Job Purpose

The Senior Network Engineer is a technical position responsible for the design, implementation, and ongoing management of Herc Rentals' enterprise network, with a primary focus on our Fortinet Secure SD-WAN architecture. Herc Rentals operates a nationwide branch network built on FortiGate SD-WAN edge devices, FortiSwitch access-layer switching, FortiExtender out-of-band management, and centralized visibility/management through FortiAnalyzer and FortiManager. This role provides high-level input on SD-WAN topology, WAN circuit strategy (MPLS, DIA, LTE, Broadband), routing design (EIGRP/BGP), and hybrid cloud connectivity (AWS, Azure, OCI) as the company continues to modernize legacy infrastructure onto the Fortinet platform.

The incumbent must understand Herc Rentals' business goals and IT Infrastructure's priorities, and collaborate across the Network & Field Services team, managed service providers, Fortinet, Cisco, & Cisco Meraki to support a large, geographically distributed branch and data center footprint within the Infrastructure Services Portfolio, providing design, planning, and mentorship

What you will do...

• Design, configure, implement, and support Fortinet Secure SD-WAN deployments across branch, data center, and cloud-connected environments.
• Serve as an escalation point for FortiGate, FortiSwitch, FortiExtender, FortiAnalyzer, and FortiManager configuration, troubleshooting, and lifecycle management.
• Support and troubleshoot SD-WAN routing and underlay/overlay design, including EIGRP, BGP, and dynamic routing across MPLS, DIA, LTE, and Broadband circuits.
• Partner with cloud and infrastructure teams on connectivity between branch SD-WAN and hosted workloads in CoLo data centers, AWS, Azure, and Oracle Cloud.
• Lead or support the ongoing migration of legacy Cisco switching/routing infrastructure to the Fortinet stack (FortiSwitch, FortiGate) as part of enterprise network modernization initiatives.
• Create and maintain comprehensive documentation of SD-WAN topology, branch network templates/greenfield build standards, HA designs, VPN-to-VPN connectivity, and as-built network diagrams.
• Oversee Managed Service Provider (MSP)/NOC partners to ensure Fortinet-related network incidents and problems are resolved or escalated within SLA (e.g., firewall monitoring, telecom circuit troubleshooting, out-of-band management via FortiExtender).
• Provide Engineering-level support for incident and problem management across the SD-WAN environment, including site-specific firewall rules and local policy exceptions.
• Analyze FortiAnalyzer/FortiManager reports, system logs, and health monitoring data (CPU, memory, sessions, HA status) to proactively identify and remediate issues.
• Collaborate with vendors (Fortinet, telecom carriers, MSPs) and internal technical teams to plan branch network deployments, greenfield builds, and data center transitions.
• Develop and manage SD-WAN project plans, including resource estimates, timelines, and stakeholder communication.
• Advise management on SD-WAN technology roadmap, Fortinet product evaluation, and recommendations for upgrades or new capabilities.
• Provide on-call support, including nights, weekends, and/or holidays, for SD-WAN and network-related incidents.
• Train, mentor, and educate other network engineers on Fortinet SD-WAN standards, topology, and troubleshooting methodology.

Requirements

• 10+ years' experience in enterprise networking, with hands-on experience designing, deploying, and maintaining Fortinet SD-WAN environments (FortiGate, FortiSwitch, FortiExtender, FortiAnalyzer, FortiManager)
• Deep working knowledge of FortiOS, FortiGate, FortiManager, and secure SD-WAN.
• Demonstrated experience with large-scale SD-WAN topology design, including hub-and-spoke, dual-ISP/dual-WAN failover, and HA architectures
• Experience provisioning and managing diverse WAN circuit types: MPLS, DIA, LTE, and Broadband
• Solid understanding of dynamic routing protocols in an SD-WAN context: BGP, EIGRP
• Experience with hybrid/multi-cloud connectivity: AWS, Azure, or OCI (Oracle Cloud Infrastructure)
• Experience with Cisco networking (ISR routers, switches, ASA firewalls, wireless) — particularly valuable in supporting Herc's ongoing Cisco-to-Fortinet migration
• Experience with Cisco Meraki Access Points
• Experience overseeing or working alongside a Managed Services/NOC partner for network monitoring and incident escalation
• Excellent problem-solving and troubleshooting skills, particularly around SD-WAN failover, QoS, and circuit-level performance issues
• Experience with network monitoring/analysis tools (e.g., FortiAnalyzer, SolarWinds) and performance tuning
• Comprehensive understanding of TCP/IP, DHCP, DNS, VPN/VPN-to-VPN connectivity, and DMVPN
• Experience with LAN hardware including patch panels, fiber optic, Cat5e, and Cat6 wiring
• Experience supporting IP Telephony, Linux, Microsoft Server, and Windows environments
• Knowledge of carrier services, interfaces, and telecom circuit troubleshooting
• Working knowledge of Cisco UCS and VMware virtual environments
• Perform routine firmware upgrades, health checks, patch management, and performance monitoring.
• Resolve escalated network incidents, perform packet capture (PCAP) and log analysis, and execute root cause investigations.

Required Education

• Bachelor's degree in Computer Science / Information Systems (or Similar) or equivalent experience
• Active Fortinet certifications (e.g., NSE 4, NSE 7 Enterprise Firewall or SD-WAN, or FCP/FCSS) or equivalent experience
• Cisco CCIE or CCNP (Preferred) or equivalent experience

Skills

• Ability to lift up to 50 pounds
• Ability to travel up to 25% for projects at data centers and branch/field locations
• Proficient in customer knowledge transfer and network topology documentation
• Strong attention to detail in project planning and SD-WAN configuration documentation
• Ability to apply judgment, implement solutions, and resolve conflicts in a multi-tasked environment
• Ability to communicate clearly and concisely, both verbally and in written documentation
• Ability to thrive in a growing, fast-paced environment undergoing active network modernization
• Ability to provide architectural design to new and evolving business requirements.