Network & Infrastructure Engineer

This is a remote position.

Own the corporate firewall data center switching and KVM virtualization layer across two redundant data center racks. You will be the senior escalation point (Tier 3) for our full-time infrastructure engineer. Your first major deliverable is completing the migration of a FortiGate HA pair from FG-201E to FG-121G.

The infrastructure also runs telecom core workloads (SBC DRA/STP PGW IMS). Separate specialists support those applications. Your job is to keep the network firewall and virtualization layers under them stable.

1. Complete the FortiGate HA migration from FG-201E to FG-121G: config conversion test plan cutover and rollback plan.
   
2. Own the firewall going forward: policy changes VPNs security profiles FortiOS upgrades and periodic rule review.
   
3. Own the Cisco Nexus switching fabric in both racks: vPC health VLAN and port changes NX-OS upgrades and config backups.
   
4. Act as senior escalation (Tier 3) on network firewall and KVM incidents.
   
5. Maintain KVM host standards: networking storage backups and capacity across Dell and Lenovo servers.
   
6. Keep network diagrams IP plans and runbooks current.
   
7. Coordinate with telecom application specialists when network or firewall changes affect their services.
   
8. Join scheduled maintenance windows and a defined on-call rotation for critical outages.
   

Own the corporate firewall data center switching and KVM virtualization layer across two redundant data center racks. You will be the senior escalation point (Tier 3) for our full-time infrastructure engineer. Your first major deliverable is completing the migration of a FortiGate HA pair from FG-201E to FG-121G.

The infrastructure also runs telecom core workloads (SBC DRA/STP PGW IMS). Separate specialists support those applications. Your job is to keep the network firewall and virtualization layers under them stable.

1. Complete the FortiGate HA migration from FG-201E to FG-121G: config conversion test plan cutover and rollback plan.
   
2. Own the firewall going forward: policy changes VPNs security profiles FortiOS upgrades and periodic rule review.
   
3. Own the Cisco Nexus switching fabric in both racks: vPC health VLAN and port changes NX-OS upgrades and config backups.
   
4. Act as senior escalation (Tier 3) on network firewall and KVM incidents.
   
5. Maintain KVM host standards: networking storage backups and capacity across Dell and Lenovo servers.
   
6. Keep network diagrams IP plans and runbooks current.
   
7. Coordinate with telecom application specialists when network or firewall changes affect their services.
   
8. Join scheduled maintenance windows and a defined on-call rotation for critical outages.
   

Minimum 7 years in network and infrastructure engineering. Hands-on production experience in all three areas below is required. Course-only or lab-only exposure does not qualify.

1. Fortinet FortiGate (3 years in production)

• FortiGate HA clusters (FGCP active-passive) including heartbeat links and session sync
  
• Hardware migration between FortiGate models: config conversion and low-downtime cutover
  
• FortiOS upgrades and firmware path planning
  
• Policies NAT/VIPs IPsec site-to-site VPN SSL-VPN or ZTNA VLAN interfaces LACP
  
• Security profiles (IPS application control web filtering) and log analysis
  

2. Cisco Nexus 9000 / NX-OS (3 years)

• vPC design and troubleshooting including peer-link and keepalive
  
• Top-of-rack and access-layer design: VLANs trunks LACP port-channels Spanning Tree
  
• 10/25/100G optics breakout cables and server uplink design
  
• Layer 3: SVIs HSRP/VRRP static routing OSPF or BGP
  
• NX-OS upgrades config backup and change management
  

3. KVM virtualization on Linux (3 years in production)

• libvirt virsh virt-manager or Cockpit: creating cloning and resizing VMs
  
• Linux host networking: bridges bonding and VLAN tagging toward Nexus switches
  
• Storage pools on local disk and SAN (iSCSI or FC) LVM and qcow2
  
• VM backups snapshots live migration and capacity planning
  
• Out-of-band management: Dell iDRAC Lenovo XClarity/IMM
  

General

• Fluent English written and spoken
  
• Clear documentation: network diagrams runbooks change records
  

• FortiManager and FortiAnalyzer
  
• IBM Power9 servers HMC VIOS or AIX basics
  
• Lenovo/IBM Storwize-class SAN storage tape backup
  
• Network automation with Ansible or Python (NX-OS FortiOS)
  
• Monitoring: Zabbix PRTG LibreNMS or Grafana
  
• Exposure to telecom/carrier networks (SIP Diameter SS7/SIGTRAN GTP)
  
• Certifications: Fortinet FCP Network Security (formerly NSE 4) or FCSS; CCNP Data Center or Enterprise; RHCSA/RHCE
  

• 100% remote work from LATAM with occasional on-site data center visits planned in advance.
  
• Competitive pay in USD based on experience as an independent contractor.
  
• Senior ownership of a real production environment: firewall data center fabric and virtualization.
  
• High-impact first project: lead the FortiGate HA migration from FG-201E to FG-121G.
  
• Telecom core exposure: work alongside SBC DRA/STP PGW and IMS specialists.
  
• Long-term engagement with a stable client with room to grow the scope.
  
• Support from Atlantic Talent Services throughout the process: clear communication onboarding and a dedicated point of contact.