Python & Network Engineer

- Strong experience with Python 3 and Django, preferably Django REST Framework, for building scalable APIs and automation backends.

- Senior-level experience combining Software Engineering and Enterprise Network Security.

- Strong experience with REST APIs and API-driven automation.

- Hands-on experience with Fortigate and FortiOS architectures.

- Hands-on experience with VMware NSX-T architectures.

- Experience automating firewall policies, address objects, and security groups.

- Strong experience with FortiManager APIs, including JSON-RPC and REST.

- Strong experience with NSX-T Policy APIs.

- Experience with asynchronous task processing using technologies such as Celery and Redis.

- Solid understanding of enterprise routing, switching, network zoning, and micro-segmentation.

- Experience designing and implementing end-to-end network automation workflows.

- Experience with pre-change validation, syntax validation, conflict detection, rollback mechanisms, and idempotent automation.

- Strong understanding of API orchestration across network security platforms.

- Experience writing comprehensive unit and integration tests.

- Knowledge of security policies, compliance requirements, and secure firewall rule management.

- Experience with Git and CI/CD pipelines, including GitLab CI or GitHub Actions.

- Knowledge of Infrastructure as Code (IaC) principles.

- Strong documentation and knowledge-transfer skills.

- Ability to work independently at senior consultant level and collaborate with Network Security and NetSecOps teams.

Responsibilities

- At least 9 years of experience in a similar field;

- Design and develop end-to-end Python/Django workflows to automate firewall rule requests, validation, approval, and provisioning.

- Build and optimize self-service firewall automation workflows for production environments.

- Develop and maintain robust API connectors integrating FortiManager/FortiOS and VMware NSX-T Managers.

- Automate firewall policies, address objects, security groups, and related network security configurations.

- Implement pre-change validation mechanisms, including syntax checks and conflict detection.

- Design safe rollback and recovery mechanisms using idempotent automation to minimize production risk.

- Implement asynchronous processing for long-running network operations.

- Develop comprehensive unit and integration tests for the automation platform.

- Ensure generated firewall rules comply with internal security policies and regulatory/compliance standards.

- Integrate automation solutions into CI/CD pipelines and follow Infrastructure as Code principles.

- Troubleshoot and improve automation workflows, API integrations, and network provisioning processes.

- Document code, API contracts, workflow designs, and operational procedures.

- Facilitate knowledge transfer to internal NetSecOps teams.

- Collaborate with Network Security, infrastructure, and software engineering teams to deliver reliable and secure automation solutions.

- Contribute to the continuous improvement of the self-service firewall platform, with a strong focus on scalability, reliability, security, and operational efficiency.

#J-18808-Ljbffr