Network Security Engineer

Requirements

• Between 3 and 6 years of experience in a similar field;
• Senior-level experience combining Software Engineering and Enterprise Network Security .
• Advanced Python 3 development experience.
• Strong experience with Django or Django REST Framework for building scalable APIs and automation backends.
• Strong experience with REST APIs and API-driven automation.
• Hands-on experience with Fortinet/Fortigate and FortiOS architectures.
• Hands-on experience with VMware NSX-T architectures.
• Experience automating firewall policies, address objects, and security groups .
• Strong experience with FortiManager APIs , including JSON-RPC and REST .
• Strong experience with NSX-T Policy API .
• Experience with asynchronous task queues such as Celery and Redis for long-running network operations.
• Experience with Git and CI/CD pipelines , including GitLab CI or GitHub Actions.
• Knowledge of Infrastructure as Code (IaC) principles.
• Strong understanding of enterprise routing, switching, network zoning, and micro-segmentation .
• Experience with network security automation and firewall provisioning .
• Knowledge of pre-change validation, syntax validation, conflict detection, dry-run mechanisms, rollback, and idempotent automation .
• Experience writing unit and integration tests for automation codebases.
• Strong understanding of security policies and compliance requirements for firewall rule management.
• Strong documentation and knowledge-transfer skills .
• Ability to work effectively within Network Security Development and NetSecOps teams .

Responsibilities

• Design and develop end-to-end Python/Django workflows to automate firewall rule requests, validation, approval, and provisioning.
• Build and optimize self-service firewall automation workflows for Fortigate and NSX-T environments.
• Develop and maintain robust API connectors to orchestrate configuration changes across FortiManager/FortiOS and NSX-T Managers.
• Automate firewall policies, address objects, security groups , and related network security configurations.
• Implement pre-change validation mechanisms , including syntax validation and conflict detection.
• Implement dry-run and safe rollback mechanisms using idempotent automation to prevent disruption to production traffic.
• Design and implement failure recovery mechanisms for network automation workflows.
• Develop asynchronous processing capabilities for long-running network operations.
• Write and maintain comprehensive unit and integration tests for the automation platform.
• Ensure all generated firewall rules comply with internal security policies and security/compliance standards .
• Integrate automation solutions into CI/CD pipelines and apply Infrastructure as Code principles where appropriate.
• Troubleshoot and continuously improve automation workflows, API integrations, and network provisioning processes .
• Document code, API contracts, workflow designs, and operational procedures .
• Provide knowledge transfer and ensure a seamless handover to internal NetSecOps teams .
• Collaborate with Software Engineering, Network Security, Infrastructure, and NetSecOps teams .
• Contribute to the scalability, reliability, security, and operational efficiency of the self-service firewall platform.