/
JOB DESCRIPTIONS
Responsibilities
We are seeking a Senior FortiNAC / Network Access Control Engineer to lead the technical implementation of Fortinet FortiNAC across a complex, multisite healthcare network.
This is a project-based contract role. You will independently own the FortiNAC implementation while working alongside Integralty engineers and the customer’s infrastructure and security teams. The goal is effective network access control without disrupting clinical operations.
This is not a firewall administrator or general Fortinet role. We need an engineer who has designed and deployed FortiNAC in production and understands how it fits into live network, authentication, and endpoint environments.
Assess the existing environment, validate prerequisites, and develop the architecture and implementation approach.
Deploy and configure FortiNAC, including high availability, in a multisite environment.
Integrate FortiNAC with mixed-vendor wired and wireless infrastructure (Fortinet, Cisco, Meraki).
Configure device discovery, profiling, classification, registration, and policy enforcement.
Integrate with Active Directory, LDAP, and RADIUS, and design 802.1X, MAB, and CoA workflows. Support migration from Cisco ISE and Microsoft NPS.
Design switchport authorization controls that detect and restrict unauthorized devices, including devices moved between ports or locations.
Build posture, quarantine, remediation, and restricted-access policies, including justified exceptions for devices that cannot support agents or 802.1X.
Evaluate and, where feasible, implement MDM integration to support BYOD authorization, including SOTI MobiControl. Determine supported integration methods and limitations rather than assuming a native connector.
Run phased rollouts: visibility and audit-only first, then pilots and controlled enforcement.
Troubleshoot authentication, visibility, and enforcement issues, then document the work and hand off to the customer’s IT team.
Minimum Qualifications
7+ years of hands-on enterprise networking, network security, or infrastructure engineering experience.
Hands-on experience deploying and configuring FortiNAC in production, as the technical lead or independent implementer. General Fortinet firewall experience does not substitute.
Fortinet NSE 7 certification.
Strong working knowledge of FortiNAC discovery, profiling, registration, policy development, enforcement, and troubleshooting.
Advanced knowledge of RADIUS, 802.1X, EAP-TLS, MAB, PKI, LDAP, and Active Directory.
Practical experience with enterprise switching, wireless, VLANs, routing, ACLs, DHCP, DNS, and segmentation.
Experience integrating NAC across mixed-vendor networks in production environments where availability is business-critical.
Ability to independently diagnose authentication failures, classification problems, and enforcement behavior.
Strong documentation and communication skills, with the ability to work directly with customer technical stakeholders.
Preferred Qualifications
Experience with FortiNAC-F and current Fortinet NAC architectures.
NAC experience in hospitals, health systems, or other regulated environments.
SOTI MobiControl integration experience, or NAC integration with Intune or other MDM/UEM platforms.
Prior experience with Cisco ISE, Microsoft NPS, Aruba ClearPass, or similar NAC/AAA platforms.
Cisco CCNP, CCIE, or comparable networking certifications.
Experience with FortiAnalyzer and centralized logging.
Experience designing switchport authorization and device-movement controls.
Experience with distributed networks spanning multiple locations and equipment vendors.
Experience designing authentication exceptions for medical, IoT, and other devices that cannot support 802.1X or endpoint agents.
Familiarity with a specific MDM vendor matters less than demonstrated MDM/NAC integration experience.
/
APPLICATION