Network Security Automation Engineer

Randstad Portugal; Porto; On-site; EUR 45,000 - 65,000; Full time

Job summary

Randstad Portugal is seeking a Network Security Automation Engineer to join a key client as part of a multi-vendor network automation initiative. The role focuses on automating configuration, onboarding, monitoring, and remediation across a multi-vendor infrastructure using Ansible and Python.

The candidate will define coding standards, develop Ansible playbooks, and build pipelines with GitLab CI/Jenkins/GitHub Actions, while working with Netmiko, NAPALM, PyEZ, Nornir, and Paramiko.

Qualifications

• Proven hands-on experience in network automation within an enterprise or service provider environment.
• Practical experience with Ansible and Jinja2 templating.
• Experience with Bash or Shell scripting, YAML, and JSON.
• Experience with Git and CI/CD tools such as GitLab CI, Jenkins, or GitHub Actions.
• Knowledge of NETCONF, RESTCONF, gNMI, gNOI, and vendor-specific REST APIs.
• Strong understanding of Layer 2 and Layer 3 networking, routing, switching, overlay and underlay technologies, and network security protocols.
• Experience with SNMP, NetFlow or sFlow, streaming telemetry, log analysis, and event correlation.
• Hands-on Linux system administration, including Red Hat Linux, shell scripting, system configuration, and performance tuning.
• Experience working with several network vendors, preferably Cisco, Juniper, Arista, and Fortinet.
• Experience with Juniper VXLAN-EVPN and data center fabrics is preferred.

Responsibilities

• Support the development of a network automation framework by automating network configuration, device onboarding, monitoring, validation, and remediation across a multi-vendor infrastructure.
• Define coding standards, naming conventions, repository structures, and development practices for network automation.
• Create and maintain Ansible playbooks, roles, collections, plugins, modules, and inventory sources.
• Develop Python automation using libraries such as Netmiko, NAPALM, PyEZ, Nornir, and Paramiko.
• Automate onboarding and provisioning of switches, routers, firewalls, and wireless access points.
• Connect provisioning workflows with DHCP, DNS, certificate management, CMDB, and network source of truth systems.
• Build Jinja2 templates for VLANs, IP addressing, routing, multicast, QoS, and device configurations.
• Create GitLab pipelines for network changes, including pre-change validation, automated testing, rollback, and post-change checks.
• Monitor interface status, BGP peers, connectivity, routing protocols, latency, jitter, bandwidth, and application performance, and develop remediation scripts linking alerts to ITSM.
• Automate Juniper data center fabrics using spine-leaf, VXLAN, and EVPN.
• Maintain technical documentation, runbooks, standard operating procedures, and training material.

Skills

Network automation

Ansible

Jinja2 templating

Bash scripting

Shell scripting

YAML

JSON

Git

CI/CD tools

REST APIs

Linux admin

Tools

Netmiko

NAPALM

PyEZ

Nornir

Paramiko

GitLab CI

Jenkins

GitHub Actions

VXLAN

SNMP

Job description

The Randstad Group is the global leader in talent solutions and HR services, with more than 65 years of market experience, acting as a strategic partner for talent and for companies. We are present in more than 38 markets worldwide, contributing to shaping the world of work.

We are looking to hire a Network Security Automation Engineer to join one of our teams for a key client.

Responsibilities

• Support the development of a network automation framework by automating network configuration, device onboarding, monitoring, validation, and remediation across a multi-vendor infrastructure.
• Define coding standards, naming conventions, repository structures, and development practices for network automation.
• Create and maintain Ansible playbooks, roles, collections, plugins, modules, and inventory sources.
• Develop Python automation using libraries such as Netmiko, NAPALM, PyEZ, Nornir, and Paramiko.
• Automate the onboarding and provisioning of switches, routers, firewalls, and wireless access points.
• Connect provisioning workflows with DHCP, DNS, certificate management, CMDB, and network source of truth systems.
• Build Jinja2 templates for VLANs, IP addressing, routing, multicast, QoS, and device-specific configurations.
• Create GitLab pipelines for network changes, including pre-change validation, automated testing, rollback, and post-change checks.
• Monitor interface status, BGP peers, connectivity, routing protocols, latency, jitter, bandwidth, and application performance, and develop remediation scripts connecting alerts to ITSM platforms.
• Automate Juniper data center fabrics using spine-leaf architecture, VXLAN, and EVPN.
• Maintain technical documentation, runbooks, standard operating procedures, and training material.

Skills/Requirements

• Proven hands-on experience in network automation within an enterprise or service provider environment.
• Practical experience with Ansible and Jinja2 templating.
• Experience with Bash or Shell scripting, YAML, and JSON.
• Experience with Git and CI/CD tools such as GitLab CI, Jenkins, or GitHub Actions.
• Knowledge of NETCONF, RESTCONF, gNMI, gNOI, and vendor-specific REST APIs.
• Strong understanding of Layer 2 and Layer 3 networking, routing, switching, overlay and underlay technologies, and network security protocols.
• Experience with SNMP, NetFlow or sFlow, streaming telemetry, log analysis, and event correlation.
• Hands-on Linux system administration, including Red Hat Linux, shell scripting, system configuration, and performance tuning.
• Experience working with several network vendors, preferably Cisco, Juniper, Arista, and Fortinet.
• Experience with Juniper VXLAN-EVPN and data center fabrics is preferred.
• Knowledge of network source of truth systems, closed-loop automation, monitoring platforms, or ITSM tools is an advantage.
• Integration into a solid and recognized company within the sector, with an excellent work environment and the opportunity to make a difference;