Network Security Engineer

ABOUT US:
Kestra Holdings offers industry-leading wealth management platforms for independent wealth management professionals nationwide. With an innovative culture that celebrates independence, the company seeks to redefine the future of the advisory industry through superior service, cutting-edge technology, and preeminent resources that every financial professional needs to succeed in the market now and in the years to come.
Kestra Holdings companies collectively oversee $123 billion in assets under administration (AUA) and support more than 2,400+ independent financial professionals across the country in delivering comprehensive securities, trust, and investment advisory services to their clients. Located in the “Silicon Hills” of Austin, Texas, Kestra Holdings offers an experience as unique as the city in which it operates.

POSITION SUMMARY:
Kestra Holdings is looking for a seasoned Network Security Engineer with a strong command of the Fortinet security stack and at least 5 years of relevant experience. This role requires hands-on expertise in designing, implementing, and maintaining security infrastructure built on Fortinet technologies, including FortiGate, FortiManager, FortiAnalyzer, FortiMonitor, and FortiClient EMS.
KEY RESPONSIBILITIES:
• Design, implement, and manage secure network architectures using the full Fortinet security stack.
• Configure and maintain FortiGate firewalls, including high availability, VPNs (IPSec/SSL), and UTM features.
• Deploy and manage centralized security operations via FortiManager and FortiAnalyzer.
• Monitor, analyze, and respond to security threats, incidents, and anomalies.
• Perform regular risk assessments and compliance audits.
• Maintain documentation for configurations, processes, and best practices.
• Provide L3 technical support and collaborate with cross-functional teams.
• After hours and weekend support as needed.
REQUIRED QUALIFICATIONS:
• Minimum 5 years of experience in network security engineering roles.
• Deep expertise in the Fortinet product suite, including FortiGate, FortiManager, FortiAnalyzer, FortiClient EMS.
• Fortinet NSE 4 certification or higher (NSE 5-7 preferred).
• Strong knowledge of network protocols, firewalls, IDS/IPS, and VPNs.
• Experience with segmentation, secure remote access, and advanced threat protection.
• Solid understanding of network architecture, routing (BGP, OSPF), and switching.
• Excellent troubleshooting and analytical skills.
PREFERRED QUALIFICATIONS:
• Experience integrating Fortinet with third-party platforms (e.g., Azure AD, OKTA).
• Familiarity with scripting or automation (Python, Ansible).
• Exposure to public cloud environments (Azure, AWS) and cloud security practices.
• Prior experience in regulated industries (finance, healthcare, etc.) is a plus.

INTERNAL APPLICANT POLICY:
Internal applicants must be in good standing and have a minimum of 1 year of service with Kestra. Internal applicants must also have a minimum of 1 year service in current role unless approved by EVP.

BENEFITS:
Full health, vision, dental. 401(k) plans along with a host of voluntary plans such as car insurance, legal services and more.
DISCLOSURE
By applying to a job at Kestra Financial, Inc., you are agreeing to the following statements:
• You acknowledge that if hired, Kestra Financial, Inc. may, obtain and use background information concerning your credit, character, general reputation, personal characteristics, work habits, performance and experience for evaluation for your potential employment.
• It is the policy of Kestra Financial to ensure equal employment opportunity without discrimination or harassment on the basis of race, color, religion, sex, sexual orientation, gender, identity or expression, age, disability, marital status, citizenship, national origin, genetic information, or any other characteristic protected by law. Kestra Financial prohibits any such discrimination or harassment.

KESTRA VALUES:

Our Mission is Powering Financial Independence, enabling the growth and success of investing clients and the advisors who serve them. We do that by living our values: SERVE, MAKE IT HAPPEN, and ONE TEAM.