Network & Infrastructure Engineer

This is a remote position.

Own the corporate firewall, data center switching and KVM virtualization layer across two redundant data center racks. You will be the senior escalation point (Tier 3) for our full-time infrastructure engineer. Your first major deliverable is completing the migration of a FortiGate HA pair from FG-201E to FG-121G.

The infrastructure also runs telecom core workloads (SBC, DRA/STP, PGW, IMS). Separate specialists support those applications. Your job is to keep the network, firewall and virtualization layers under them stable.

Responsibilities

1. Complete the FortiGate HA migration from FG-201E to FG-121G: config conversion, test plan, cutover and rollback plan.
   
2. Own the firewall going forward: policy changes, VPNs, security profiles, FortiOS upgrades and periodic rule review.
   
3. Own the Cisco Nexus switching fabric in both racks: vPC health, VLAN and port changes, NX-OS upgrades and config backups.
   
4. Act as senior escalation (Tier 3) on network, firewall and KVM incidents.
   
5. Maintain KVM host standards: networking, storage, backups and capacity across Dell and Lenovo servers.
   
6. Keep network diagrams, IP plans and runbooks current.
   
7. Coordinate with telecom application specialists when network or firewall changes affect their services.
   
8. Join scheduled maintenance windows and a defined on-call rotation for critical outages.
   

Requirements

Own the corporate firewall, data center switching and KVM virtualization layer across two redundant data center racks. You will be the senior escalation point (Tier 3) for our full-time infrastructure engineer. Your first major deliverable is completing the migration of a FortiGate HA pair from FG-201E to FG-121G.

The infrastructure also runs telecom core workloads (SBC, DRA/STP, PGW, IMS). Separate specialists support those applications. Your job is to keep the network, firewall and virtualization layers under them stable.

Responsibilities

1. Complete the FortiGate HA migration from FG-201E to FG-121G: config conversion, test plan, cutover and rollback plan.
   
2. Own the firewall going forward: policy changes, VPNs, security profiles, FortiOS upgrades and periodic rule review.
   
3. Own the Cisco Nexus switching fabric in both racks: vPC health, VLAN and port changes, NX-OS upgrades and config backups.
   
4. Act as senior escalation (Tier 3) on network, firewall and KVM incidents.
   
5. Maintain KVM host standards: networking, storage, backups and capacity across Dell and Lenovo servers.
   
6. Keep network diagrams, IP plans and runbooks current.
   
7. Coordinate with telecom application specialists when network or firewall changes affect their services.
   
8. Join scheduled maintenance windows and a defined on-call rotation for critical outages.
   

Profile We're Looking For

Minimum 7 years in network and infrastructure engineering. Hands-on production experience in all three areas below is required. Course-only or lab-only exposure does not qualify.

1. Fortinet FortiGate (3+ years in production)

• FortiGate HA clusters (FGCP active-passive), including heartbeat links and session sync
  
• Hardware migration between FortiGate models: config conversion and low-downtime cutover
  
• FortiOS upgrades and firmware path planning
  
• Policies, NAT/VIPs, IPsec site-to-site VPN, SSL-VPN or ZTNA, VLAN interfaces, LACP
  
• Security profiles (IPS, application control, web filtering) and log analysis
  

2. Cisco Nexus 9000 / NX-OS (3+ years)

• vPC design and troubleshooting, including peer-link and keepalive
  
• Top-of-rack and access-layer design: VLANs, trunks, LACP port-channels, Spanning Tree
  
• 10/25/100G optics, breakout cables and server uplink design
  
• Layer 3: SVIs, HSRP/VRRP, static routing, OSPF or BGP
  
• NX-OS upgrades, config backup and change management
  

3. KVM virtualization on Linux (3+ years in production)

• libvirt, virsh, virt-manager or Cockpit: creating, cloning and resizing VMs
  
• Linux host networking: bridges, bonding and VLAN tagging toward Nexus switches
  
• Storage pools on local disk and SAN (iSCSI or FC), LVM and qcow2
  
• VM backups, snapshots, live migration and capacity planning
  
• Out-of-band management: Dell iDRAC, Lenovo XClarity/IMM
  

General

• Fluent English, written and spoken
  
• Clear documentation: network diagrams, runbooks, change records
  

Nice to Have

• FortiManager and FortiAnalyzer
  
• IBM Power9 servers, HMC, VIOS or AIX basics
  
• Lenovo/IBM Storwize-class SAN storage, tape backup
  
• Network automation with Ansible or Python (NX-OS, FortiOS)
  
• Monitoring: Zabbix, PRTG, LibreNMS or Grafana
  
• Exposure to telecom/carrier networks (SIP, Diameter, SS7/SIGTRAN, GTP)
  
• Certifications: Fortinet FCP Network Security (formerly NSE 4) or FCSS; CCNP Data Center or Enterprise; RHCSA/RHCE
  

Benefits

• 100% remote work from LATAM, with occasional on-site data center visits planned in advance.
  
• Competitive pay in USD, based on experience, as an independent contractor.
  
• Senior ownership of a real production environment: firewall, data center fabric and virtualization.
  
• High-impact first project: lead the FortiGate HA migration from FG-201E to FG-121G.
  
• Telecom core exposure: work alongside SBC, DRA/STP, PGW and IMS specialists.
  
• Long-term engagement with a stable client, with room to grow the scope.
  
• Support from Atlantic Talent Services throughout the process: clear communication, onboarding and a dedicated point of contact.