| Title: | L3-Network Security Engineer |
|---|---|
| ID: | 2457 |
| Location: | Remote India |
| Department: | Technical Support |
Innovatia Technical Services Inc. (ITSI) is an industry-leading technology outsourcing support provider with expertise in the telecommunications industry. Operating for over 20 years, we specialize in workflow and knowledge processes, as well as technical support, helpdesk and multilingual support services. With over 300 professional experts across the globe, we service some of the worlds’ most successful Fortune 500 and Fortune 1000 companies.
We are seeking an experienced Level 3 Network Engineer with deep expertise in FortiGate / FortiOS and Ubiquiti UniFi networking platforms. This role is responsible for the design validation, advanced configuration, and quality assurance of network and firewall builds prior to deployment at client sites.
The engineer is expected to operate with minimal supervision, identify design gaps or risks, and ensure configurations align with security best practices and internal standards. Work is performed during US overnight hours (India daytime) in close coordination with US-based engineering teams.
Key Responsibilities
- Design, configure, and standardize customer network environments across multiple clients.
- Manage and optimize firewalls, switches, routers, VPNs, VLANs, and routing configurations.
- Implement and maintain network configuration standards (CIS benchmarks and Anatomy IT guidelines).
- Troubleshoot complex Layer 2/Layer 3 and connectivity issues across distributed environments.
- Review firewall and network policies to ensure security compliance and operational efficiency.
- Collaborate with the Systems, Security, and Automation teams to enhance end-to-end infrastructure performance.
- Document network diagrams, configurations, and change management details.
- Participate in customer environment audits and reconfiguration projects to align to standard practices.
- Identify automation opportunities for network provisioning, configuration, and reporting.
- Mentor junior engineers and share best practices in network management and optimization.
Required Skills & Experience
- Strong hands-on experience with Fortinet (FortiGate), SonicWall, Cisco Meraki, Ubiquiti, and Unifi network devices.
- Excellent understanding of routing, switching, VLANs, NAT, ACLs, VPNs, and QoS.
- Experience implementing and maintaining firewall rules, policies, and traffic management.
- Familiarity with CIS benchmarks and best practices for network configuration and compliance.
- Solid troubleshooting skills including packet capture and protocol analysis.
- Working knowledge of Azure networking, Office 365, and hybrid cloud connectivity is an advantage.
- Experience in MSP or multi-client enterprise environments is a must
Preferred Qualifications
- Lead remote preconfiguration of FortiGate firewalls using FortiOS
- Independently build and validate complex firewall configurations, including:
- Multi-interface and multi-VLAN environments
- HA clusters with multiple ISP’s
- Advanced firewall policy design and optimization
- Source and destination NAT (static and dynamic)
- Policy-based and route-based IPsec VPNs
- SD-WAN configuration and rule design (if applicable)
- Configure and validate UniFi network environments, including:
- UniFi Cloud Keys, Switches, and Access Point
- Complex VLAN and trunking designs
- Wireless network segmentation and security
- Review network diagrams and implementation plans for:
- Design inconsistencies
- Security risks
- Scalability and performance concerns
- Perform pre-deployment testing and validation of:
- Firewall rules and NAT behavior
- VPN connectivity
- Routing and failover logic
- Troubleshoot complex configuration issues identified during staging
- Provide technical guidance and feedback to US-based engineers and project teams
- Ensure all builds adhere to internal standards, security requirements, and documentation expectations
- Produce high-quality build documentation and handoff materials for deployment and support teams
REQUIRED TECHNICAL EXPERTISE
- Expert-level FortiGate / FortiOS experience, including:
- Advanced firewall policy design
- IPsec VPN (site-to-site and client VPN)
- Routing (static, policy-based; dynamic routing a plus)
- NAT and traffic flow analysis
- FortiAnalyzer / logging concepts (nice to have)
- Strong UniFi experience, including:
- UniFi Network Controller administration
- VLAN-based network segmentation
- Enterprise wireless design and security
- Advanced networking fundamentals:
- TCP/IP, subnetting, routing
- DNS, DHCP
- VLANs and network segmentation
- Proven ability to work from high-level designs and translate them into production-ready configurations
PREFERRED SKILLS
- MSP or multi-tenant environment experience
- Experience building standardized firewall templates at scale
- SD-WAN experience on FortiGate
- Exposure to regulated environments (healthcare, finance, etc.)
- Familiarity with change management and formal deployment workflows
- Prior experience supporting US-based engineering teams
Soft Skills
- Strong analytical and problem-solving skills.
- Excellent communication and documentation abilities.
- Proven ability to collaborate across infrastructure and automation teams.
Benefits at Innovatia
- Comprehensive Health Insurance policy
- Employee Wellness Program with focus on mental health
- Robust reward and recognition programs
- Company incentive programs offered.
- Attractive leave policy: Holiday Leave, Maternity Leave, Paternity Leave, Birthday leave, Bereavement Leave and Paid Leave for personal time off
- Ample growth and learning opportunities.
- Remote work opportunities
- Focus on work/life balance.
- Immigration Program supporting immigration to Canada for eligible employees.
We thank all candidates for their interest, however, only those selected for an interview will be contacted.
Innovatia is an equal opportunity employer.
Alternatively, you can apply to this job using your profile from Indeed by clicking the button below:

