Network Security Engineer

- Between 3 and 6 years of experience in a similar field;

- Senior-level experience combining Software Engineering and Enterprise Network Security.

- Advanced Python 3 development experience.

- Strong experience with Django or Django REST Framework for building scalable APIs and automation backends.

- Strong experience with REST APIs and API-driven automation.

- Hands-on experience with Fortinet/Fortigate and FortiOS architectures.

- Hands-on experience with VMware NSX-T architectures.

- Experience automating firewall policies, address objects, and security groups.

- Strong experience with FortiManager APIs, including JSON-RPC and REST.

- Strong experience with NSX-T Policy API.

- Experience with asynchronous task queues such as Celery and Redis for long-running network operations.

- Experience with Git and CI/CD pipelines, including GitLab CI or GitHub Actions.

- Knowledge of Infrastructure as Code (IaC) principles.

- Strong understanding of enterprise routing, switching, network zoning, and micro-segmentation.

- Experience with network security automation and firewall provisioning.

- Knowledge of pre-change validation, syntax validation, conflict detection, dry-run mechanisms, rollback, and idempotent automation.

- Experience writing unit and integration tests for automation codebases.

- Strong understanding of security policies and compliance requirements for firewall rule management.

- Strong documentation and knowledge-transfer skills.

- Ability to work effectively within Network Security Development and NetSecOps teams.

Responsibilities

- Design and develop end-to-end Python/Django workflows to automate firewall rule requests, validation, approval, and provisioning.

- Build and optimize self-service firewall automation workflows for Fortigate and NSX-T environments.

- Develop and maintain robust API connectors to orchestrate configuration changes across FortiManager/FortiOS and NSX-T Managers.

- Automate firewall policies, address objects, security groups, and related network security configurations.

- Implement pre-change validation mechanisms, including syntax validation and conflict detection.

- Implement dry-run and safe rollback mechanisms using idempotent automation to prevent disruption to production traffic.

- Design and implement failure recovery mechanisms for network automation workflows.

- Develop asynchronous processing capabilities for long-running network operations.

- Write and maintain comprehensive unit and integration tests for the automation platform.

- Ensure all generated firewall rules comply with internal security policies and security/compliance standards.

- Integrate automation solutions into CI/CD pipelines and apply Infrastructure as Code principles where appropriate.

- Troubleshoot and continuously improve automation workflows, API integrations, and network provisioning processes.

- Document code, API contracts, workflow designs, and operational procedures.

- Provide knowledge transfer and ensure a seamless handover to internal NetSecOps teams.

- Collaborate with Software Engineering, Network Security, Infrastructure, and NetSecOps teams.

- Contribute to the scalability, reliability, security, and operational efficiency of the self-service firewall platform.

#J-18808-Ljbffr