Software Engineer Network Automation, WAN & Edge

Mistral; Amsterdam; On-site; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Healthcare coverage

Parental leave

Relocation support

Wellness programs

Meal and transportation allowances

Job summary

Mistral in Amsterdam is seeking a Software Engineer, Network Automation - WAN & Edge to design, automate, and operate resilient connectivity between data centers, cloud environments, external networks, and the internet.

You will work on routing, firewalls, traffic engineering, and production troubleshooting, building API-driven automation. Networking depth and strong software‑engineering judgment matter more than familiarity with any single language or tool.

Qualifications

• Hands-on WAN and edge networking across data centers, internet, and cloud links.
• Experience taking external BGP designs from planning to production and debugging incidents.
• Experience with stateful firewalls and NAT in edge deployments.
• Experience building or operating production network automation using APIs and data models (REST, NETCONF, gNMI/OpenConfig).
• Strong software fundamentals and willingness to learn Go for production systems.
• Operational troubleshooting using telemetry, packet captures, and logs.

Responsibilities

• Design and evolve resilient inter-site connectivity for large-scale AI infrastructure.
• Own edge routing and traffic engineering, including failover and capacity planning.
• Build API-driven automation for edge devices and security policies.
• Coordinate with carriers, cloud providers, and vendors on design and incident handling.
• Design safe change workflows with validation, rollout, and rollback.
• Participate in on-call rotation and diagnose WAN/edge incidents.
• Review designs and code to improve network engineering quality.

Skills

WAN & Edge Networking

BGP design & production

Firewall & NAT

Network automation tooling

Go programming

Troubleshooting production networks

Communication & stakeholder management

Tools

REST API

NETCONF

gNMI/OpenConfig

Ansible

Terraform

Go (development)

Job description

About Mistral

Mistral provides full-stack AI solutions: from frontier models to developer tools, applications, and compute. We partner with enterprises tackling the hardest problems—across high-stakes industries like finance, manufacturing, defense, healthcare, and the public sector—co-creating customized AI systems that they can run on their terms.

About Mistral

Mistral provides full-stack AI solutions: from frontier models to developer tools, applications, and compute. We partner with enterprises tackling the hardest problems—across high-stakes industries like finance, manufacturing, defense, healthcare, and the public sector—co-creating customized AI systems that they can run on their terms.

We are a dynamic, collaborative team passionate about AI and its potential to transform society. Our diverse workforce thrives in competitive environments and is committed to driving innovation. Our teams are distributed between Europe, North America, Asia and the Middle East. We are creative, low-ego and team-spirited.

The Role

As a Software Engineer, Network Automation - WAN & Edge, you will design, automate, and operate resilient connectivity between data centers, cloud environments, external networks, and the internet. Your work will span routing, firewalls, traffic engineering, and production troubleshooting.

This is a hands-on role for an experienced network engineer who can build, test, debug, and review production-grade automation. Networking depth and strong software-engineering judgment matter more than familiarity with any particular language, platform, or tool.

What You Will Do

• Design and evolve resilient inter-site, cloud, and internet connectivity for large-scale AI infrastructure.
• Own external BGP policy and traffic engineering at the edge, including route filtering, failover, and capacity planning.
• Build API-driven automation for edge routing, firewalls, VPNs, carrier connectivity, and network segmentation.
• Coordinate with carriers, cloud connectivity providers, colocation partners, and vendors on design, provisioning, incident escalation, and service improvement.
• Design safe change workflows with automated validation and resilience testing, staged rollouts, observability, rollback, and recovery.
• Participate in on-call rotation, troubleshoot active WAN and edge incidents, restore service, and turn root causes into lasting improvements.
• Review designs and code, explain networking trade-offs, and help raise network engineering quality across the organization.

What We’re Looking For

• Deep, hands-on WAN and edge networking experience across internet connectivity, data-center interconnect, private WAN, or cloud networking.
• A track record of taking external BGP designs from whiteboard to production and debugging them during production incidents.
• Experience integrating and troubleshooting stateful firewalls, NAT, asymmetric routing, and redundant edge designs on at least one major routing or firewall platform.
• Experience building or operating production network automation using network-management APIs and data models. You understand desired state and idempotency; relevant technologies might include REST, NETCONF, gNMI/OpenConfig, Ansible, or Terraform.
• Strong software-engineering fundamentals in a general-purpose language. You can design, test, debug, and review production systems and are willing to become productive in Go.
• Operational troubleshooting experience using routing and flow state, packet captures, link health, telemetry, and logs to diagnose production incidents.
• Clear, pragmatic communication and effective stakeholder management. You can translate technical needs into connectivity designs and provider requirements, define acceptance criteria and service-level expectations, and provide technical leadership.

Nice to Have

• Experience with FortiGate, FortiManager, or comparable edge and firewall platforms.
• Deeper specialization in external connectivity, such as public-cloud or hybrid-cloud interconnect, or internet transit and peering.
• Exposure to edge security and scale techniques such as RPKI and route-origin validation, DDoS mitigation, or global traffic engineering.
• Familiarity with streaming telemetry, network source-of-truth systems, and configuration-compliance tooling.
• Experience reading, reviewing, or contributing to Go code.
• Familiarity with Kubernetes controllers, operators, or other declarative, reconciliation-based systems.

What we offer

We offer a comprehensive benefits package designed to support your well-being, growth, and work-life balance. Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks.

For the most up-to-date details on benefits available in your location, please refer to our Benefits page.

Privacy Policy

Your privacy matters to us. You can learn more about how we handle your personal data in our Applicant Privacy Policy.