Identity and Access Engineer, Fortinet

Evolution Cloud Services (EVOCS)
$75 - $90Remote

About The Position

EVOCS is an IT services firm providing skilled security engineering resources to enterprise clients. We are engaging a fractional Identity and Access Engineer for a firewall security remediation program at a global data center operator. The environment is approximately 150 physical FortiGate firewalls across roughly 55 sites in North America, EMEA, and APAC, centrally managed through FortiManager and FortiAnalyzer, with FortiAuthenticator and Active Directory for administrative access and a hybrid Azure-hosted component. You will be embedded as an extension of the client's network security team, working alongside their internal engineers and the assessment team under the client's direction, with EVOCS providing the engagement framework, coordination, and support.

Requirements

  • 5+ years in identity and access engineering.
  • Significant hands-on FortiAuthenticator experience; a production deployment or a major integration preferred.
  • Deep Active Directory: authentication flows, LDAP and LDAPS, group-based authorization.
  • MFA rollout experience for privileged or administrative user populations.
  • Fluency in the FortiGate administrative access model: admin profiles, trusted hosts, role-based access.

Nice To Haves

  • FCP or NSE 4 level, or FortiAuthenticator specialization (NSE 5 or FCP elective), preferred.
  • Identity certifications such as Microsoft SC-300.
  • Experience eliminating shared and local admin accounts at fleet scale.
  • Background with a Fortinet partner or managed-security provider.

Responsibilities

  • Integrate administrative authentication fleet-wide against FortiAuthenticator and Active Directory.
  • Deploy multi-factor authentication for administrative access across the estate.
  • Design and enforce role-based access and admin profiles.
  • Apply trusted-host restrictions, harden SSL-VPN, and eliminate local and shared administrator accounts.
  • Perform RADIUS, TACACS+, SAML, and LDAP or LDAPS integration work as required.
© 2026 Teal Labs, Inc
Privacy PolicyTerms of Service