[Hiring] Senior Firewall / Security Network Engineer @8x8

Role Description

We're hiring a Senior Firewall / Security Network Engineer to own the design, delivery, and operation of our firewall and network-security estate across on-prem data centers and cloud (AWS, OCI). This is a hands-on senior role: you'll set the firewall architecture — especially for hybrid and cloud connectivity — while running the day-to-day change and incident work that keeps the business connected and secure. You'll be the technical anchor as we migrate a multi-vendor estate onto a standardized FortiGate platform and build the cloud security layer our AWS migration depends on.

What you'll do

• Cloud & hybrid firewall architecture:
  • Design and deliver the firewall/security layer for cloud and hybrid connectivity — AWS (Transit Gateway, VPC, GWLB), OCI, and on-prem↔cloud traffic flows.
  • Own route/prefix and policy design across the boundary so cloud workloads reach on-prem services (and vice versa) securely and without becoming snowflakes.
  • Partner with the security operations, cloud and platform teams to make the security design a first-class part of migration planning, not an afterthought.
• Firewall policy engineering & change management:
  • Translate connectivity requests from application, database, and cloud teams into clean, standards-based firewall policy (allow/NAT/port/service rules, TLS flows).
  • Drive changes through the RP change-management process — with clear implementation, testing, and rollback plans — and peer-review others' changes.
  • Keep policy consistent and auditable across sites; retire one-off exceptions.
• Migration & platform lifecycle:
  • Lead migrations from legacy Cisco and Juniper to FortiGate, including policy review, rebuild, and cutover.
  • Plan and execute quarterly firewall software upgrades and hardware refreshes with minimal disruption.
  • Manage IPsec/site-to-site migrations and firewall decommissioning.
• Operations, incident response & availability:
  • Triage and resolve connectivity incidents — blocked/dropped traffic, TLS handshake failures, VPN outages, firewall failovers.
  • Own the out-of-band (OOB) management network for firewalls: reachability, console access, and monitoring enablement.
• Observability, logging & compliance:
  • Integrate firewalls with logging and monitoring — FortiAnalyzer, SIEM log forwarding, netflow, SNMP.
  • Help close misconfiguration and risk findings.

Qualifications

• Hands-on FortiGate / FortiOS expertise: VDOMs, security policy, NAT, SSL inspection, FortiAnalyzer, and FortiConverter.
• Cloud network security: firewall/connectivity design in AWS (TGW, VPC, GWLB) and/or OCI, including hybrid on-prem↔cloud flows.
• Disciplined change management: implementation, testing, and rollback planning, plus peer review.
• Strong connectivity troubleshooting across the packet path (drops, TLS, DNS, routing).
• Ability to work directly with application, database, cloud, and security teams to turn requirements into secure, standardized policy.

Requirements

• Experience using AI services/assistants in an engineering workflow — AI-assisted troubleshooting, config generation, or building tooling and automation around network/security systems (e.g. API-driven agents, MCP servers).
• Network automation — Ansible, AWX, or similar — for config and policy management.
• SIEM / observability tooling (FortiAnalyzer, netflow, SNMP, log pipelines).
• Multi-site WAN and data-center networking experience.
• Scripting (Python or similar) for tooling and validation.
• Exposure to security frameworks and audit/misconfiguration remediation.

How the role works

• High cross-functional surface: application/DB/cloud teams (connectivity requests), SecOps and the broader security org (risk sign-off, shared initiatives), and site/infra teams (builds and migrations).
• Work is tracked and delivered through the team's change process.