Python & Network Engineer

Requirements

• Strong experience with Python 3 and Django , preferably Django REST Framework, for building scalable APIs and automation backends.
• Senior-level experience combining Software Engineering and Enterprise Network Security.
• Strong experience with REST APIs and API-driven automation.
• Hands-on experience with Fortigate and FortiOS architectures.
• Hands-on experience with VMware NSX-T architectures .
• Experience automating firewall policies, address objects, and security groups.
• Strong experience with FortiManager APIs, including JSON-RPC and REST.
• Strong experience with NSX-T Policy APIs.
• Experience with asynchronous task processing using technologies such as Celery and Redis.
• Solid understanding of enterprise routing, switching, network zoning, and micro-segmentation.
• Experience designing and implementing end-to-end network automation workflows.
• Experience with pre-change validation, syntax validation, conflict detection, rollback mechanisms, and idempotent automation.
• Strong understanding of API orchestration across network security platforms.
• Experience writing comprehensive unit and integration tests.
• Knowledge of security policies, compliance requirements, and secure firewall rule management.
• Experience with Git and CI/CD pipelines, including GitLab CI or GitHub Actions.
• Knowledge of Infrastructure as Code (IaC) principles.
• Strong documentation and knowledge-transfer skills.
• Ability to work independently at senior consultant level and collaborate with Network Security and NetSecOps teams.

Responsibilities

• At least 9 years of experience in a similar field;
• Design and develop end-to-end Python/Django workflows to automate firewall rule requests, validation, approval, and provisioning.
• Build and optimize self-service firewall automation workflows for production environments.
• Develop and maintain robust API connectors integrating FortiManager/FortiOS and VMware NSX-T Managers.
• Automate firewall policies, address objects, security groups, and related network security configurations.
• Implement pre-change validation mechanisms, including syntax checks and conflict detection.
• Design safe rollback and recovery mechanisms using idempotent automation to minimize production risk.
• Implement asynchronous processing for long-running network operations.
• Develop comprehensive unit and integration tests for the automation platform.
• Ensure generated firewall rules comply with internal security policies and regulatory/compliance standards.
• Integrate automation solutions into CI/CD pipelines and follow Infrastructure as Code principles.
• Troubleshoot and improve automation workflows, API integrations, and network provisioning processes.
• Document code, API contracts, workflow designs, and operational procedures.
• Facilitate knowledge transfer to internal NetSecOps teams.
• Collaborate with Network Security, infrastructure, and software engineering teams to deliver reliable and secure automation solutions.
• Contribute to the continuous improvement of the self-service firewall platform, with a strong focus on scalability, reliability, security, and operational efficiency.

2x week Porto