Fortigate Firewall Engineer

Toronto, ON

Full Time

Total Experience: 6-8 years

Role Description

- Fortigate FW management

Required Skill Set

- We are looking for deep expertise in Fortinets security stack with a strong command of public cloud networking ecosystem (Azure/AWS/OCI).
- Candidate will have minimum 4 years of hands-on experience with latest tools and software.
- FortiGate:- Deep expertise in FortiOS is essential, including configuring security policies, user authentication, and SSL/IPSec VPNs.
- Proficiency with advanced capabilities like Intrusion Prevention System (IPS) rule creation and application control is also required.
- Experience managing FortiGate devices at scale using FortiManager and FortiAnalyzer is critical for enterprise deployments.
- Solid knowledge of Fortinet SD-WAN.
- FortiGate Virtualization Prior experience deploying and managing FortiGate-VM instances in public cloud environments.
- The candidate must also demonstrate proficiency in standard routing protocols,



particularly BGP, OSPF, and static routing, which are heavily used in hybrid cloud architectures.
- Azure/AWS: Virtual Networks Design, configuration, and peering.
- ExpressRoute/DirectConnect/OCI FastConnect- User-Defined Routes (UDRs), to manage traffic through the FortiGate NVA
- Advanced Networking Services knowledge: Azure LB, HA, Azure route Server, DNS, Route Tables, etc
- ISP backbone network collaboration and troubleshooting.
- VPN hub architectures (HA/DR)
- Automation:IaaC: TerraForm, MSft Bicep, Python, PowerShell (code deployment, automated configurations)
- Soft Skills: Troubleshooting complex issues across the OSI stack
- Strong grasp of security concepts and standards (NIST/CIS)
- Excellent communication and documentation skills
- Certifications: FortiOS Admin: NSE 4/FCP, 6, 7/FCSSAZ104/700ANS-C01

📌 Firewall Engineer (Toronto)
🏢 Tekshapers
📍 Toronto