Security Engineer with Fortinet/FortiGate firewall

We have the below critical demands to be addressed ASAP and request  your immediate support  on this.  Please share only immediate joiners profile.

  Please use the below tracker format (Excel sheet) and mention the candidate profiles along with the expected rate for each candidate.  Profiles submitted without the tracker will not be considered.

Date

Vendor Name

Skillset

Candidate Name

Mobile No

Email Id

Total Exp

Rel Exp

Current Organization

Current Location

Preferred Location

Notice Period

Vendor rate

 

Yrs of Exp : 5+ years

Duration : 4 to 6 Months
Location: Gurgaon/Bangalore
Model: Remote- Need to visit office 2/3days in a month
Rate: 8.5k/per day

 

  Key Responsibilities

Firewall Operations

- Manage day-to-day Fortinet FortiGate firewall operations and support firewall service requests.

- Handle ITSR requests for firewall rule creation, modification, access validation, and removal.

- Review firewall requests for business justification, least privilege, source/destination accuracy, and security risk.

- Implement approved firewall policy changes following change management and approval processes.

- Support troubleshooting calls with application, network, infrastructure, and business teams.

- Investigate connectivity issues involving firewall policies, NAT, routing, VPN, zones, and security profiles.

- Support firewall outage/down calls, incident coordination, pre-change validation, and post-change validation.

Fortinet Firewall Administration

- Configure and manage FortiGate policies, address objects, service objects, groups, VIPs, NAT, routes, and security

profiles.

- Support FortiManager and FortiAnalyzer operations where applicable.

- Review FortiGate logs for traffic analysis, denied/allowed sessions, threat events, and policy hit validation.

- Support IPsec VPN, site-to-site VPN, and remote access VPN troubleshooting where required.

- Assist with firmware upgrades, HA validation, backup and restore, and configuration compliance checks.

- Validate HA status, interface health, VPN tunnel state, routing, CPU/memory usage, and session utilization.

Firewall Policy Review and Risk Management

- Identify risky rules such as any-any access, broad source/destination access, stale temporary rules, and high-risk

services.

- Review unused or zero-hit rules and recommend cleanup, consolidation, or recertification.

- Maintain rule ownership, business justification, expiry dates, and periodic review status.

- Support firewall risk scoring using hit count, source, destination, service, age, and criticality.

- Prepare firewall risk assessment findings and improvement recommendations for leadership and platform owners.

Security Monitoring and Incident Support

- Support SOC investigation for firewall-related alerts, suspicious traffic, and policy violations.

- Provide evidence for source/destination flows, policy decisions, blocked traffic, allowed traffic, and NAT translations.

- Work with SOC teams to tune noisy firewall detections while preserving high-risk visibility.

- Support detection use cases for abnormal firewall traffic, unauthorized access, risky rule usage, and policy drift.

Process, Documentation, and Automation

- Create and maintain firewall SOPs, operational runbooks, and troubleshooting guides.

- Improve firewall request templates, review checklists, and exception approval workflows.

- Support automation for firewall rule review, hit-count analysis, duplicate detection, and risk reporting.

- Maintain an exception register with owner, justification, expiry date, and review cycle.

- Contribute to SOC transformation initiatives covering governance, automation, reporting, and measurable risk

reduction.

Security Engineer - ISM | Fortinet Firewall Specialist Page 2

Required Skills

- Strong hands-on experience with Fortinet FortiGate firewalls.

- Good understanding of firewall policy, NAT, routing, zones, VPN, objects, and security profiles.

- Ability to troubleshoot network connectivity issues using firewall logs, packet flow, and policy analysis.

- Strong knowledge of TCP/IP, routing, DNS, NAT, VLANs, VPNs, and common network protocols.

- Experience with firewall change management, ITSM processes, and operational governance.

- Ability to review firewall rules from a risk, least-privilege, and business justification perspective.

- Good understanding of SOC operations, incident response, and security monitoring workflows.

- Strong communication skills to work with application, network, infrastructure, and security teams.

Preferred Skills

- Experience with FortiManager and FortiAnalyzer.

- Experience with firewall rule cleanup, policy optimization, compliance review, and risk assessment.

- Exposure to other firewall platforms such as Palo Alto, Cisco ASA/FTD, Check Point, or Juniper SRX.

- Experience with SIEM tools such as Microsoft Sentinel, Splunk, or QRadar.

- Ability to write or review KQL/SIEM queries for firewall log analysis.

- Familiarity with cloud networking and security in Azure, AWS, or GCP.

- Understanding of Zero Trust, segmentation, network security architecture, and privileged access controls.

- Scripting or automation experience using Python, PowerShell, APIs, or firewall automation tools.

Certifications Preferred

- Fortinet NSE 4 / FCP Network Security.

- Fortinet NSE 5 / Fortinet Security Operations.

- CCNA / CCNP Security.

- Security+ or CEH.

- CISSP / CISM preferred but not mandatory.

Experience

- 4-8 years of experience in network security, firewall operations, SOC, or infrastructure security.

- Minimum 2-3 years of hands-on experience with Fortinet FortiGate firewalls.

- Experience working in ISM, SOC, Network Security, or Infrastructure Security operations.