Senior Network Engineer

Position Summary

IPRO MSP is adding a senior network engineer to our team to build, manage, andmaintainnetwork and security infrastructure for our managed services clients and colocation datacenters. The environment is Fortinet: FortiGate firewalls with HA pairs and SD-WAN,FortiSwitch, andFortiAP, with FortiSASE,FortiEMS, and ZTNA expanding. The position is also our technical point of contact with a third-party SOC.

This position handles most moves, adds, and changes, andbuilds outthe programs behind them: centralizedfirewallmanagement, monitoring, lifecycle policy, and documentation. The MSP Manager is a network engineer by background andworksthe substantial projects alongside this position; day-to-day decisions sit with the engineer. Staff engineers and admins cover routine break/fix. This is a hands-on engineering position.

More about IPRO at teamipro.com.

First 90 Days

A plan and visible movement are expected; completion is not:

• Audit Fortinet deployments across clients andcolos
• Begin a phasedFortiManagerrollout
• ExpandAuvikcoverage, alerting, and dashboards
• Draft the network equipment lifecycle policy
• Map ISP circuit monitoring and begin SOC alert tuning

Responsibilities

Network and security operations:

• FortiGate firewalls across clients andcolos: configuration, policy, HA pairs, SD-WAN, IPS/IDS
• FortiSwitchandFortiAP; VPN, segmentation, and wireless
• FortiSASE, ZTNA, andFortiEMSadministration where deployed
• Escalated network and security issues; project work with TAMs and sales engineers

Colocation datacenters:

• Higher-end Fortinet platforms under redundancy and formal change management; maintenance windows planned and executed with rollback

SOC partnership:

• Technical liaison to a Fortinet-specialized SOC; implementations on our side (log forwarding, onboarding) and ongoing alert tuning
• Investigation and remediation of findings; decision authority on escalated events

Programs and build-out:

• New client onboarding: review existing configurations (often non-Fortinet), assess, and provision replacement gear
• FortiManagerdeployment;Auvikexpansion with ticketing integration
• Lifecycle policy: firmware, config backups, patch cadence, change management
• ISP circuit monitoring, carrier escalation, and uptime reporting
• Documentation in IT Glue; repeatable standards

Environment

Core: FortiGate,FortiManager,FortiAnalyzer,FortiSwitch,FortiAP, SD-WAN. Supporting systems:Auvik,NinjaRMM, IT Glue, Salesforce. FortiSASE,FortiEMS, and ZTNA are expanding. Client onboarding regularly involves other vendors' equipment; a senior engineer is expected to assess, support, and replace whatever is in the rack.

Requirements

Titles vary from company to company, sodemonstratedwork counts for more than what the last position was called. Senior engineers, engineers, and senior administrators who have designed, built, and fixed production networks without a script are all worth a conversation. Experience that mostly consists of following procedures someone else wrote is not a fit for this job.

• Hands-on FortiGate across multiple production environments, including HA pairs, where the design and changes were yours
• Fundamentals solid enough to troubleshoot from first principles: TCP/IP, routing (BGP/OSPF), switching/VLANs, VPN, DNS, DHCP
• A record of writing network or security standards and policies, not only working within them
• Centralizedfirewallmanagement;FortiManagerstrongly preferred
• Deployment or substantial tuning of a network monitoring platform
• Experience working with a SOC, MSSP, or security monitoring partner
• Datacenter experience under formal change management

Certifications:NSE, FCP, or FCSS is a plus, and the companypays formore of them. Production work counts for more than any certificate.

Preferred:

• MSP experience
• FortiSASE, ZTNA,FortiEMS, or SD-WAN deployments
• Auvik; ISP carrier management; Azure networking

Schedule and Expectations

• Monday–Friday, 8:00 AM–5:00 PM Central, based in Van Alstyne, TX; most weeks hold to it
• Time is logged in tickets, as at any MSP; the job is measured on work completed, not minutes at a desk
• Maintenance windows and occasional incidents happen after hours; after-hours time is taken back as comp time
• No standing on-call rotation; after-hours security escalations are rare, and handling them is part of the job
• Hybrid is set by the work: staging and buildouts require being on site with the gear racking, cabling, console access; monitoring, tuning, and administrative work can be done remotely
• Occasional client site visits andcolotrips

Compensation and Benefits

• $85,000–$120,000/year, set bydemonstratedlevel
• Health, dental, and vision insurance
• 401(k) with 4% company match
• 13 daysof PTO per year (prorated in year one), plus oneadditionalday per year of service; PTO covers both vacation and sick time. Paid holidays in addition
• Comp time for after-hours and overtime work
• Company-paid training and certifications where there is a business case

IPRO is an equal opportunity employer.

IPRO is a Dallas-based Managed Services Provider (MSP) and VoIP cloud hosting company founded in 2004. Focused on flexible hosted solutions for local small and medium-sized businesses, IPRO has grown into a trusted IT partner for national and global enterprises. The company specializes in delivering proactive, customized IT solutions that streamline operations, enhance security, and support digital transformation.

IPRO’s services include managed IT, cloud infrastructure, VoIP systems, and hybrid workspace solutions. Their approach emphasizes operational efficiency, cost-effective scalability, and hands-on supportallowing clients to focus on their core business while IPRO handles the technology. With a strong leadership team and a commitment to tailored service, IPRO positions itself as a strategic partner in long-term business growth