10/05/2026 updated
100 % available
Senior Network Engineer | SASE & SD-WAN Architecture and Migration | Cato Networks & Fortinet NSE 7
Prague, Czech Republic
Only remote
Diploma in Radio EngineeringAbout me
Network security engineer specialising in SASE, SD-WAN and NGFW, with hands-on experience inside two leading vendors: Cato Networks (Tier 2 advanced support) and Fortinet (TAC).
Networking HardwareNetwork SecurityNetwork ArchitectureNetwork EngineeringNetwork AdministrationCloud ServicesZero Trust Network AccessNetwork Access ControlCloud IntegrationNetwork Optimization
SASE & SD-WAN Architecture
Expertise in Cato Networks SASE & SSE, Fortinet secure SD-WAN, SD-WAN design, and vendor migrations from Palo Alto, Fortinet, and Cisco to Cato. Support of high-level customer migrations including post-migration configuration and tuning.
Network Security
Deep knowledge of FortiGate NGFW across all series, SSL & IPsec VPN, HA, security profiles, proxy, Cisco Firepower, and Cisco ISE/AAA. Troubleshooting of FortiGate deployments covering SD-WAN, security profiles, and LAN/WAN configurations.
Zero Trust & Data Protection
Rollout of ZTNA/SDP clients, CASB, DLP and inline data protection, data-privacy policies, and AI/GenAI access policies. Design of AI/GenAI security access policies and restrictions governing employee use of AI applications.
Cloud Integration
Integration of network infrastructure into AWS and Azure, including deployment of virtual appliances (Cato vSocket) in Azure VNets and AWS VPCs, and IPsec connectivity to cloud environments.
Networking
Solid background in LAN/WAN, OSPF, VLANs, Cisco R&S, Cisco ACI, WLC/Wi-Fi, F5 LTM, and DNS/DHCP using Infoblox.
Troubleshooting & Operations
Troubleshooting and fault analysis, root-cause analysis, packet capture and log analysis using Splunk, Kibana, Grafana, and Redash. ITIL 4 incident and change management with handling of 5-10 P1 incidents per month under ITIL 4 SLAs.
ITIL Incident & Change Management
Ownership of P1 incidents under ITIL 4 SLAs with 15-minute first response, maintaining CSAT close to 100%. Delivery of change and incident management within ITIL processes.
Firewall & Security Policy Management
Implementation of firewall rules on FortiGate and Cisco Firepower, resolution of LAN and security incidents across multi-vendor enterprise environments including Cisco R&S, ISE, ACI, WLC, and F5 LTM.
Team Leadership & Mentoring
Training and mentoring of a Tier 1 team of 8 engineers, with 2 promoted to Tier 2 within 1.5 years. Partnering with R&D and QA to resolve issues, escalate product defects, and feed field insight into the product.
Expertise in Cato Networks SASE & SSE, Fortinet secure SD-WAN, SD-WAN design, and vendor migrations from Palo Alto, Fortinet, and Cisco to Cato. Support of high-level customer migrations including post-migration configuration and tuning.
Network Security
Deep knowledge of FortiGate NGFW across all series, SSL & IPsec VPN, HA, security profiles, proxy, Cisco Firepower, and Cisco ISE/AAA. Troubleshooting of FortiGate deployments covering SD-WAN, security profiles, and LAN/WAN configurations.
Zero Trust & Data Protection
Rollout of ZTNA/SDP clients, CASB, DLP and inline data protection, data-privacy policies, and AI/GenAI access policies. Design of AI/GenAI security access policies and restrictions governing employee use of AI applications.
Cloud Integration
Integration of network infrastructure into AWS and Azure, including deployment of virtual appliances (Cato vSocket) in Azure VNets and AWS VPCs, and IPsec connectivity to cloud environments.
Networking
Solid background in LAN/WAN, OSPF, VLANs, Cisco R&S, Cisco ACI, WLC/Wi-Fi, F5 LTM, and DNS/DHCP using Infoblox.
Troubleshooting & Operations
Troubleshooting and fault analysis, root-cause analysis, packet capture and log analysis using Splunk, Kibana, Grafana, and Redash. ITIL 4 incident and change management with handling of 5-10 P1 incidents per month under ITIL 4 SLAs.
ITIL Incident & Change Management
Ownership of P1 incidents under ITIL 4 SLAs with 15-minute first response, maintaining CSAT close to 100%. Delivery of change and incident management within ITIL processes.
Firewall & Security Policy Management
Implementation of firewall rules on FortiGate and Cisco Firepower, resolution of LAN and security incidents across multi-vendor enterprise environments including Cisco R&S, ISE, ACI, WLC, and F5 LTM.
Team Leadership & Mentoring
Training and mentoring of a Tier 1 team of 8 engineers, with 2 promoted to Tier 2 within 1.5 years. Partnering with R&D and QA to resolve issues, escalate product defects, and feed field insight into the product.
Experience
Professional experience5 - 10 years
Freelancer since2026
Languages
EnglishFluentRussianNative speakerCzechGoodUkrainianNative speaker
Project history
Supported high-level customer migrations from Palo Alto, Fortinet and Cisco to Cato SASE and delivered post-migration configuration and tuning. Built CASB, inline DLP and data-privacy policies. Designed AI/GenAI security access policies. Deployed and maintained Cato vSockets on AWS and Azure. Rolled out Cato SDP (ZTNA) clients to end users. Resolved 4-5 complex SASE and SD-WAN cases per day and owned 5-10 P1 incidents per month under ITIL 4 SLAs. Trained and mentored a Tier 1 team of 8 engineers.
Troubleshot FortiGate deployments across all series including SSL/IPsec VPN, SD-WAN, security profiles, proxy, HA and LAN/WAN, handling 4-5 cases per day and 5-10 P1 incidents per month with CSAT close to 100%. Performed requirements analysis of customer network and security implementations and delivered best-practice change recommendations. Achieved Fortinet NSE 4, NSE 5 (FortiClient EMS) and NSE 7 (Network Security Architect).
Implemented firewall rules on FortiGate and Cisco Firepower and resolved LAN and security incidents across multi-vendor enterprise environments (Cisco R&S, ISE, ACI, WLC, F5 LTM). Troubleshot AAA, DHCP, DNS, OSPF and VLAN issues; owned DNS changes in Infoblox and analysed logs in Splunk. Delivered change and incident management within ITIL processes.