Network Security Automation

LTM; Bengaluru; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

A leading tech firm in India is seeking a Network Security Automation Engineer to design and implement automation measures across its network security stack. The role emphasizes building automation for firewall policies and compliance, with candidates expected to have strong software engineering skills in Python, Ansible, and Terraform. Familiarity with security platforms like Palo Alto and the use of ML tools is essential. This opportunity is ideal for those passionate about automation and security compliance.

Qualifications

• Experience with Ansible, Terraform, CI/CD, and Python; Bash/PowerShell knowledge is a plus.
• Proficiency in REST APIs, JSON/YAML, and webhooks; experience in building internal API services is valued.
• Fundamental understanding of security products such as firewalls, SASE, and SDWAN.
• Strong documentation and stakeholder communication skills.
• Experience with Generative AI and core ML libraries.

Responsibilities

• Design and implement automation for firewall policy lifecycle and other network functions.
• Build scalable workflows integrating APIs from security platforms.
• Develop reusable Python libraries and CLI tools with thorough documentation.
• Implement configuration drift detection and continuous compliance.
• Optimize performance and automate rule cleanup across vendors.

Skills

Python

REST APIs

CI/CD

Ansible

Terraform

Bash

PowerShell

Tools

Palo Alto Networks

Fortinet

TensorFlow

scikit-learn

PyTorch

Job description

We are seeking a hands‑on Network Security Automation Engineer to design, build, and operate automation across our network security stack. The ideal candidate has strong software engineering fundamentals (Python/REST/CI/CD), knowledge of firewalls and cloud security, and a track record of building robust automation for policy orchestration, compliance, change management, and response workflows (SIEM/SOAR).

Key Responsibilities

• Design and implement automation for firewall policy lifecycle (create/modify/decommission), NAT, objects, address groups, URL categories, SSL decryption, and rule optimization.
• Build scalable workflows integrating REST/JSON APIs of Palo Alto (PAN-OS), Fortinet, Check Point and SASE (e.g., Prisma Access/Netskope/Zscaler).
• Create IaC modules (e.g., Terraform for security policies / objects) and Ansible playbooks / collections for consistent configuration across environments.
• Develop reusable Python libraries / CLI tools; package and version modules; maintain documentation and unit tests.
• Build pipelines for SD‑WAN (e.g., Prisma SD‑WAN / Fortinet SD‑WAN) and ZTNA / SASE policy automation, posture checks, and identity/context‑aware rules.
• Implement configuration drift detection, continuous compliance (CIS / NIST / ISO), and audit‑ready reporting.
• Develop telemetry pipelines (syslog / API polling / webhooks) and dashboards for policy health, rule hygiene, hit counts, shadowed/duplicate rules, and KPIs.
• Optimize performance: automate rule cleanup, object reuse analysis, and policy rationalization across vendors.
• Identify high‑impact AI/ML use cases within the domains of infrastructure security, deployment pipelines (CI/CD), security operations (SecOps), and large‑scale system troubleshooting
• Keep abreast of the latest advancements in AI/ML, particularly in the domain of Generative AI, and evaluate their potential application to infrastructure security workflows

Required Qualification / Certifications

• Ansible, Terraform, CI/CD and Python. Bash / PowerShell is a plus.
• Proficiency in REST APIs, JSON / YAML, and webhooks; experience building internal API services/microservices is valued.
• Fundamental understanding of security products like firewalls, SASE, SDWAN
• Policy constructs: security / NAT rules, app‑ID / user‑ID, URL / Threat profiles, SSL decryption, zones / virtual routers, objects / address groups.
• Strong documentation, testing, and stakeholder communication.
• Generative AI: Experience utilizing Large Language Models (LLMs) or building RAG (Retrieval‑Augmented Generation) applications for tasks like summarizing incident reports or generating troubleshooting runbooks.
• Proficiency in Python and demonstrable experience with core ML libraries (e.g., scikit‑learn, TensorFlow, PyTorch)

Preferred Skills

• Languages: Python, Bash, PowerShell
• Security Platforms: Palo Alto Networks (PAN‑OS / Prisma Access), Fortinet (FortiGate / Manager / Analyzer / ADC)