Devoteam Cyber Trust | Network Security Automation Engineer | Financial Sector

Qualifications

• Proficiency in Python (networking libraries: Netmiko, NAPALM, PyEZ, Nornir), Bash/Shell scripting, YAML/JSON, Ansible and Jinja2 templating
• Experience with Ansible, Git version control, and CI/CD tools (Jenkins, GitLab CI, GitHub Actions).
• Netconf, Resconf, gNMI, gNOI, vendor-specific REST API
• Knowledge of Layer 2/3 protocols, desired overlay/underlay technologies, and security protocols.
• SNMP, NetFlow/sFlow, GraphQL, streaming telemetry
• Desired: Visualization tools (Grafana, Kibana, Coralogix, PowerBI, Prometheus)
• Desired: JIRA, Netbox, Netbrain, LogicMonitor, Netbackup
• Experience in Linux system administration, including shell scripting, system configuration, and performance tuning.
• Ability to manage and automate tasks in Linux environments, integrating with network automation tools.
• Red Hat Linux

Company Description

Devoteam Cyber Trust is the Cybersecurity specialist arm of the Devoteam Group. With our 800+ experts located across EMEA, we aim to establish cybersecurity as an enabler of business success rather than a gatekeeper. We leverage an end-to-end approach to Cyber Resilience, Applied Security, and Managed Security services to secure the tech journey of large and medium-sized companies from all sectors and industries.

Since 2009, previously known as INTEGRITY, our team based in Portugal is specialised in providing cutting-edge Managed Security Services that combine its expertise and proprietary technology to consistently and effectively reduce the cyber risk of our clients.

The comprehensive service range includes Persistent Intrusion Testing, ISO 27001, PCI-DSS, GRC Consulting and Solutions, and Third-Party Risk Management. ISO 27001 (Information Security) and ISO 9001 (Quality) certified, PCI-QSA, and member of CREST and CIS - Centre for Internet Security, we provide services to a considerable number of clients, operating in more than 20 countries.

Job Description

The "Network Security Automation" project involves a suite of specialized services that extend beyond the client's traditional business operations. These services require a unique set of skills and knowledge, focusing on advanced automation and network management techniques. The expected services include:

1. Automation Strategy and Planning:
o Establishing coding standards and best practices.
o Selecting and implementing tools such as Ansible, Python, and Jinja2 for network automation.
o Designing automated workflows for multi-vendor environments.

2. Device Provisioning and Configuration Management:
o Automating the onboarding process for network devices.
o Developing configuration templates using Jinja2.
o Implementing change management automation with GitLab pipelines.

3. Network Monitoring and Validation:
o Monitoring network status in real-time and implementing remediation scripts.
o Tracking network performance metrics such as latency and bandwidth.

4. Data Center Orchestration:
o Automating data center fabrics and routing with VXLAN-EVPN.
o Optimising traffic flow and load balancing.

5. Integration with Tools and Platforms:
o Customising Ansible modules and developing dynamic inventory sources.
o Implementing CI/CD pipeline integration with Git-based workflows.