Job Description This is a remote position.
Own the corporate firewall, data center switching and KVM virtualization layer across two redundant data center racks.
You will be the senior escalation point (Tier 3) for our full-time infrastructure engineer.
Your first major deliverable is completing the migration of a FortiGate HA pair from FG-201E to FG-121G.
The infrastructure also runs telecom core workloads (SBC, DRA/STP, PGW, IMS).
Separate specialists support those applications.
Your job is to keep the network, firewall and virtualization layers under them stable.
Responsibilities Complete the FortiGate HA migration from FG-201E to FG-121G: config conversion, test plan, cutover and rollback plan.
Own the firewall going forward: policy changes, VPNs, security profiles, FortiOS upgrades and periodic rule review.
Own the Cisco Nexus switching fabric in both racks: vPC health, VLAN and port changes, NX-OS upgrades and config backups.
Act as senior escalation (Tier 3) on network, firewall and KVM incidents.
Maintain KVM host standards: networking, storage, backups and capacity across Dell and Lenovo servers.
Keep network diagrams, IP plans and runbooks current.
Coordinate with telecom application specialists when network or firewall changes affect their services.
Join scheduled maintenance windows and a defined on-call rotation for critical outages.
Requirements Own the corporate firewall, data center switching and KVM virtualization layer across two redundant data center racks.
You will be the senior escalation point (Tier 3) for our full-time infrastructure engineer.
Your first major deliverable is completing the migration of a FortiGate HA pair from FG-201E to FG-121G.
The infrastructure also runs telecom core workloads (SBC, DRA/STP, PGW, IMS).
Separate specialists support those applications.
Your job is to keep the network, firewall and virtualization layers under them stable.
Responsibilities Complete the FortiGate HA migration from FG-201E to FG-121G: config conversion, test plan, cutover and rollback plan.
Own the firewall going forward: policy changes, VPNs, security profiles, FortiOS upgrades and periodic rule review.




Own the Cisco Nexus switching fabric in both racks: vPC health, VLAN and port changes, NX-OS upgrades and config backups.
Act as senior escalation (Tier 3) on network, firewall and KVM incidents.
Maintain KVM host standards: networking, storage, backups and capacity across Dell and Lenovo servers.
Keep network diagrams, IP plans and runbooks current.
Coordinate with telecom application specialists when network or firewall changes affect their services.
Join scheduled maintenance windows and a defined on-call rotation for critical outages.
Profile We're Looking For Minimum 7 years in network and infrastructure engineering.
Hands-on production experience in all three areas below is required.
Course-only or lab-only exposure does not qualify.
1. Fortinet FortiGate (3+ years in production) FortiGate HA clusters (FGCP active-passive), including heartbeat links and session sync Hardware migration between FortiGate models: config conversion and low-downtime cutover FortiOS upgrades and firmware path planning Policies, NAT/VIPs, IPsec site-to-site VPN, SSL-VPN or ZTNA, VLAN interfaces, LACP Security profiles (IPS, application control, web filtering) and log analysis
2. Cisco Nexus **** / NX-OS (3+ years) vPC design and troubleshooting, including peer-link and keepalive Top-of-rack and access-layer design: VLANs, trunks, LACP port-channels, Spanning Tree 10/25/100G optics, breakout cables and server uplink design Layer 3: SVIs, HSRP/VRRP, static routing, OSPF or BGP NX-OS upgrades, config backup and change management
3. KVM virtualization on Linux (3+ years in production) libvirt, virsh, virt-manager or Cockpit: creating, cloning and resizing VMs Linux host networking: bridges,



bonding and VLAN tagging toward Nexus switches Storage pools on local disk and SAN (iSCSI or FC), LVM and qcow2 VM backups, snapshots, live migration and capacity planning Out-of-band management: Dell iDRAC, Lenovo XClarity/IMM General Fluent English, written and spoken Clear documentation: network diagrams, runbooks, change records Nice to Have FortiManager and FortiAnalyzer IBM Power9 servers, HMC, VIOS or AIX basics Lenovo/IBM Storwize-class SAN storage, tape backup Network automation with Ansible or Python (NX-OS, FortiOS) Monitoring: Zabbix, PRTG, LibreNMS or Grafana Exposure to telecom/carrier networks (SIP, Diameter, SS7/SIGTRAN, GTP) Certifications: Fortinet FCP Network Security (formerly NSE 4) or FCSS; CCNP Data Center or Enterprise; RHCSA/RHCE Benefits 100% remote work from LATAM, with occasional on-site data center visits planned in advance.
Competitive pay in USD , based on experience, as an independent contractor.
Senior ownership of a real production environment: firewall, data center fabric and virtualization.
High-impact first project: lead the FortiGate HA migration from FG-201E to FG-121G.
Telecom core exposure: work alongside SBC, DRA/STP, PGW and IMS specialists.
Long-term engagement with a stable client, with room to grow the scope.
Support from Atlantic Talent Services throughout the process: clear communication, onboarding and a dedicated point of contact.
Requirements Experience 3–5+ years of IT data center operations experience.
English – C1 level or higher (mandatory) Proven experience with Layer 2/3 networking.
Hands-on experience with Cisco **** routers and FortiGate routers.
Proficiency with Cisco switches.
Strong experience with KVM, CentOS, and Ubuntu.
Familiarity with Lenovo server hardware.
Skills Strong analytical and problem‐solving skills.
Excellent communication and interpersonal abilities.
Able to work independently and collaboratively.
Strong organizational skills and attention to detail.
Preferred Certifications Cisco CCNA or higher Fortinet NSE Certification KVM Certified Professional (VCP) Red Hat Certified System Administrator (RHCSA) or equivalent

📌 Network & Infrastructure Engineer (Bogotá)
🏢 Atlantic Talent Services
📍 Bogotá