Python & Network Engineer

act digital; Porto; On-site; EUR 70,000 - 100,000; Full time

Job summary

act digital seeks a senior software engineer focused on Python/Django to design end-to-end firewall automation workflows, integrate FortiManager/FortiOS and VMware NSX-T, and build scalable APIs.

You will implement pre-change validation, idempotent automation, and CI/CD pipelines, collaborating with NetSecOps and infrastructure teams to reduce production risk and improve security compliance.

Qualifications

• At least 9 years of experience in a similar field.
• Design and develop end-to-end Python/Django workflows to automate firewall rule requests, validation, approval, and provisioning.
• Build and optimize self-service firewall automation workflows for production environments.
• Develop and maintain robust API connectors integrating FortiManager/FortiOS and VMware NSX-T Managers.

Responsibilities

• Automate firewall policies, address objects, security groups, and related network security configurations.
• Implement pre-change validation mechanisms, including syntax checks and conflict detection.
• Design safe rollback and recovery mechanisms using idempotent automation to minimize production risk.
• Implement asynchronous processing for long-running network operations.
• Develop comprehensive unit and integration tests for the automation platform.
• Ensure generated firewall rules comply with internal security policies and regulatory/compliance standards.
• Integrate automation solutions into CI/CD pipelines and follow Infrastructure as Code principles.
• Troubleshoot and improve automation workflows, API integrations, and network provisioning processes.
• Document code, API contracts, workflow designs, and operational procedures.
• Facilitate knowledge transfer to internal NetSecOps teams.
• Collaborate with Network Security, infrastructure, and software engineering teams to deliver reliable and secure automation solutions.
• Contribute to the continuous improvement of the self-service firewall platform, with a strong focus on scalability, reliability, security, and operational efficiency.

Skills

Python 3

Django

Django REST Framework

REST APIs

API-driven automation

Asynchronous processing

Unit and integration tests

Git

CI/CD pipelines

Infrastructure as Code

Documentation

Collaboration with NetSecOps teams

Tools

Fortigate

FortiOS

FortiManager APIs

VMware NSX-T

NSX-T Policy APIs

Celery

Redis

GitLab CI

GitHub Actions

Terraform

Ansible

Job description

• Strong experience with Python 3 and Django, preferably Django REST Framework, for building scalable APIs and automation backends.
• Senior-level experience combining Software Engineering and Enterprise Network Security.
• Strong experience with REST APIs and API-driven automation.
• Hands-on experience with Fortigate and FortiOS architectures.
• Hands-on experience with VMware NSX-T architectures.
• Experience automating firewall policies, address objects, and security groups.
• Strong experience with FortiManager APIs, including JSON-RPC and REST.
• Strong experience with NSX-T Policy APIs.
• Experience with asynchronous task processing using technologies such as Celery and Redis.
• Solid understanding of enterprise routing, switching, network zoning, and micro-segmentation.
• Experience designing and implementing end-to-end network automation workflows.
• Experience with pre-change validation, syntax validation, conflict detection, rollback mechanisms, and idempotent automation.
• Strong understanding of API orchestration across network security platforms.
• Experience writing comprehensive unit and integration tests.
• Knowledge of security policies, compliance requirements, and secure firewall rule management.
• Experience with Git and CI/CD pipelines, including GitLab CI or GitHub Actions.
• Knowledge of Infrastructure as Code (IaC) principles.
• Strong documentation and knowledge-transfer skills.
• Ability to work independently at senior consultant level and collaborate with Network Security and NetSecOps teams.

Responsibilities

• At least 9 years of experience in a similar field;
• Design and develop end-to-end Python/Django workflows to automate firewall rule requests, validation, approval, and provisioning.
• Build and optimize self-service firewall automation workflows for production environments.
• Develop and maintain robust API connectors integrating FortiManager/FortiOS and VMware NSX-T Managers.
• Automate firewall policies, address objects, security groups, and related network security configurations.
• Implement pre-change validation mechanisms, including syntax checks and conflict detection.
• Design safe rollback and recovery mechanisms using idempotent automation to minimize production risk.
• Implement asynchronous processing for long-running network operations.
• Develop comprehensive unit and integration tests for the automation platform.
• Ensure generated firewall rules comply with internal security policies and regulatory/compliance standards.
• Integrate automation solutions into CI/CD pipelines and follow Infrastructure as Code principles.
• Troubleshoot and improve automation workflows, API integrations, and network provisioning processes.
• Document code, API contracts, workflow designs, and operational procedures.
• Facilitate knowledge transfer to internal NetSecOps teams.
• Collaborate with Network Security, infrastructure, and software engineering teams to deliver reliable and secure automation solutions.
• Contribute to the continuous improvement of the self-service firewall platform, with a strong focus on scalability, reliability, security, and operational efficiency.