Network Automation Engineer

We are looking for a Network Automation Engineer to join our team and manage our internal corporate networks, covering both virtualized environments and office infrastructure.

You’ll work with next-generation firewalls, global remote access, virtualization, and configuration automation, helping keep internal systems secure, stable, and seamlessly connected.

This role would suit someone who enjoys automating routine network operations, managing complex security policies, and making practical improvements to network reliability and access.

Responsibilities
Build, administer, and maintain internal company networks, covering both virtual environments and office infrastructure.
Ensure secure and stable employee access to corporate resources globally using Palo Alto Networks architecture, SD-WAN, and Conditional Access policies.
Prevent network configuration drift by automating infrastructure management with Ansible and Terraform, and collecting latency telemetry.
Configure and maintain Next-Generation Firewalls (NGFW), Panorama, VPN Gateways, and GlobalProtect (including client provisioning and endpoint verification via HIP profiles).
Manage security, NAT, and VPN policies, alongside role-based network segmentation, VPN zones, and transit routing.
Administer Linux-based network environments and KVM/QEMU virtualization using virsh.
Manage SSL/TLS, IPSec, and the full certificate lifecycle (PKI).
Analyze VPN traffic flows, sessions, and logs, while maintaining DDoS mitigation, brute-force protection, and rate-limiting mechanisms.
Maintain network configurations as code using Git workflows (branching, pull requests, and version control).
Monitor network availability and latency, systematically troubleshooting connectivity and security issues.

Requirements
3+ years of experience in Network Engineering with hands-on exposure to Next-Generation Firewalls (e.g., Fortinet, Palo Alto Networks).
1+ year of focused, hands-on experience directly with the Palo Alto Networks stack (Pan-OS, Panorama, GlobalProtect) will be a
Strong grasp of TCP/IP, routing, traffic filtering, and the differences between traditional stateful firewalls and NGFWs.
Solid understanding of Pan-OS internals (XML configuration, commit pipeline, policy processing, logging) or readiness to quickly master them.
Practical knowledge of network security mechanisms (DDoS/brute-force protection, rate limiting), VPNs (IPSec, SSL/TLS), and certificate management.
Understanding of SD-WAN and Conditional Access principles for remote access.
Hands-on experience administering Linux systems and KVM/QEMU virtualization, with mandatory proficiency in virsh.
Practical experience with Ansible for network automation (experience with Terraform is a plus).
Confident working knowledge of Git and at least basic Python skills for scripting.
Systematic approach to troubleshooting, log/session analysis, and incident resolution.
Professional proficiency in English.

Will be a plus
1+ year of focused, hands-on experience directly with the Palo Alto Networks stack (Pan-OS, Panorama, GlobalProtect).

We offer
Compensation for tax expenses of private entrepreneurs in Ukraine
Qualified assistance and support for Ukrainian private entrepreneurs
10 paid sick leave days per year
20 paid vacation days per year
Public holidays according to current Ukrainian legislation
Medical insurance for employees
Compensation for professional education and learning English
Compensation for a sports subscription or sports equipment