Sr Network Engineer ( L3) with below skills. The Candidate should have hands-on experience with FortiGate (NGFW), Forti Manager, and Forti Analyzer, and a strong understanding of SD-WAN architecture including deep expertise in Cisco Identity Services Engine (ISE) and Network Access Control (NAC). The person should have expertise on ISE Radius Integration with FortiGate (NGFW)
Cisco ISE-NAC
- Design, deploy, and maintain Cisco ISE for wired, wireless, and VPN access control.
- Develop and enforce NAC policies based on user identity, device posture, and security compliance.
- Integrate Cisco ISE with third-party security tools (e.g., Fortinet, Palo Alto) - Mandatory
- Manage RADIUS, TACACS+, and 802.1X authentication services.
- Monitor and respond to network access violations and security incidents.
- Maintain endpoint profiling, guest access, and BYOD onboarding workflows.
- Collaborate with network, security, and compliance teams to align access policies with business needs.
- Provide technical documentation, L2/L3 support for ISE-related services.
FortiNet SD-WAN :
- Design and deploy Fortinet SD-WAN solutions across multiple sites.
- Configure and manage FortiGate firewalls, VPNs, and security policies.
- Monitor and optimize SD-WAN performance and reliability.
- Integrate Fortinet SD-WAN with third-party platforms (e.g., Cisco ISE, hybrid cloud primary on AWS).
- Troubleshoot network issues and provide Tier 2/3 support.
- Maintain documentation for network configurations, policies, and procedures.
- Collaborate with security and infrastructure teams to align network design with business and compliance requirements.