{"id":4227602,"url":"https://alion.io/job/orange-subject-matter-expert-fortinet-sdwan","title":"Subject Matter Expert - Fortinet SDWAN","company":{"id":52882,"name":"Orange","domain":"orange.com","url":"https://alion.io/company/orange-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Phenom","truth_index":{"grade":"A","score":99,"open_postings":170,"ghost_share":0.029,"stale_share":0.012,"repost_share":0.294,"time_to_fill_p50_days":11,"computed_at":"2026-11-14T05:58:10Z"}},"role":"DevOps","role_family":"DevOps","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Mumbai, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Ansible","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"BGP","optional":false},{"name":"FortiGate","optional":false},{"name":"GCP","optional":false},{"name":"Git","optional":false},{"name":"Jenkins","optional":false},{"name":"KVM","optional":false},{"name":"MPLS","optional":false},{"name":"OSPF","optional":false},{"name":"PKI","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"Terraform","optional":false},{"name":"VMWare","optional":false},{"name":"VPN","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-11-13T06:26:35Z","employer_posted_date":null,"last_verified_at":"2026-11-13T06:26:35Z","board_verified":false,"closed_at":null,"days_open":1,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":1},"description":"Role Overview : \n\nResponsible for the end-to-end design, architecture, deployment, migration, integration, optimization and L3 operations of Fortinet SD-WAN and SASE solutions across enterprise environments.\n\nThe SME will act as the technical authority for Fortinet Secure SD-WAN, FortiGate, FortiManager, FortiAnalyzer, FortiSASE/SSE, secure internet access, ZTNA and cloud-delivered security services, working across network, security, cloud and operations teams.\n\nArchitecture & Solution Design : \n\nFortinet SD-WAN : \n\n- Design enterprise Fortinet Secure SD-WAN architectures.\n\n- Design hub-and-spoke, regional hub and hybrid SD-WAN architectures.\n\n- Design underlay/overlay connectivity using : MPLS, Internet, Broadband, DIA, 4G/5G, IPsec.\n\n- Design routing using BGP, OSPF and static routing.\n\n- Design SD-WAN policies based on application and business requirements.\n\n- Define SLA-based path selection using : Latency, jitter, Packet loss, Availability, Bandwidth.\n\n- Design local and centralized internet breakout.\n\n- Design FortiGate HA and site resiliency.\n\nFortinet SASE : \n\n- Design Fortinet SASE architecture integrating SD-WAN with cloud-delivered security.\n\n- Design secure access for : Remote users, Branch users, Mobile users, Contractors.\n\n- Design ZTNA solutions based on user, device, application and security context.\n\n- Design secure web/internet access and cloud security controls.\n\n- Define security policies for web, SaaS and internet traffic.\n\n- Design integration between FortiGate SD-WAN and Fortinet SASE services.\n\n- Develop SASE adoption and migration roadmaps.\n\nDeployment & Implementation : \n\nSD-WAN : \n\n- Lead FortiGate SD-WAN deployments from design through production.\n\n- Configure : SD-WAN zones and members, Performance SLA, SD-WAN rules, IPsec tunnels, Routing, Firewall policies, NAT, Security profiles.\n\n- Deploy and manage FortiGate through FortiManager.\n\n- Develop standardized templates and configuration packages.\n\n- Execute site onboarding and zero-touch deployment where applicable.\n\n- Perform post-deployment validation.\n\nSASE : \n\n- Deploy and configure Fortinet SASE services.\n\n- Onboard users, devices, applications and locations.\n\n- Implement ZTNA policies.\n\n- Configure secure internet/web access.\n\n- Implement security policies and access controls.\n\n- Integrate identity providers and enterprise authentication.\n\n- Integrate endpoint/device posture information where applicable.\n\n- Validate user-to-application and branch-to-cloud connectivity.\n\nL3 Operations & Troubleshooting : \n\n- Provide SME-level troubleshooting for : SD-WAN, IPsec tunnel failures, SLA violations, Incorrect path selection, Application steering issues, Routing problems, BGP/OSPF issues, Packet loss, Latency/jitter, Asymmetric routing, NAT/firewall issues, Internet breakout issues, FortiGate HA, FortiManager synchronization.\n\n- Provide SME-level troubleshooting for : SASE, User authentication issues, ZTNA access failures, Application connectivity, Policy enforcement, Secure web access, Remote-user connectivity, Identity integration, Device posture issues, Performance/latency issues, Cloud security policy issues.\n\n- Perform packet-level troubleshooting using FortiGate diagnostics, logs, packet captures and flow analysis.\n\nTechnical & Functional Skills & Certifications : \n\n- Accredited SD-WAN Professional (AASP), Certified SD-WAN Deployment Professional (ACSDP), Certified SD-WAN Deployment Expert (ACSDX).\n\n- CCNP/CCIE Enterprise.\n\nEducation, Qualifications, and Certifications : \n\n- BE / B. Tech. / B. Sc. in EXTC/ Computer Science / Information Technology.\n\n- Fortinet SD-WAN training/certification.\n\n- Fortinet SASE training /certification.\n\n- CCNP/CCIE Enterprise or Security.\n\n- Equivalent SD-WAN/SASE certifications.\n\nExperience : \n\n- 8 - 12 years in enterprise networking/security.\n\n- 5+ years in SD-WAN/network security, with strong hands-on Fortinet experience.\n\n- Experience with large-scale enterprise SD-WAN/SASE deployments, multi-region environments, migrations and managed services is preferred.\n\nExpertise : \n\n- Strong hands-on experience with Fortinet SDWAN-SASE.\n\n- Strong understanding of : SD-WAN overlays, Underlay routing, Application steering, QoS, WAN optimisation, Segmentation, HA deployments, Service insertion.\n\nRouting & Switching : \n\n- Advanced knowledge of : BGP, OSPF, EIGRP, VRF, VLANs, STP, Multicast, NAT, Policy-based routing.\n\n- Strong understanding of enterprise WAN and LAN architectures.\n\nSecurity Knowledge : \n\n- Understanding of : IPsec VPN, PKI/certificates, SASE/SSE concepts, Firewall integrations, Secure segmentation, Zero Trust concepts.\n\nCloud & Virtualization : \n\n- Experience with : AWS, Azure, GCP, VMware ESXi, KVM, Virtual EdgeConnect deployments.\n\nAutomation & Tools : \n\n- Exposure to : REST APIs, Python scripting, Ansible, Terraform, Git/Jenkins pipelines. Knowledge of monitoring and observability tools is preferred.\n\n- Experience in large enterprise or managed services environments.\n\n- Experience handling multi-site/global deployments.\n\n- Exposure to migration and transformation projects.\n\nSkills\nNetwork Component, FortiManager, CCIE, CCNP, Network Security, SDWAN, Fortigate Firewall, Network Architecture, Routing & Switching, IT Security Strategy, Solution Design","description_format":"text","description_chars":5267,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Broadband","Telecom Infrastructure","Managed Security","Systems Integrators"],"lifecycle":[{"event":"open","at":"2026-11-13T08:29:55Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":11,"reasons":["seen:0","velocity","win:early","comp:brand"],"computed_at":"2026-11-14T05:58:10Z"},"pay":null,"html_url":"https://alion.io/job/orange-subject-matter-expert-fortinet-sdwan","json_url":"https://alion.io/job/orange-subject-matter-expert-fortinet-sdwan.json","meta":{"generated_at":"2026-11-14T16:50:57Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":19245,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":52882},"rest":"https://alion.io/mcp/rest/get_company?id=52882"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Forange-subject-matter-expert-fortinet-sdwan"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Forange-subject-matter-expert-fortinet-sdwan"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Forange-subject-matter-expert-fortinet-sdwan"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/orange-subject-matter-expert-fortinet-sdwan\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Forange-subject-matter-expert-fortinet-sdwan"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4227602}},{"tool":"search_jobs","arguments":{"company":"orange.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4227602},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}