Department and Project T-Systems customer Toll Collect operates the truck tolling system for highways and federal roads in Germany. Toll Collect is currently transforming into a broader IT service provider within the Federal Ministry of Transport and intends to leverage its tolling data and experience for additional services. As part of this transformation, the IT platform has been migrated to a modern multi-cloud environment. The new private and sovereign cloud platform, including its automated operating environment, Infrastructure as Code (IaC) and customer ordering portal, is operated and maintained by T-Systems through several specialized infrastructure and operations squads. The network team is looking for additional engineers to operate and continuously improve the network environment and to support new customer requirements and projects. The team is responsible for the data-center network and network-security infrastructure. Campus/branch LAN and WLAN as well as central Windows/Linux infrastructure services are operated by dedicated teams. Close collaboration with these teams is required for end-to-end troubleshooting and implementation of changes. Main tasks As a Network & Security Engineer (Fortinet), you will be part of the team operating and continuously improving the network and network-security infrastructure of a highly available private and sovereign cloud platform across two geographically separated data centers. Your responsibilities include: Operate and troubleshoot the data-center network and network-security infrastructure based primarily on Fortinet technologies. Operate and maintain FortiGate firewalls, FortiSwitch infrastructure, FortiWeb WAF, VPN solutions and FortiClient/ZTNA components. Implement and troubleshoot firewall policies, NAT, routing, VLANs, VDOMs and network segmentation. Operate highly available network components and technologies such as FGCP, MC-LAG/LACP and STP/RSTP/MSTP. Analyze incidents and performance issues and perform root-cause analysis across network and security components. Implement customer requirements such as firewall changes, new network segments, routing changes and connectivity to internal and external systems. Monitor availability, performance and security events and continuously improve monitoring and operational processes. Perform lifecycle activities including firmware upgrades, configuration management, backup/recovery and capacity management. Support and improve network automation based on Ansible/AWX. Operate and support network security services such as VPN, ZTNA and related network connectivity services. Contribute to the continuous improvement of the network architecture, operational procedures and security controls in accordance with BSI requirements.