Fortinet Specialist (44345)

Have you rebuilt a firewall infrastructure from the ground up? An industrial company is looking for a Fortinet Specialist to completely redesign and configure its firewall environment – the FortiGate devices are delivered and partially configured, but the configuration needs to be built practically from scratch. The role covers network traffic analysis, design of new firewall rules and ACLs, setup of NGFW, UTM and VPN features and a complete configuration according to best practices. Expert-level experience with FortiGate and FortiOS, IPsec and SSL VPN, traffic analysis (Wireshark, FortiAnalyzer) and senior-level networking fundamentals is required.

🚀 Project
- Complete redesign and configuration of the client’s firewall infrastructure
- Network communication analysis – traffic capture, mapping of flows and ports
- New firewall rules and ACLs, closing all unnecessary ports and communication
- Setup of NGFW features – deep packet inspection and IPS
- Setup of UTM security profiles (antivirus, web filtering, application control)
- Analysis of existing VPNs and their connectivity
- Complete FortiGate configuration according to best practices

🎯 Skills
- Expert-level Fortinet FortiGate – full configuration from scratch, policy management, FortiOS
- Firewall rules and ACLs – design, audit and clean-up of rules, least privilege and “deny by default” principles
- NGFW features – SSL/TLS inspection, IPS, application control
- UTM / security profiles – antivirus, web filtering, DNS filtering, application control
- VPN – IPsec site-to-site and SSL/remote access VPN incl. troubleshooting
- Network traffic analysis – packet capture, Wireshark, FortiAnalyzer/logs
- Senior-level networking fundamentals – TCP/IP, routing, NAT, VLAN, network segmentation
- Experience with similar firewall rebuild projects, ability to design an end-to-end solution
- English B2

💡 Nice to have
- Fortinet certifications (NSE 4 or higher, FCP / FCSS Network Security)
- FortiManager, FortiAnalyzer
- Other NGFW platforms (Palo Alto, Check Point, Cisco)
- Zero Trust / ZTNA, network segmentation
- Knowledge of security standards (ISO 27001, NIS2)
- Experience from the banking sector

#LI-PB2