Location: Pune /Chennai
Experience: 7+ Years (Hands-on)
Level: High Skilled (L3)
Key Responsibilities
Design & Architecture
- Design Enterprise and Service Provider SD-WAN solutions using Fortinet Secure SD-WAN.
- Prepare HLD, LLD, Migration Strategy, MOP, and Rollback Plans.
- Design Hub-Spoke, Full Mesh, ADVPN, Multi-Region WAN architectures.
- Design WAN segmentation, Security Zones, Application-aware routing policies.
- Define BGP, OSPF, Static Routing, IPSEC VPN, GRE integrations.
- Perform platform sizing, hardware selection, licensing and BOM validation.
Configuration & Build
- Configure FortiGate, FortiManager, FortiAnalyzer, FortiSwitch.
- Configure SD-WAN rules, SLA policies, application steering and traffic shaping.
- Implement HA (A-P/A-A), IPSEC overlays, ADVPN and Security Policies.
- Integrate with Zscaler, Cloud Platforms (AWS/Azure), MPLS and Internet services.
- Perform ZTP deployment and template-based provisioning through FortiManager.
Migration Activities
- Lead SD-WAN transformation and migration projects.
- Perform pre-migration assessment and dependency analysis.
- Execute cutover, WAN migration, firewall migration and routing transitions.
- Manage customer maintenance windows and rollback execution.
- Conduct validation and service acceptance testing.
Post Build & Operations
- Perform RCA for critical incidents and escalations.
- Conduct performance optimization and health assessments.
- Review routing stability, tunnel availability and application performance.
- Support TAC/vendor escalations.
- Lead technical discussions with customer, OEM and delivery teams.
Technical Skills
- FortiGate, FortiManager, FortiAnalyzer
- SD-WAN, SASE, SSE
- BGP, OSPF, MPLS, VRF, QoS
- IPSEC VPN, ADVPN, GRE
- HA Clustering
- Routing & Switching
- Firewall Security Policies
- AWS / Azure Connectivity
- Zscaler Integration
- Wireshark, Packet Analysis
Certifications (Preferred)
- NSE 4 / NSE 5 / NSE 7
- Fortinet Certified Network Security Professional (FCNSP)
CCNP Enterprise / Security
Skills: fortinet secure sd-wan,ipsec vpn / advpn & ha,advanced routing & wan technologies,sd-wan migration & troubleshooting,bgp
