Firewall Engineer (Hibrido, Lisboa)

Shore; Lisboa; Presencial; EUR 42 000 - 64 000; Tempo integral

Resumo da oferta

A Shore procura um engenheiro de rede de segurança experiente para manter a infraestrutura de segurança, diagnosticar falhas e gerir políticas de firewall.

O candidato ideal terá forte experiência com Python/Django, REST APIs, automação e plataformas como FortiGate/FortiManager e VMware NSX-T, bem como conhecimento de IaC e pipelines CI/CD. Fluência em inglês/português é desejável.

Qualificações

• Experiência combinando Engenharia de Software e Segurança de Rede Corporativa.
• Conhecimento avançado em Python 3 e Django/DRF.
• Experiência com REST APIs, automação e CI/CD.
• Conhecimento de FortiGate/FortiOS, FortiManager e VMware NSX-T.
• Fluência em pelo menos dois dos seguintes idiomas: inglês, francês ou português.

Responsabilidades

• Executar a manutenção operacional e administração de infraestrutura de segurança de rede.
• Diagnosticar e resolver falhas de rede, fluxos bloqueados e problemas de conectividade.
• Implementar, modificar e manter políticas de firewall e segurança.
• Gerir regras de segurança em Fortinet e NSX-T/Vmware NSX-T.

Conhecimentos

Python 3

Django

REST APIs

Celery

Redis

Git

CI/CD

IaC

FortiGate

FortiManager

NSX-T

Automation

Networking security

Fortinet policies

Policy API

Ferramentas

GitLab CI

GitHub Actions

Terraform

Descrição da oferta de emprego

Principais Responsabilidades:

• Ensure the operational maintenance and administration of network security infrastructures.
• Diagnose and troubleshoot network malfunctions, blocked flows and connectivity issues.
• Implement, modify and maintain firewall and security policies.
• Manage security rules across Palo Alto, Fortinet and VMware NSX-T / VCF9 Network environments.
• Implement and maintain network and micro-segmentation policies.
• Analyze and propose improvements to security policies and operational processes.
• Manage requests, incidents, changes and technical documentation in an IT production environment.
• Ensure compliance with security standards, internal policies and SLAs.
• Provide technical expertise and collaborate with other infrastructure and security teams.

Requisitos Mínimos:

• Experience combining Software Engineering and Enterprise Network Security.
• Advanced knowledge of Python 3 and hands-on experience with Django and/or Django REST Framework.
• Strong experience designing and consuming REST APIs and developing automation backends.
• Experience with asynchronous task processing, such as Celery and Redis, for managing long-running network operations.
• Practical experience with Git and CI/CD platforms such as GitLab CI or GitHub Actions.
• Good understanding of Infrastructure as Code (IaC) principles and modern software development practices.
• Deep knowledge of FortiGate/FortiOS and FortiManager architectures.
• Strong hands-on experience automating Fortinet firewall policies and objects through FortiManager APIs (JSON-RPC/REST).
• Deep understanding of VMware NSX-T architecture and networking/security concepts.
• Hands-on experience with the NSX-T Policy API and automation of firewall policies and security groups.
• Solid understanding of enterprise routing, switching, network zoning and micro-segmentation.
• Experience implementing secure automation with a strong focus on validation, error handling, rollback and idempotency.
• Strong understanding of network security principles, firewall policy management and security compliance.
• Good technical documentation, communication and problem-solving skills.
• Language skills: Fluency in at least two of the following languages is mandatory: English, French or Portuguese.