Network Automation Engineer

Responsibilities Build, administer, and maintain internal company networks, covering both virtual environments and office infrastructure. Ensure secure and stable employee access to corporate resources globally using Palo Alto Networks architecture, SD-WAN, and Conditional Access policies. Prevent network configuration drift by automating infrastructure management with Ansible and Terraform, and collecting latency telemetry. Configure and maintain Next-Generation Firewalls (NGFW), Panorama, VPN Gateways, and GlobalProtect (including client provisioning and endpoint verification via HIP profiles). Manage security, NAT, and VPN policies, alongside role-based network segmentation, VPN zones, and transit routing. Administer Linux-based network environments and KVM/QEMU virtualization using virsh. Manage SSL/TLS, IPSec, and the full certificate lifecycle (PKI). Analyze VPN traffic flows, sessions, and logs, while maintaining DDoS mitigation, brute-force protection, and rate-limiting mechanisms. Maintain network configurations as code using Git workflows (branching, pull requests, and version control). Monitor network availability and latency, systematically troubleshooting connectivity and security issues. Requirements 3+ years of experience in Network Engineering with hands-on exposure to Next-Generation Firewalls (e.g., Fortinet, Palo Alto Networks). Strong grasp of TCP/IP, routing, traffic filtering, and the differences between traditional stateful firewalls and NGFWs. Solid understanding of Pan-OS internals (XML configuration, commit pipeline, policy processing, logging) or readiness to quickly master them. Practical knowledge of network security mechanisms (DDoS/brute-force protection, rate limiting), VPNs (IPSec, SSL/TLS), and certificate management. Understanding of SD-WAN and Conditional Access principles for remote access. Hands-on experience administering Linux systems and KVM/QEMU virtualization, with mandatory proficiency in virsh. Practical experience with Ansible for network automation (experience with Terraform is a plus). Confident working knowledge of Git and at least basic Python skills for scripting. Systematic approach to troubleshooting, log/session analysis, and incident resolution. Professional proficiency in English. Will be a plus 1+ year of focused, hands-on experience directly with the Palo Alto Networks stack (Pan-OS, Panorama, GlobalProtect). We offer Compensation for tax expenses of private entrepreneurs in Ukraine Qualified assistance and support for Ukrainian private entrepreneurs 10 paid sick leave days per year 20 paid vacation days per year Public holidays according to current Ukrainian legislation Medical insurance for employees Compensation for professional education and learning English Compensation for a sports subscription or sports equipment