Python & Network Engineer

Há 20 horas

Porto, Portugal act digital Tempo integral 70 000 € - 100 000 € Contrato
  • Strong experience with Python 3 and Django, preferably Django REST Framework, for building scalable APIs and automation backends.
  • Senior-level experience combining Software Engineering and Enterprise Network Security.
  • Strong experience with REST APIs and API-driven automation.
  • Hands-on experience with Fortigate and FortiOS architectures.
  • Hands-on experience with VMware NSX-T architectures.
  • Experience automating firewall policies, address objects, and security groups.
  • Strong experience with FortiManager APIs, including JSON-RPC and REST.
  • Strong experience with NSX-T Policy APIs.
  • Experience with asynchronous task processing using technologies such as Celery and Redis.
  • Solid understanding of enterprise routing, switching, network zoning, and micro-segmentation.
  • Experience designing and implementing end-to-end network automation workflows.
  • Experience with pre-change validation, syntax validation, conflict detection, rollback mechanisms, and idempotent automation.
  • Strong understanding of API orchestration across network security platforms.
  • Experience writing comprehensive unit and integration tests.
  • Knowledge of security policies, compliance requirements, and secure firewall rule management.
  • Experience with Git and CI/CD pipelines, including GitLab CI or GitHub Actions.
  • Knowledge of Infrastructure as Code (IaC) principles.
  • Strong documentation and knowledge-transfer skills.
  • Ability to work independently at senior consultant level and collaborate with Network Security and NetSecOps teams.

Responsibilities

  • At least 9 years of experience in a similar field;
  • Design and develop end-to-end Python/Django workflows to automate firewall rule requests, validation, approval, and provisioning.
  • Build and optimize self-service firewall automation workflows for production environments.
  • Develop and maintain robust API connectors integrating FortiManager/FortiOS and VMware NSX-T Managers.
  • Automate firewall policies, address objects, security groups, and related network security configurations.
  • Implement pre-change validation mechanisms, including syntax checks and conflict detection.
  • Design safe rollback and recovery mechanisms using idempotent automation to minimize production risk.
  • Implement asynchronous processing for long-running network operations.
  • Develop comprehensive unit and integration tests for the automation platform.
  • Ensure generated firewall rules comply with internal security policies and regulatory/compliance standards.
  • Integrate automation solutions into CI/CD pipelines and follow Infrastructure as Code principles.
  • Troubleshoot and improve automation workflows, API integrations, and network provisioning processes.
  • Document code, API contracts, workflow designs, and operational procedures.
  • Facilitate knowledge transfer to internal NetSecOps teams.
  • Collaborate with Network Security, infrastructure, and software engineering teams to deliver reliable and secure automation solutions.
  • Contribute to the continuous improvement of the self-service firewall platform, with a strong focus on scalability, reliability, security, and operational efficiency.