Firewall Automation Engineer

Shore; Porto; Hybrid; EUR 45,000 - 75,000; Full time

Job summary

Shore in Porto is seeking a Firewall Automation Engineer to join our Network Security Development team and help evolve a self-service firewall automation platform.

The role blends Software Engineering with enterprise security, focusing on Python/Django, REST APIs and automating firewall policies across Fortinet FortiGate/FortiManager and VMware NSX-T. You will implement robust automation workflows, CI/CD practices and contribute to secure, scalable solutions.

Qualifications

• Experience combining Software Engineering and Enterprise Network Security.
• Advanced knowledge of Python 3 and Django and/or Django REST Framework.
• Strong experience designing and consuming REST APIs and developing automation backends.
• Experience with asynchronous task processing (Celery/Redis) for long-running network operations.
• Practical experience with Git and CI/CD platforms (GitLab CI/GitHub Actions).
• Good understanding of Infrastructure as Code (IaC) principles and modern software development practices.
• Deep knowledge of FortiGate/FortiOS and FortiManager architectures.
• Hands-on experience automating Fortinet firewall policies and objects via FortiManager APIs (JSON-RPC/REST).
• Deep understanding of VMware NSX-T architecture and networking/security concepts.
• Experience with NSX-T Policy API and automation of firewall policies and security groups.

Responsibilities

• Design, develop and optimize end-to-end firewall automation workflows using Python and Django/REST Framework, covering request, validation, approval and provisioning processes.
• Develop and maintain robust API integrations to orchestrate firewall changes across FortiManager/FortiOS and VMware NSX-T Managers.
• Automate the management of firewall policies, address objects, security groups and related network security configurations.
• Implement pre-change validation mechanisms, including syntax validation, conflict detection and policy compliance checks.
• Design and implement failure recovery and rollback mechanisms, ensuring idempotent and safe automation with minimal risk of disruption to production traffic.
• Develop comprehensive unit and integration tests to ensure the reliability, security and maintainability of the automation platform.
• Ensure all automated firewall changes comply with security policies, governance requirements and internal compliance standards.
• Contribute to CI/CD pipelines and follow Infrastructure as Code and software engineering best practices.
• Document source code, API contracts, automation workflows and technical designs to facilitate knowledge transfer and long-term maintainability.
• Collaborate with Network Security, NetSecOps and Software Engineering teams to continuously improve the automation platform.

Skills

Software Engineering

Enterprise Network Security

Python 3

Django

REST APIs

CI/CD practices

Infrastructure as Code

Tools

Git

GitLab CI

GitHub Actions

Celery

Redis

FortiManager APIs

NSX-T Policy API

Job description

Firewall Automation Engineer (Hibrido, Porto)

We are looking for a Firewall Automation Engineer to join a Network Security Development team and contribute to the evolution of a self-service firewall automation platform.

The role combines Software Engineering and Enterprise Network Security, with a strong focus on developing secure, scalable and reliable automation workflows for firewall rule management across Fortinet FortiGate/FortiManager and VMware NSX-T environments.

The ideal candidate will have a strong background in Python/Django development, REST APIs and enterprise network security, with hands-on experience automating firewall operations and integrating security platforms.

Principais Responsabilidades

• Design, develop and optimize end-to-end firewall automation workflows using Python and Django/REST Framework, covering request, validation, approval and provisioning processes.
• Develop and maintain robust API integrations to orchestrate firewall changes across FortiManager/FortiOS and VMware NSX-T Managers.
• Automate the management of firewall policies, address objects, security groups and related network security configurations.
• Implement pre-change validation mechanisms, including syntax validation, conflict detection and policy compliance checks.
• Design and implement failure recovery and rollback mechanisms, ensuring idempotent and safe automation with minimal risk of disruption to production traffic.
• Develop comprehensive unit and integration tests to ensure the reliability, security and maintainability of the automation platform.
• Ensure all automated firewall changes comply with security policies, governance requirements and internal compliance standards.
• Contribute to CI/CD pipelines and follow Infrastructure as Code and software engineering best practices.
• Document source code, API contracts, automation workflows and technical designs to facilitate knowledge transfer and long-term maintainability.
• Collaborate with Network Security, NetSecOps and Software Engineering teams to continuously improve the automation platform.

Requisitos mínimos

• Experience combining Software Engineering and Enterprise Network Security.
• Advanced knowledge of Python 3 and hands-on experience with Django and/or Django REST Framework.
• Strong experience designing and consuming REST APIs and developing automation backends.
• Experience with asynchronous task processing, such as Celery and Redis, for managing long-running network operations.
• Practical experience with Git and CI/CD platforms such as GitLab CI or GitHub Actions.
• Good understanding of Infrastructure as Code (IaC) principles and modern software development practices.
• Deep knowledge of FortiGate/FortiOS and FortiManager architectures.
• Strong hands-on experience automating Fortinet firewall policies and objects through FortiManager APIs (JSON-RPC/REST).
• Deep understanding of VMware NSX-T architecture and networking/security concepts.
• Hands-on experience with the NSX-T Policy API and automation of firewall policies and security groups.
• Solid understanding of enterprise routing, switching, network zoning and micro-segmentation.
• Experience implementing secure automation with a strong focus on validation, error handling, rollback and idempotency.
• Strong understanding of network security principles, firewall policy management and security compliance.
• Good technical documentation, communication and problem-solving skills.