Network & Security Engineer (Fortinet) (REF5857V)

Responsibilities

• Main tasks As a Network & Security Engineer (Fortinet), you will be part of the team operating and continuously improving the network and network-security infrastructure of a highly available private and sovereign cloud platform across two geographically separated data centers.
• Operate and troubleshoot the data-center network and network-security infrastructure based primarily on Fortinet technologies.
• Operate and maintain FortiGate firewalls, FortiSwitch infrastructure, FortiWeb WAF, VPN solutions and FortiClient/ZTNA components.
• Implement and troubleshoot firewall policies, NAT, routing, VLANs, VDOMs and network segmentation.
• Operate highly available network components and technologies such as FGCP, MC-LAG/LACP and STP/RSTP/MSTP.
• Analyze incidents and performance issues and perform root-cause analysis across network and security components.
• Implement customer requirements such as firewall changes, new network segments, routing changes and connectivity to internal and external systems.
• Monitor availability, performance and security events and continuously improve monitoring and operational processes.
• Perform lifecycle activities including firmware upgrades, configuration management, backup/recovery and capacity management.
• Support and improve network automation based on Ansible/AWX.
• Operate and support network security services such as VPN, ZTNA and related network connectivity services.
• Contribute to the continuous improvement of the network architecture, operational procedures and security controls in accordance with BSI requirements.

Requirements

• Strong hands-on experience in operation and troubleshooting of enterprise networks.
• Experience working in production environments using incident, change and problem-management processes.
• Basic Linux administration and scripting skills.
• Good understanding of network-security principles. .

Required skills

Strong practical experience with FortiGate/FortiOS and FortiSwitch. Experience with additional Fortinet security products such as FortiWeb, FortiClient/ZTNA or Fortinet VPN solutions is highly desirable. Operate and troubleshoot FortiWeb WAF services, including virtual servers, server pools, protection policies, certificates, URL/content routing and application-specific security policies. Operate and troubleshoot FortiClient/ZTNA and remote-access solutions, including access policies, authentication integration and client connectivity. Strong knowledge of TCP/IP, IPv4, VLANs, routing, NAT and firewall technologies. Experience with Layer-2/Layer-3 technologies such as LACP/MC-LAG, STP/RSTP/MSTP, BGP and VRRP. Experience with VPN technologies, particularly IPSec. Experience with high-availability firewall and network architectures.

Experience with automation, preferably Ansible/AWX .

Nice to have

Advanced FortiWeb/WAF experience Advanced FortiClient/ZTNA experience Understanding of infrastructure services such as DNS, DHCP and RADIUS and their interaction with network and security components Prometheus/Grafana IPv6 Cisco SD-WAN BSI/IT-Grundschutz experience SAFe

Please be informed that our remote working possibility is only available within Hungary due to European taxation regulation.

As Hungary’s most attractive employer in 2025 (according to Randstad’s representative survey), Deutsche Telekom IT Solutions is a subsidiary of the Deutsche Telekom Group. The company provides a wide portfolio of IT and telecommunications services with more than 5300 employees. We have hundreds of large customers, corporations in Germany and in other European countries. DT-ITS received the Best in Educational Cooperation award from HIPA in 2019, acknowledged as the Most Ethical Multinational Company in 2019. The company continuously develops its four sites in Budapest, Debrecen, Pécs and Szeged and is looking for skilled IT professionals to join its team.