Network & Security Operations Engineer (Fortinet)

About the role

Dalil Tech, an AI and IT company, is looking for a Network & Security Operations Engineer to join its team in Rabat, Morocco. The role is the primary Day 2 owner of the Fortinet security fabric protecting the platform: maintaining service continuity, responding to security events and network incidents, managing configuration changes through change control, and keeping logging and audit trails operational, which is compliance-critical for this government platform. The engineer works alongside the Infrastructure & Platform Operations Engineer.

Key responsibilities

• Monitor FortiAnalyzer dashboards and alert feeds, triage WAF alerts from FortiWeb, and monitor FortiGate HA pairs and FortiSwitch alerts
• Own the first-response runbook for network and security incidents, documenting, containing and escalating within SLA thresholds
• Process firewall rule change requests through the change control board, implement them on FortiManager and FortiGate, and manage VLAN and port changes on FortiSwitch
• Maintain the FortiPAM user roster, enforce least-privilege RBAC, and produce monthly session audit reports
• Apply firmware updates, renew SSL/TLS certificates, and validate daily that logs flow into FortiAnalyzer
• Generate access, session and policy-change audit reports, conduct quarterly firewall rule reviews, and support external security assessments and audits
• Keep network topology diagrams, VLAN registers and IP plans accurate, and improve runbooks and alert tuning

Required profile

• NSE 5 minimum, NSE 7 or FCSS preferred; certificate copy required at interview
• Experience operating network and security infrastructure in a government, critical infrastructure or regulated environment
• Familiarity with PAM platforms and privilege account lifecycle
• On-site availability in Morocco on a permanent or long-term basis
• English, French or Arabic is highly valued

Required skills

• FortiGate operations in production: policy management, rule review, HA monitoring, firmware upgrades
• FortiManager operations: config push, device monitoring, RBAC, audit trail review
• FortiAnalyzer or equivalent SIEM: log ingestion monitoring, event investigation, reporting
• VLAN and switching operations, including trunk management and troubleshooting
• Good to have: FortiWeb, FortiPAM, FortiADC, SSL certificate management, and knowledge of API/PNR data classification