Network Security Engineer
Location
Anaheim, CA
Level
Applications Engineer
Department
Type
Full - Time
Salary
Job Description
Posted on:
June 20, 2025
THIS IS NOT A REMOTE POSITION!
ATI Restoration is seeking an experienced and security-focused Network Engineer with strong expertise in FortiGate hardware and VPN, FortiManager, and Aruba wireless technologies. Ideal candidates will also possess knowledge in Aruba Central, Wi‑Fi (802.11 standards), QoS, RADIUS, 802.1X, and network access security. Familiarity with SolarWinds Orion and Palo Alto hardware is a bonus.
Responsibilities
Key Responsibilities
- Architect, deploy, and maintain enterprise network infrastructure, including FortiGate firewalls and FortiOS.
- Configure and manage FortiGate VPNs: IPsec, SSL, ADVPN; troubleshoot connectivity and performance.
- Administer FortiManager and FortiAnalyzer for centralized orchestration.
- Design, implement, and optimize Aruba wireless networks using Aruba Access Points, Controllers, and Aruba Central
- Conduct Wi‑Fi site surveys, RF planning, coverage modeling, capacity planning, and performance tuning.
- Implement and troubleshoot wireless security: RADIUS‑based 802.1X, PEAP/TLS, EAP, and NAC.
- Define and enforce QoS policies for voice/data over wireless and wired networks
- Collaborate with cybersecurity teams to ensure compliance and enforce access control policies.
- Troubleshoot routing (BGP, OSPF), VLANs, NAT, DPI/IPS, firewalls, and VPNs.
- Keep network documentation, diagrams, change control logs, and configuration backups up-to-date.
- Participate in rotation for after-hours support and on-call duties as needed.
Job Requirements
Required Qualifications
- At least 5 years of hands-on network engineering or network security engineering in enterprise environments.
- FortiGate expertise (NGFW, VPN, Secure SD-WAN) and FortiManager orchestration experience.
- Proven experience designing, deploying, and troubleshooting Aruba wireless systems (APs, Controllers, Aruba Central)
- Deep knowledge of Wi‑Fi standards (802.11a/b/g/n/ac/ax), RF fundamentals, site survey tools (Ekahau, AirMagnet, Aruba UXI).
- Strong experience with wireless security: RADIUS, 802.1X, ClearPass, PEAP/TLS
- Solid understanding and configuration of QoS for voice/video/data networks
- Proficient in IP networking: TCP/IP, BGP, OSPF, VLANs, NAT, DHCP, DNS.
- Certifications: Fortinet NSE 4–6, Aruba certifications (e.g. Aruba Certified Mobility Professional, ClearPass Professional, ACMX), CCNA/CCNP.
- Strong troubleshooting skills across wired, wireless, VPN, and security domains.
- Excellent documentation and communication skills.
Preferred Skills
- Experience with SolarWinds Orion Suite: NPM, NTA, NCM.
- Familiarity with Palo Alto firewalls and VPN technologies.
- Working knowledge of SD-WAN deployments, preferably via FortiManager.
- Additional security tooling: FortiSIEM, Splunk, SIEM platforms.
- Cloud networking experience (AWS, Azure), specifically VPN/firewall integrations.
Education & Certifications
- Bachelor’s degree in Computer Science, Engineering, or related field (or equivalent experience).
- Fortinet NSE4–NSE6, Aruba certifications (ACMP/ACCP/ACSP/ACMX), Cisco CCNA/CCNP.
- Advantageous: Palo Alto (PCNSE), SolarWinds, CWNP (CWNA/CWSP) certifications.
