Senior Fortinet ITOT Security Auditor-ORE001014

An experienced Fortinet Security Auditor is required to conduct a configuration and security audit of Fortinet infrastructure deployed across both IT and Operational Technology (OT) environments. The assignment focuses on reviewing existing configurations assessing compliance with security best practices and providing actionable recommendations to improve the overall security posture.

The engagement is expected to last 5 to 10 days between July and August 2026 with on-site activities and occasional travel to multiple locations.

• Review existing Fortinet architecture and configurations.
• Verify consistency between:
  • Target designs
  • High-level and low-level design documentation
  • Actual device configurations
• Assess configurations within FortiGate and FortiManager environments.

• Evaluate device hardening measures including:
  • Administrative access controls
  • Authentication mechanisms
  • Multi-factor authentication where applicable
  • Management plane security
  • Secure communication protocols
• Validate compliance with:
  • Fortinet best practices
  • Recognized security standards such as CIS and ANSSI.

• Assess firewall rule structures and policy organization.
• Evaluate:
  • Readability and maintainability
  • Logical segmentation (zones roles flows)
  • Overall consistency and governance

Note: Business validation of individual traffic flows is outside the scope.

Review the implementation and effectiveness of:

• IPS / IDS
• Antivirus protection
• Web filtering
• Application control
• SSL inspection
• Sandboxing and advanced security features

Assess:

• Proper activation and configuration
• Alignment with vendor recommendations
• Unused or underutilized security capabilities

• Identify:
  • Unsupported or end-of-life versions
  • Missing patches
  • Exposure to known vulnerabilities
• Evaluate risks associated with outdated systems.

Provide:

• Quick-win improvements
• Security enhancement opportunities
• Maturity improvement recommendations

Recommendations should be:

• Practical and actionable
• Risk-based
• Prioritized according to technical impact and implementation effort

• Detailed technical assessment report including:
  • Findings
  • Risks
  • Deviations from best practices
  • Recommendations
• Executive summary
• Feedback and presentation session

• Minimum 5 years of proven Fortinet experience
• Extensive experience with:
  • FortiGate
  • FortiManager
  • Security auditing
  • Configuration reviews and tuning
• Experience working in critical OT environments
• Strong understanding of IT and OT security requirements
• Ability to deliver directly actionable recommendations
• Experience with security hardening and compliance frameworks

• Fortinet FCSS Secure Networking certification or equivalent FCE certification
• Relevant security certification(s)

• French language proficiency at B2 level (CEFR) or higher.

• Senior security consultant with vendor-level Fortinet expertise
• Strong understanding of OT availability and operational constraints
• Experience performing non-intrusive security assessments
• Proven experience delivering similar Fortinet audit engagements
• Ability to present recent project references demonstrating comparable assignments

• Assignment duration: Less than one year
• Estimated workload: Approximately 2 days per week
• On-call support: Not required
• Knowledge transfer: Not required
• Travel to multiple sites may be required; a valid drivers license and personal vehicle are recommended.
• Background verification and professional reference checks may be required due to the sensitive nature of the environment.