N2 Support Engineer – Fortinet
Job Objective
We are looking for an N2 Support Engineer specialized in Fortinet solutions, with solid experience in administration, support, and troubleshooting of security infrastructure and enterprise networks.
You will be responsible for handling second-level incidents, performing advanced diagnostics, executing changes and configurations on Fortinet platforms, and participating in the handling of critical incidents, working in coordination with clients, NOC/SOC, vendors, and manufacturer support.
Main Responsibilities
- Handle and resolve N2 incidents related to perimeter security, connectivity, and Fortinet platforms.
- Administer, configure, and provide support for FortiGate / FortiOS.
- Configure and diagnose:
- Firewall Policies and objects.
- NAT and VIPs.
- Static and dynamic routing.
- OSPF and BGP.
- SD-WAN.
- IPsec VPN Site-to-Site.
- SSL VPN / remote access.
- High Availability (HA).
- VLANs and interfaces.
- Administer security profiles: IPS, Application Control, Web Filtering, Antivirus, DNS Filtering, and SSL Inspection.
- Perform advanced troubleshooting of connectivity, security, performance, and availability.
- Analyze sessions, routing tables, logs, events, and traffic to identify root cause.
- Use FortiGate diagnostic tools, packet capture/sniffer, and debug flow.
- Administer and provide support for FortiManager and FortiAnalyzer.
- Participate in implementation, configuration, and updating of Fortinet equipment.
- Execute scheduled changes and maintenance windows.
- Handle and technically coordinate critical incidents until resolution.
- Perform escalations and follow-up with Fortinet TAC.
- Document configurations, changes, procedures, diagrams, and root cause analysis (RCA).
- Identify recurring incidents and propose preventive actions and improvements.
- Maintain technical communication with clients and internal teams during incident handling.
- Participate in on-call shifts or after-hours support when required by operations.
Required Experience
- Minimum 5 years of professional experience in networks and/or infrastructure security.
- At least 2 to 3 years of practical experience administering Fortinet/FortiGate solutions in enterprise environments.
- Experience performing N2 support or higher functions.
- Experience in firewall administration in production environments.
- Experience handling critical incidents and performing troubleshooting.
- Experience working under SLA schemes, incident management, and change control.
- Experience interacting with manufacturer support.
Indispensable Technical Knowledge
- FortiGate and FortiOS.
- Firewall Policies, NAT, and VIP.
- IPsec VPN and remote access.
- SD-WAN.
- High Availability.
- IPS, Antivirus, Application Control, and Web Filtering.
- SSL Inspection.
- FortiManager.
- FortiAnalyzer.
- TCP/IP.
- Routing and Switching.
- VLANs.
- OSPF and BGP knowledge.
- DNS and DHCP.
- SNMP, Syslog, and log analysis.
- Packet capture and traffic analysis.
- Troubleshooting via FortiGate CLI.
Fortinet Certifications
Current Fortinet Certified Professional (FCP) Secure Networking.
Highly desirable:
- Fortinet Certified Solution Specialist (FCSS) Secure Networking.
- Current certifications or exams related to FortiGate Administrator, FortiManager, and FortiAnalyzer.
- Also candidates who have previous equivalent Fortinet certifications, for example, NSE 4/NSE 5/NSE 7.
Desirable Additional Certifications
- CCNA or CCNP Enterprise.
- Certifications from other security manufacturers.
- ITIL Foundation.
Desirable Additional Knowledge
- FortiSwitch.
- FortiAP.
- FortiClient / EMS.
- FortiAuthenticator.
- FortiWeb.
- FortiSASE.
- Integration with Active Directory / Entra ID.
- MFA and authentication.
- Wireless network security.
- SIEM/SOC and security event management.
- Automation via API or scripting.
Not all these products are required; they are left as differentiators.
Competencies
We are looking for a person with:
- High capacity for analysis and problem-solving.
- Structured thinking for troubleshooting.
- Ability to work under pressure during critical incidents.
- Sense of urgency and service orientation.
- Ability to take ownership of an incident until its resolution.
- Good technical communication with clients.
- Discipline in documentation and ticket follow-up.
- Ability to work coordinately with NOC, SOC, manufacturers, and other technical areas.
Education
Engineering or Bachelor's degree in Systems, Information Technologies, Telecommunications, Electronics, Networks, Cybersecurity, or related fields.
Language
Intermediate or higher technical English, with the ability to read documentation and participate in troubleshooting sessions with Fortinet TAC.
Profile We Are Looking For
More than a firewall administrator, we are looking for an engineer capable of analyzing an incident from end to end and determining if the cause lies in security policies, routing, NAT, VPN, SD-WAN, network services, connectivity, or external infrastructure.
Must feel comfortable working both from GUI and CLI, analyzing logs, sessions, and packet captures, executing diagnostics, and coordinating resolution with other specialists and Fortinet TAC.technical.-Requirements- Minimum education: High school - Technological Baccalaureate years of experience Keywords: engineers, ingeniera, ing, engineer, apoyo, support, soporte