SASE Network Engineer

Senior Network & Security Engineer / Fortinet SASE Specialist Overview We are seeking a highly experienced Senior Network & Security Engineer / Fortinet SASE Specialist to lead and support the implementation of a large-scale Fortinet SASE transformation across APRA enterprise environments. The environment includes enterprise Data Centers, Azure cloud infrastructure, and multiple branch locations with full redundancy and high availability requirements. The successful candidate will possess deep technical expertise across Fortinet security platforms, enterprise networking, cloud connectivity, routing, and data centre technologies. Key Responsibilities •    Design and implement Fortinet SASE architecture across enterprise environments •    Deploy and configure FortiSASE capabilities (SD-WAN, FWaaS, SWG, CASB, ZTNA) •    Implement secure connectivity across Data Centers, Azure cloud, branch offices, Internet and SaaS services •    Configure and support FortiGate firewalls across enterprise sites •    Implement high availability and resilient network designs •    Configure and troubleshoot BGP, OSPF, IPSec VPN, dynamic routing, traffic steering and segmentation •    Support integration with Cisco Nexus data centre infrastructure •    Configure and support F5 load balancing environments •    Configure FortiClient VPN and ZTNA solutions •    Support migration and cutover activities •    Produce HLD/LLD and implementation documentation •    Perform complex troubleshooting •    Collaborate with infrastructure, cloud and security teams •    Provide technical leadership •    Lead or support migration of email gateway to Azure-based services •    Design secure mail flow including SMTP and MX records •    Ensure anti-spam, anti-phishing and DLP controls •    Perform testing and cutover Technical Skills •    Strong hands-on experience implementing Fortinet SASE solutions •    Extensive FortiGate firewall experience •    Strong enterprise routing and switching knowledge •    Experience with BGP, OSPF, SD-WAN, IPSec VPN, HA •    Cisco Nexus, VLANs, VPC, VXLAN •    Azure networking and hybrid connectivity •    F5 load balancers (LTM) •    Network segmentation and security policy design •    Strong troubleshooting skills Desirable Certifications •    Fortinet NSE / FCSS / FCX •    Cisco CCNP or CCIE •    Azure Networking certifications Security Clearance Must be willing and eligible to obtain NV1 Security Clearance. Key duties and responsibilities Key Responsibilities  Implement Fortinet SASE services across enterprise environments in line with the agreed solution design  Deploy and configure SD-WAN, FWaaS, SWG, ZTNA and CASB capabilities  Integrate the solution with data centre, MPLS and Azure environments  Implement secure internet, private application and SaaS access aligned to enterprise security requirements  Configure and support FortiClient for ZTNA and secure remote access use cases  Apply security policies, traffic steering, segmentation and access controls in line with the approved implementation approach  Establish monitoring, logging and reporting through FortiAnalyzer, and manage devices using FortiManager  Produce implementation documentation, operational handover materials and knowledge transfer artefacts for the internal network team  Must-Have Skills: The successful candidate will bring proven Fortinet SASE implementation experience in complex enterprise environments and be comfortable working across existing network and security platforms in a regulated setting.  Proven experience implementing Fortinet SASE solutions in enterprise environments  Strong hands-on delivery experience across SD-WAN, FWaaS, SWG, ZTNA and CASB  Experience integrating cloud, branch and data centre network services, including Azure  Strong understanding of enterprise security policy implementation, segmentation and secure access controls  Experience working in regulated environments  Strong documentation, stakeholder engagement and operational handover capability  Ability to work collaboratively with internal engineering, security and operations teams to deliver production outcomes  Criteria The buyer has specified that each candidate must provide a one page pitch to address all criteria specified. This is equal to 5000 characters. Essential criteria 1. Ability to meet requirements Experience and expertise Value for money 2. Must have NV1 Opportunity summary Sellers can submit Up to 1 candidate Number of sellers invited Fewer than 5 Number of candidates submitted Fewer than 10 RFQ closing time 00 Days 06 Hours 58 Minutes Send us feedback About Accessibility Privacy Terms of use Disclaimer and copyright An initiative of the Digital Transformation Agency The Australian Government acknowledges the Traditional Owners of Country throughout Australia and acknowledges their continuing connection to land, waters and community. We pay our respects to the people, the cultures and the Elders past and present. © Commonwealth of Australia