Firewall Engineer - Fortinet - REMOTE

World Wide Technology (WWT) is a global technology solution provider, working with the world's largest organisations to design, build and deliver complex infrastructure at scale. Our EMEA business spans a London sales office, a European Integration Center in Amsterdam and an operations team at Schiphol, and continues to grow rapidly.

This is a project-based deployment role. You will be deploying, migrating and cutting over firewall and load balancing infrastructure — not running a support queue. We need engineers who plan the work, configure the kit, run the change and hand it over, then move on to the next one.

WHAT YOU'LL DO

• Deploy and migrate Fortinet FortiGate firewalls, including policy configuration, rule base rationalisation, HA cluster builds and VDOM design.
• Manage Fortinet Security Fabric components — FortiManager, FortiAnalyzer, FortiSwitch and FortiAP — as part of new-build and migration projects.
• Build and migrate load balancers (F5 BIG-IP LTM/GTM or Citrix ADC/NetScaler), configuring VIPs, pools, health monitors, iRules/policies and SSL offload for new and migrated services.
• Deliver firewall platform migrations and consolidations, moving legacy or competing platforms (Check Point, Palo Alto, Cisco ASA) onto current-generation FortiGate estates.
• Provide supporting routing and switching configuration (BGP, OSPF, VLANs) where required to integrate firewalls and load balancers into the wider network design.
• Own delivery of your workstream end to end — planning, raising and presenting changes, coordinating with other teams and vendors, executing the implementation and validating the result.
• Work implementation windows, including out of hours and weekends where the change requires it.
• Troubleshoot during build and cutover, resolving firewall, load balancing, SSL/certificate and routing issues before handover to operations.

WHAT YOU'LL NEED

• Demonstrable project implementation and migration experience — you have delivered builds and cutovers, not just supported them.
• Strong hands-on Fortinet firewall experience — FortiGate policy configuration, rule base migrations, HA and VDOM design.
• Load balancing build experience with F5 BIG-IP (LTM/GTM, iRules) or Citrix ADC/NetScaler, including VIP, pool and SSL profile configuration.
• Working routing and switching knowledge (BGP, OSPF, VLANs) to support firewall and load balancer integration — not the primary focus of this role.
• Experience with SSL/TLS certificate management and inspection policies across firewall and load balancing platforms.
• Comfortable physically deploying and configuring kit, and directing or coordinating other engineers and third parties where needed.
• Confident working to strict change control in a large enterprise environment, and able to guide project managers through the right sequencing of network activity.
• Clear communicator who writes usable documentation and works well across infrastructure, security and project teams.

CERTIFICATIONS

• Fortinet NSE (4 or above) required.
• F5 Certified (F5-CA/CTS) or Citrix ADC certification desirable; CCNP (Enterprise or Security) desirable but not required.