Software Engineer Network Automation, WAN & Edge

Mistral; München; On-site; EUR 90,000 - 130,000; Full time

Job summary

Mistral in München is seeking a Software Engineer, Network Automation - WAN & Edge, to design, automate, and operate resilient connectivity between data centers, cloud environments, external networks, and the internet. You will work on routing, firewalls, traffic engineering, and production troubleshooting.

This hands-on role requires experience with WAN/edge networking, external BGP production, and building automation using modern network-management APIs.

Qualifications

• Hands-on WAN and edge networking experience across internet connectivity, data-center interconnect, private WAN, or cloud networking.
• Track record of taking external BGP designs from whiteboard to production and debugging them during production incidents.
• Experience integrating and troubleshooting stateful firewalls, NAT, asymmetric routing, and redundant edge designs on major routing/firewall platforms.
• Experience building or operating production network automation using REST, NETCONF, gNMI/OpenConfig, Ansible, or Terraform.
• Strong software-engineering fundamentals in a general-purpose language; willingness to learn Go.

Responsibilities

• Design and evolve resilient inter-site, cloud, and internet connectivity for large-scale AI infrastructure.
• Own external BGP policy and traffic engineering at the edge, including route filtering, failover, and capacity planning.
• Build API-driven automation for edge routing, firewalls, VPNs, carrier connectivity, and network segmentation.
• Coordinate with carriers, cloud connectivity providers, colocation partners, and vendors on design, provisioning, incident escalation, and service improvement.
• Design safe change workflows with automated validation and resilience testing, staged rollouts, observability, rollback, and recovery.
• Participate in on-call rotation, troubleshoot active WAN and edge incidents, restore service, and turn root causes into lasting improvements.
• Review designs and code, explain networking trade-offs, and help raise network engineering quality across the organization.

Skills

WAN & edge networking

BGP design & production

Firewall & NAT

Network automation

REST/NETCONF/gNMI/OpenConfig

Go programming

Telemetry & troubleshooting

Communication & leadership

Tools

FortiGate FortiManager

Job description

About Mistral

Mistral provides full-stack AI solutions: from frontier models to developer tools, applications, and compute. We partner with enterprises tackling the hardest problems—across high-stakes industries like finance, manufacturing, defense, healthcare, and the public sector—co-creating customized AI systems that they can run on their terms.

About Mistral

Mistral provides full-stack AI solutions: from frontier models to developer tools, applications, and compute. We partner with enterprises tackling the hardest problems—across high-stakes industries like finance, manufacturing, defense, healthcare, and the public sector—co-creating customized AI systems that they can run on their terms.

We are a dynamic, collaborative team passionate about AI and its potential to transform society. Our diverse workforce thrives in competitive environments and is committed to driving innovation. Our teams are distributed between Europe, North America, Asia and the Middle East. We are creative, low-ego and team-spirited.

The Role

As a Software Engineer, Network Automation - WAN & Edge, you will design, automate, and operate resilient connectivity between data centers, cloud environments, external networks, and the internet. Your work will span routing, firewalls, traffic engineering, and production troubleshooting.

This is a hands-on role for an experienced network engineer who can build, test, debug, and review production-grade automation. Networking depth and strong software-engineering judgment matter more than familiarity with any particular language, platform, or tool.

What You Will Do

• Design and evolve resilient inter-site, cloud, and internet connectivity for large-scale AI infrastructure.
• Own external BGP policy and traffic engineering at the edge, including route filtering, failover, and capacity planning.
• Build API-driven automation for edge routing, firewalls, VPNs, carrier connectivity, and network segmentation.
• Coordinate with carriers, cloud connectivity providers, colocation partners, and vendors on design, provisioning, incident escalation, and service improvement.
• Design safe change workflows with automated validation and resilience testing, staged rollouts, observability, rollback, and recovery.
• Participate in on-call rotation, troubleshoot active WAN and edge incidents, restore service, and turn root causes into lasting improvements.
• Review designs and code, explain networking trade-offs, and help raise network engineering quality across the organization.

What We’re Looking For

• Deep, hands-on WAN and edge networking experience across internet connectivity, data-center interconnect, private WAN, or cloud networking.
• A track record of taking external BGP designs from whiteboard to production and debugging them during production incidents.
• Experience integrating and troubleshooting stateful firewalls, NAT, asymmetric routing, and redundant edge designs on at least one major routing or firewall platform.
• Experience building or operating production network automation using network-management APIs and data models. You understand desired state and idempotency; relevant technologies might include REST, NETCONF, gNMI/OpenConfig, Ansible, or Terraform.
• Strong software-engineering fundamentals in a general-purpose language. You can design, test, debug, and review production systems and are willing to become productive in Go.
• Operational troubleshooting experience using routing and flow state, packet captures, link health, telemetry, and logs to diagnose production incidents.
• Clear, pragmatic communication and effective stakeholder management. You can translate technical needs into connectivity designs and provider requirements, define acceptance criteria and service-level expectations, and provide technical leadership.

Nice to Have

• Experience with FortiGate, FortiManager, or comparable edge and firewall platforms.
• Deeper specialization in external connectivity, such as public-cloud or hybrid-cloud interconnect, or internet transit and peering.
• Exposure to edge security and scale techniques such as RPKI and route-origin validation, DDoS mitigation, or global traffic engineering.
• Familiarity with streaming telemetry, network source-of-truth systems, and configuration-compliance tooling.
• Experience reading, reviewing, or contributing to Go code.
• Familiarity with Kubernetes controllers, operators, or other declarative, reconciliation-based systems.

What we offer

We offer a comprehensive benefits package designed to support your well-being, growth, and work-life balance. Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks.

For the most up-to-date details on benefits available in your location, please refer to our Benefits page.

Privacy Policy

Your privacy matters to us. You can learn more about how we handle your personal data in our Applicant Privacy Policy.