Network security engineer

Logicalis is a Global IT Solutions & Digital Services Provider that accelerates the digital transformation of its customers around the world through an international network of centres of expertise, industry-leading teams and strategic partnerships, including Cisco, Microsoft, Dell Technologies, Palo Alto and Citrix, among others. To strengthen the Logicalis Portugal team, we are looking for a Security Engineer with experience in network security and specialisation in Fortinet Security Fabric and Fortinet Secure SD-WAN solutions.

• Design, implement and administer network security solutions in enterprise environments.
• Configure and manage Fortinet solutions, including FortiGate, FortiManager and FortiAnalyzer.
• Implement and administer IPsec and SSL VPNs in Client-to-Site and Site-to-Site scenarios.
• Configure UTM policies, including IPS, antivirus, Web Filtering, Application Control and DNS Filtering.
• Implement network segmentation mechanisms through VLANs and VDOMs, and integrate identity services such as LDAP, Active Directory and SSO.
• Design, implement and operate Fortinet Secure SD-WAN solutions in environments with MPLS, broadband Internet and LTE/5G connections.
• Configure SD-WAN rules, Performance SLA, traffic steering, load balancing and traffic optimisation based on application requirements.
• Perform advanced troubleshooting, including failure analysis, failover, debug flow and diagnosis of forwarding and policy issues.
• Produce technical documentation and operational runbooks, contributing to automation, monitoring, knowledge sharing and continuous service improvement.

• Solid experience in network administration and information security.
• Solid knowledge of network protocols, firewalls, IDS/IPS, VPNs and other security technologies.
• Experience with FortiGate, FortiManager, FortiAnalyzer and Fortinet Security Fabric architecture.
• Experience designing, implementing and operating Fortinet Secure SD-WAN solutions.
• Knowledge of SD-WAN Rules, Performance SLA, traffic steering, load balancing, latency, jitter and packet loss.
• Experience with network segmentation, VLANs, VDOMs and integration with LDAP, Active Directory and SSO.
• Experience in advanced troubleshooting of security, connectivity, failover, forwarding and policies.
• Будет плюсом: Cisco CCNP Security certification or equivalent-level certification; Experience with Palo Alto Networks, Check Point, F5 or other security technologies; Experience with FortiNAC and Network Access Control solutions; Knowledge of Zero Trust Network Access; Experience with FortiManager Scripts, APIs and operations automation; Experience with monitoring and observability tools; Fortinet NSE 7 SD-WAN certification or an equivalent current certification

• Hybrid and flexible working model.
• Ongoing training plan and access to technical certifications.
• Participation in highly complex security and networking projects.
• Exposure to different clients, technologies and enterprise environments.
• Professional development and career progression opportunities.
• A collaborative, inclusive and innovation-oriented working environment.