Firewall Automation Engineer - Hybrid Role in Porto

Shore; Porto; Ibrido; EUR 45.000 - 75.000; Tempo pieno

Descrizione del lavoro

Shore in Porto is seeking a Firewall Automation Engineer to join our Network Security Development team and help evolve a self-service firewall automation platform.

The role blends Software Engineering with enterprise security, focusing on Python/Django, REST APIs and automating firewall policies across Fortinet FortiGate/FortiManager and VMware NSX-T. You will implement robust automation workflows, CI/CD practices and contribute to secure, scalable solutions.

Competenze

• Experience combining Software Engineering and Enterprise Network Security.
• Advanced knowledge of Python 3 and Django and/or Django REST Framework.
• Strong experience designing and consuming REST APIs and developing automation backends.
• Experience with asynchronous task processing (Celery/Redis) for long-running network operations.
• Practical experience with Git and CI/CD platforms (GitLab CI/GitHub Actions).
• Good understanding of Infrastructure as Code (IaC) principles and modern software development practices.
• Deep knowledge of FortiGate/FortiOS and FortiManager architectures.
• Hands-on experience automating Fortinet firewall policies and objects via FortiManager APIs (JSON-RPC/REST).
• Deep understanding of VMware NSX-T architecture and networking/security concepts.
• Experience with NSX-T Policy API and automation of firewall policies and security groups.

Mansioni

• Design, develop and optimize end-to-end firewall automation workflows using Python and Django/REST Framework, covering request, validation, approval and provisioning processes.
• Develop and maintain robust API integrations to orchestrate firewall changes across FortiManager/FortiOS and VMware NSX-T Managers.
• Automate the management of firewall policies, address objects, security groups and related network security configurations.
• Implement pre-change validation mechanisms, including syntax validation, conflict detection and policy compliance checks.
• Design and implement failure recovery and rollback mechanisms, ensuring idempotent and safe automation with minimal risk of disruption to production traffic.
• Develop comprehensive unit and integration tests to ensure the reliability, security and maintainability of the automation platform.
• Ensure all automated firewall changes comply with security policies, governance requirements and internal compliance standards.
• Contribute to CI/CD pipelines and follow Infrastructure as Code and software engineering best practices.
• Document source code, API contracts, automation workflows and technical designs to facilitate knowledge transfer and long-term maintainability.
• Collaborate with Network Security, NetSecOps and Software Engineering teams to continuously improve the automation platform.

Conoscenze

Software Engineering

Enterprise Network Security

Python 3

Django

REST APIs

CI/CD practices

Infrastructure as Code

Strumenti

Git

GitLab CI

GitHub Actions

Celery

Redis

FortiManager APIs

NSX-T Policy API

Descrizione del lavoro

Shore in Porto is seeking a Firewall Automation Engineer to join our Network Security Development team and help evolve a self-service firewall automation platform.

The role blends Software Engineering with enterprise security, focusing on Python/Django, REST APIs and automating firewall policies across Fortinet FortiGate/FortiManager and VMware NSX-T. You will implement robust automation workflows, CI/CD practices and contribute to secure, scalable solutions.