)
· Strong understanding of all aspects of design and implementation of corporate networking and systems infrastructure, including SDWAN, MPLS, VPN, DMVPN, network connectivity, Internet access, email, servers, etc.
· Strong knowledge and Hands on experience in configuring BGP, OSPF, IPSEC site to site VPN, DMPVN, VoIP, HSRP, NAT, SDWAN templates and service policies.
· Demonstrated proficiency with IPSEC VPN technology from multiple vendors
· Wireless Access Points and wireless security protocols such as EAP with RADIUS
· Able to troubleshoot network issues from network connectivity, routing, and firewall issues.
· Produce and maintain excellent documentation.
· Capacity planning
· Microsoft Windows Server operating systems
· DNS and DHCP in a global Windows environment
· Proficient with backup and restore technologies and best practices
· Agile project management and operational practice