Firewall Engineer (Hibrido, Lisboa)

Shore; Almada; Híbrido; EUR 45 000 - 70 000; Tempo integral

Resumo da oferta

Shore in Caparica, Lisbon area, is seeking a Firewall Engineer (Hybrid) to maintain and administer complex network security infra, diagnose malfunctions, and implement firewall policies across Fortinet and VMware NSX-T environments.

The role demands strong Python 3 skills with Django or Django REST Framework, API design, and automation backends, plus experience with IaC, Git-based CI/CD, and security policy optimization in enterprise networks.

Qualificações

• Experience combining software engineering with enterprise network security.
• Advanced Python 3 knowledge with Django or Django REST Framework.
• Strong ability to design and consume REST APIs and develop automation backends.
• Experience with asynchronous task processing (Celery, Redis).
• Git experience and CI/CD platforms (GitLab CI or GitHub Actions).
• IaC and modern software development practices.
• Deep knowledge of FortiGate/FortiOS and FortiManager.
• Automation of Fortinet firewall policies via FortiManager APIs.
• NSX-T architecture and networking concepts.

Responsabilidades

• Ensure operational maintenance and administration of network security infrastructures.
• Diagnose and troubleshoot network malfunctions, blocked flows and connectivity issues.
• Implement, modify and maintain firewall and security policies.
• Manage security rules across Palo Alto, Fortinet and VMware NSX-T / VCF9 Network environments.
• Implement and maintain network and micro-segmentation policies.
• Analyze and propose improvements to security policies and operational processes.
• Manage requests, incidents, changes and technical documentation in an IT production environment.
• Ensure compliance with security standards, internal policies and SLAs.
• Provide technical expertise and collaborate with other infrastructure and security teams.

Conhecimentos

Python 3

Django

Django REST

REST APIs

Celery

Redis

Git

CI/CD

IaC

FortiGate

FortiOS

FortiManager

NSX-T

NSX-T API

Firewall policies

Network security

Ferramentas

FortiManager

VMware NSX-T

NSX-T Policy API

Descrição da oferta de emprego

Ensure the operational maintenance and administration of network security infrastructures.

Diagnose and troubleshoot network malfunctions, blocked flows and connectivity issues.

Implement, modify and maintain firewall and security policies.

Manage security rules across Palo Alto, Fortinet and VMware NSX-T / VCF9 Network environments.

Implement and maintain network and micro-segmentation policies.

Analyze and propose improvements to security policies and operational processes.

Manage requests, incidents, changes and technical documentation in an IT production environment.

Ensure compliance with security standards, internal policies and SLAs.

Provide technical expertise and collaborate with other infrastructure and security teams.

Experience combining Software Engineering and Enterprise Network Security.

Advanced knowledge of Python 3 and hands‑on experience with Django and/or Django REST Framework.

Strong experience designing and consuming REST APIs and developing automation backends.

Experience with asynchronous task processing, such as Celery and Redis, for managing long-running network operations.

Practical experience with Git and CI/CD platforms such as GitLab CI or GitHub Actions.

Good understanding of Infrastructure as Code (IaC) principles and modern software development practices.

Deep knowledge of FortiGate/FortiOS and FortiManager architectures.

Strong hands‑on experience automating Fortinet firewall policies and objects through FortiManager APIs (JSON-RPC/REST).

Deep understanding of VMware NSX‑T architecture and networking/security concepts.

Hands‑on experience with the NSX‑T Policy API and automation of firewall policies and security groups.

Solid understanding of enterprise routing, switching, network zoning and micro‑segmentation.

Experience implementing secure automation with a strong focus on validation, error handling, rollback and idempotency.

Strong understanding of network security principles, firewall policy management and security compliance.

Good technical documentation, communication and problem‑solving skills.

Language skills: Fluency in at least two of the following languages is mandatory: English, French or Portuguese.

Firewall Engineer (Hibrido, Lisboa) Caparica, Portuguese Republic, PT