Network Automation Engineer

Responsibilities - Build, administer, and maintain internal company networks, covering both virtual environments and office infrastructure. - Ensure secure and stable employee access to corporate resources globally using Palo Alto Networks architecture, SD-WAN, and Conditional Access policies. - Prevent network configuration drift by automating infrastructure management with Ansible and Terraform, and collecting latency telemetry. - Configure and maintain Next-Generation Firewalls (NGFW), Panorama, VPN Gateways, and GlobalProtect (including client provisioning and endpoint verification via HIP profiles). - Manage security, NAT, and VPN policies, alongside role-based network segmentation, VPN zones, and transit routing. - Administer Linux-based network environments and KVM/QEMU virtualization using virsh. - Manage SSL/TLS, IPSec, and the full certificate lifecycle (PKI). - Analyze VPN traffic flows, sessions, and logs, while maintaining DDoS mitigation, brute-force protection, and rate-limiting mechanisms. - Maintain network configurations as code using Git workflows (branching, pull requests, and version control). - Monitor network availability and latency, systematically troubleshooting connectivity and security issues. Requirements - 3+ years of experience in Network Engineering with hands-on exposure to Next-Generation Firewalls (e.g., Fortinet, Palo Alto Networks). - Strong grasp of TCP/IP, routing, traffic filtering, and the differences between traditional stateful firewalls and NGFWs. - Solid understanding of Pan-OS internals (XML configuration, commit pipeline, policy processing, logging) or readiness to quickly master them. - Practical knowledge of network security mechanisms (DDoS/brute-force protection, rate limiting), VPNs (IPSec, SSL/TLS), and certificate management. - Understanding of SD-WAN and Conditional Access principles for remote access. - Hands-on experience administering Linux systems and KVM/QEMU virtualization, with mandatory proficiency in virsh. - Practical experience with Ansible for network automation (experience with Terraform is a plus). - Confident working knowledge of Git and at least basic Python skills for scripting. - Systematic approach to troubleshooting, log/session analysis, and incident resolution. - Professional proficiency in English. Will be a plus - 1+ year of focused, hands-on experience directly with the Palo Alto Networks stack (Pan-OS, Panorama, GlobalProtect). We offer - Compensation for tax expenses of private entrepreneurs in Ukraine - Qualified assistance and support for Ukrainian private entrepreneurs - 10 paid sick leave days per year - 20 paid vacation days per year - Public holidays according to current Ukrainian legislation - Medical insurance for employees - Compensation for professional education and learning English - Compensation for a sports subscription or sports equipment