Network Security Automation Engineer (NetDevOps / Data Center)

eXalt Fi; Porto; Híbrido; EUR 60 000 - 95 000; Tempo integral

Resumo da oferta

eXalt Fi is seeking a Network Security Automation Engineer to lead the architecture and development of an enterprise-grade automation framework. You will integrate Python, Ansible, and Git-driven CI/CD across a multi-vendor environment including Fortinet, Cisco, Arista, and Juniper.

You will implement IaC, automate device onboarding, monitoring, remediation, and data center fabric orchestration, with strong focus on Juniper VXLAN-EVPN and GitOps workflows. Fluent English is mandatory.

Qualificações

• Framework Architecture & Standards: Define coding standards, naming conventions, repository structures, and GitOps workflows for network security automation.
• Infrastructure as Code (IaC): Develop and maintain Ansible playbooks, roles, custom modules, and Jinja2 templates for multi-vendor switches, routers, firewalls (Fortinet, Cisco, Arista, Juniper), and wireless environments.
• Python Network Automation: Build programmatic workflows using modern Python libraries (Netmiko, PyEZ, NAPALM, Nornir, Paramiko).
• CI/CD & Pre/Post-Validation: Design GitLab CI pipelines for network changes, incorporating automated pre-change validation, testing, rollback, and post-change compliance checks.
• Data Center Fabric Orchestration: Automate Juniper VXLAN-EVPN spine-leaf architectures, traffic path selection, and flow analysis.
• Source of Truth & Ecosystem Integration: Connect provisioning workflows with DHCP, DNS, IPAM, CMDB, certificate management, and ITSM platforms (ServiceNow).
• Observability & Closed-Loop Remediation: Automate interface/BGP monitoring, telemetry collection, auto-remediation scripts, network backup/restore procedures, and disaster recovery validation.
• Background: Solid hands-on experience in Network Automation, NetDevOps, or Network Security Engineering in enterprise or service provider environments.
• Core Technical Stack: DevOps & Version Control: Git, GitLab CI, Jenkins, or GitHub Actions.
• Operating Systems: Hands-on Linux administration (Red Hat / RHEL), performance tuning, and shell scripting.
• Networking & Security Foundations: Deep understanding of L2/L3 routing/switching, overlay/underlay, and network security protocols.
• Preferred: Direct experience with Juniper VXLAN-EVPN and data center fabric automation.
• Languages: Fluent English (written and spoken) is mandatory.

Responsabilidades

• Framework Architecture & Standards: Define coding standards, naming conventions, repository structures, and GitOps workflows for network security automation.
• Infrastructure as Code (IaC): Develop and maintain Ansible playbooks, roles, custom modules, and Jinja2 templates for multi-vendor switches, routers, firewalls, and wireless environments.
• Python Network Automation: Build programmatic workflows using modern Python libraries (Netmiko, PyEZ, NAPALM, Nornir, Paramiko).
• CI/CD & Pre/Post-Validation: Design GitLab CI pipelines for network changes, incorporating automated pre-change validation, testing, rollback, and post-change compliance checks.
• Data Center Fabric Orchestration: Automate Juniper VXLAN-EVPN spine-leaf architectures, traffic path selection, and flow analysis.
• Source of Truth & Ecosystem Integration: Connect provisioning workflows with DHCP, DNS, IPAM, CMDB, certificate management, and ITSM platforms (ServiceNow).
• Observability & Closed-Loop Remediation: Automate interface/BGP monitoring, telemetry collection, auto-remediation scripts, network backup/restore procedures, and disaster recovery validation.

Conhecimentos

Python automation

NetDevOps

Networking fundamentals

Fluent English

Ferramentas

Ansible

GitLab CI

Jenkins

GitHub Actions

Netmiko

PyEZ

NAPALM

Nornir

Paramiko

Jinja2

Juniper VXLAN-EVPN

Descrição da oferta de emprego

Full-time / Hybrid | Network Security & Infrastructure Operations | Global Financial Infrastructure

Our client is a premier European financial market infrastructure group. We are seeking a highly skilled Network Security Automation Engineer to lead the architecture and development of an enterprise-grade Network Automation Framework across a multi-vendor environment.

In this strategic role, you will bridge traditional network security engineering with modern DevOps practices. You will automate network configurations, device onboarding, real-time monitoring, automated remediation, and data center fabric orchestration (Juniper VXLAN-EVPN) using Python, Ansible, and Git-driven CI/CD pipelines.

• Framework Architecture & Standards: Define coding standards, naming conventions, repository structures, and GitOps workflows for network security automation.
• Infrastructure as Code (IaC): Develop and maintain Ansible playbooks, roles, custom modules, and Jinja2 templates for multi-vendor switches, routers, firewalls (Fortinet, Cisco, Arista, Juniper), and wireless environments.
• Python Network Automation: Build programmatic workflows using modern Python libraries (Netmiko, PyEZ, NAPALM, Nornir, Paramiko).
• CI/CD & Pre/Post-Validation: Design GitLab CI pipelines for network changes, incorporating automated pre-change validation, testing, rollback, and post-change compliance checks.
• Data Center Fabric Orchestration: Automate Juniper VXLAN-EVPN spine-leaf architectures, traffic path selection, and flow analysis.
• Source of Truth & Ecosystem Integration: Connect provisioning workflows with DHCP, DNS, IPAM, CMDB, certificate management, and ITSM platforms (ServiceNow).
• Observability & Closed-Loop Remediation: Automate interface/BGP monitoring, telemetry collection, auto-remediation scripts, network backup/restore procedures, and disaster recovery validation.
• Background: Solid hands-on experience in Network Automation, NetDevOps, or Network Security Engineering in enterprise or service provider environments.
• Core Technical Stack:
• DevOps & Version Control: Git, GitLab CI, Jenkins, or GitHub Actions.
• Operating Systems: Hands-on Linux administration (Red Hat / RHEL), performance tuning, and shell scripting.
• Networking & Security Foundations:
• Deep understanding of L2/L3 routing/switching, overlay/underlay, and network security protocols.
• Preferred: Direct experience with Juniper VXLAN-EVPN and data center fabric automation.
• Languages: Fluent English (written and spoken) is mandatory.