- Design, configure, and deploy FortiGate, MikroTik, and UniFi firewalls, switches, and routers for internal and client networks
- Stand up and maintain BGP peering with carriers (e.g., regional fiber providers such as 123Net), including new-circuit turn-ups, route advertisement, and failover validation
- Plan and execute client network migrations and cutovers — phased rollouts, equipment programming and install, circuit migration, and movement of WAN routing onto new firewall pairs
- Build and rehearse change plans with clear go/no-go criteria, maintenance windows, and tested rollback / fail-back procedures; coordinate live cutovers over a shared bridge line
- Deploy and support SD-WAN (Peplink FusionHub) for multi-site and multi-client connectivity
- Perform hands-on data-center / colocation work: rack and stack, structured cabling, fiber and SFP+/DAC optics, and accurate port mapping and patching
- Support and modernize legacy Cisco environments (ASA, ASR, Nexus) as they are migrated onto the current platform
- Maintain accurate network documentation, diagrams, IP/ASN records, and change logs; monitor health and respond to incidents
- Provide after-hours and on-call support for scheduled cutovers and critical outages.
Experience:
- 5-7 years of proven production experience configuring and troubleshooting FortiGate, MikroTik (RouterOS), and UniFi/Ubiquiti firewalls, switches, and routers
- Hands-on experience with full BGP peering over fiber with one or more upstream carriers, including prefix filtering and multihomed failover
- Solid understanding of HA firewall design, WAN failover, NAT, and site-to-site / remote-access VPN
- Experience planning and executing network migrations and cutovers in maintenance windows, including rollback planning
- Comfortable with hands-on physical work: racking equipment, structured and fiber cabling, and optics (SFP+/DAC)
- Willingness & availability to work scheduled after-hours cutovers and participate in an on-call rotation
- Strong troubleshooting discipline and clear written/verbal communication for real-time cutover coordination
Preferred / Bonus Qualifications
- Cisco experience — ASA firewalls, ASR routers, and Nexus (N9K) switches
- Peplink / SD-WAN (FusionHub) deployment and administration
- SIP / voice networking and session border controllers (e.g., Ingate)
- Managed Service Provider (MSP) experience supporting multiple client environments concurrently
- Relevant certifications: Fortinet NSE; MikroTik MTCNA / MTCRE; Ubiquiti UEWA; Cisco CCNA/CCNP
- CISSP certification (or equivalent qualification) – Highly Preferred