Cloud Network Security Architect

Fortinet Inc•Denver, CO

40d•$170,000 - $280,000

About The Position

Fortinet is seeking a Cloud Network Security Architect specializing in cloud networking, SD-WAN on-ramp design, and SASE convergence. As part of Fortinet's Cloud Architecture team, this role drives the design and deployment of secure, high-performance connectivity across public cloud, data center, and edge environments. The ideal candidate combines strong DevOps engineering skills with deep understanding of secure cloud networking architectures, including dynamic routing constructs, transitive routing models, and cloud-native route services. This role will work closely with Product Management, R&D, Field Engineering, and global customers to develop reference architectures, integrations, and automation for secure, adaptive cloud connectivity.

Requirements

5+ years of experience in cloud networking, network security, or secure SD-WAN/SASE design.
Strong development and scripting experience in one or more languages (Python, Node.js, C#, Go, or equivalent).
Familiarity with CI/CD tools (Git, Jenkins) and IaC orchestration (Terraform, Ansible, or CloudFormation).
Experience with IaaS and SaaS networking constructs such as VPCs/VNets, route tables, peering, VPNs, and load balancers.
Knowledge of BGP, transitive routing, network segmentation, and traffic engineering in cloud environments.
Hands-on experience with containerized environments (Docker, Kubernetes) and cloud-native network policies.
Proficiency with data formats such as YAML, JSON, or XML.
Familiarity with cloud security services (CNAPP, CASB, CWP, SCA, DAST).
Strong communication skills and ability to collaborate across engineering, product, and customer-facing teams.
Experience in network security highly desired, including VPN, Proxies, Authentication, etc.
Technical writing and network documentation skills highly desired
Kubernetes and Docker experience required

Responsibilities

Design and implement secure cloud network architectures that leverage Fortinet SD-WAN, SASE, and cloud-native routing to deliver optimized multi-cloud connectivity.
Develop automation workflows and DevOps pipelines for network provisioning, telemetry, and policy enforcement, using services such as Terraform, Ansible, and cloud-native templates.
Architect solutions using transitive routing, route services, dynamic path selection, and zero trust segmentation to enable secure, scalable network topologies.
Partner with Product Management and Development teams to identify feature integrations that enhance secure cloud networking capabilities.
Lead proof of concept deployments and customer solution validations across public and hybrid cloud environments.
Develop and maintain reference architectures, scripts, and code repositories applying industry best practices.
Provide architectural guidance on secure traffic steering, network segmentation, and cloud interconnects.
Support Professional Services and Sales Engineering teams in customer design and migration projects.
Create organizational workflow enhancements to deliver public cloud-sourced services, such hands-on labs, customer POCs, tool integration, data enrichment and other uses
Provide technical guidance on Public Cloud matters to internal stakeholders
Document and maintain script and application libraries or repositories
Provide technical guidance on Public Cloud integration and development, ex. the use of CSP APIs and how they can be leveraged
Translate business requirements to programmatic logic
Develop customer-facing documentation
Create reference designs and code that applies CSP best practices
Advise Product and field Engineering on solution options, feature requirements, and reference designs.