Consulting Systems Engineer

Job Duties and responsibilities

• Support International sales activities as a strategic and high-level corporate technical resource for vital pre-sales engagements and key opportunities.

• Act as subject-matter expert in pre-sales design reviews and serve as authoritative consultant to Field Systems Engineers by providing technical guidance and leadership.

• Participate with SE peers to lead the design and architecture of secure IP networks utilizing and leveraging all aspects of Fortinet’s product line to create superior solutions in competitive environments.

• Provide training to System Engineers at various events worldwide and mentor SE specialists within Virtual Teams.

• Serve as Virtual Team Leaders and act as voice representing the International Sales Organization from a technical perspective at various meetings and committees.

• Work closely with Product Management and Engineering to help identify, qualify, and develop features critical to Fortinet’s success.

• Write whitepapers, tech notes, and other high-level technical documentation as required.

• Interface with Fortinet’s Business and Technology partners within designated technology discipline and distribute that knowledge to the field Systems Engineers.

• Travel worldwide on short notice.

• Provide status reports in timely manner and ensure communication to the SE Director / VP SE.

Skills & Qualifications

• Deep and strong knowledge of Secure Access Service Edge (SASE) architecture and cloud-delivered security models.

• Hands‑on experience with Zero Trust Network Access (ZTNA) and modern identity‑based access controls.

• Solid understanding and operational experience with SD‑WAN technologies, including application‑aware routing, dynamic path selection, and branch connectivity.

• Experience integrating security and networking services such as SWG (Secure Web Gateway), CASB, FWaaS, and DLP within a SASE or SSE framework.

• Familiarity with Identity and Access Management (IAM) integrations, including SAML, OAuth, OIDC, and MFA with common identity providers (e.g., Azure AD / Entra ID, Okta).

• Excellent networking fundamentals including TCP/IP, routing protocols (BGP/OSPF), DNS, NAT, and IPsec/SSL VPN technologies.

• Experience securing access to SaaS and cloud applications, including CASB policies, shadow IT visibility, and data protection controls.

• Understanding of public cloud networking concepts within AWS, Azure, or Google Cloud environments.

• Experience integrating SASE platforms with security monitoring tools such as SIEM, XDR, or logging platforms.

• Familiarity with automation and APIs, with exposure to tools such as Python, Terraform, or Ansible considered a plus.

• Solid troubleshooting and problem‑solving skills across networking, security, and identity‑based access environments.

• Experience with leading SASE / SSE platforms such as Fortinet, Zscaler, Palo Alto Networks (Prisma Access), Netskope, or Cisco.

• Good knowledge and understanding of Public Cloud environments such as AWS, Microsoft Azure, and Google Cloud Platform (desirable).