SASE Firewall QA Automation Engineer
Key Skills for This Role
Full Job Posting
Key Responsibilities:
- Develop and maintain automated test suites that validate firewall functionality — policy and rule evaluation, NAT, stateful session handling, and traffic filtering across NGFW, SASE, ZTNA, SWG, VPN, and SD-WAN features.
- Build and maintain test topologies and lab environments, including virtual machines, containers, and physical firewall appliances.
- Generate and shape realistic network traffic to exercise the firewall data plane, and verify observed behavior against expected policy outcomes.
- Run test suites in CI, triage failures, distinguish product defects from environment and test issues, and file clear, reproducible defect reports with supporting packet captures and logs.
- Contribute to test plans and test-case design from firewall requirements, and help keep automation coverage mapped to those test cases.
- Support performance and scale testing — throughput, connections per second, and concurrent sessions — and help identify regressions.
- Work with developers to improve testability, and stay current with automation tooling, including AI-assisted test generation, maintenance, and failure triage.
Required Qualifications:
- Bachelor’s degree in computer science, Engineering, or a related technical field.
- 2–4 years of professional experience in QA automation or test engineering, preferably for networking or security products.
- Strong automation scripting ability in Python and Bash, comfort working in Ubuntu or other Linux environments from the command line, and day-to-day use of Git.
- Working knowledge of networking protocols and traffic flows — TCP/IP, DNS, HTTP/HTTPS, TLS/SSL, NAT, and routing fundamentals.
- Understanding of firewall fundamentals such as packet filtering, stateful connection tracking, NAT, and rule and policy evaluation.
- Hands-on experience with Linux networking and firewall tooling — iptables and nftables rule configuration, conntrack for session inspection, and iproute2 (ip addr, ip route, network namespaces, bridges, VLANs) for building and inspecting test topologies.
- Proficient in analyzing logs and network captures using tools such as Wireshark, tshark, and tcpdump.
- Experience with a test framework and runner such as pytest or Robot Framework.
- Experience with REST API testing using Postman, REST Assured, or scripted HTTP clients, for validating firewall management and policy APIs.
- Experience running automated tests in CI/CD pipelines (e.g., Jenkins, GitHub Actions, GitLab CI).
- Familiarity with defect tracking and test management tools (e.g., Jira, TestRail, Xray), and good communication skills in an agile, cross-functional team.
- Preferred Qualifications (optional):
- Experience with traffic generation, shaping, and impairment tools such as iperf3, Scapy, hping3, tc/netem, TRex, or commercial testers like Spirent or Ixia.
- Contributions to open-source security or networking projects.
- Exposure to firewall security testing — IPS/IDS signature validation, TLS/SSL inspection, URL filtering, and threat-feed verification.
- Familiarity with virtualization and container tooling for building test labs — Docker and Docker Compose, VMware or KVM, Kubernetes — and with infrastructure-as-code such as Ansible or Terraform.
- Exposure to performance and scale testing, and to high-availability and failover validation.
- Familiarity with AI-assisted and agentic testing tools — for example LLM-assisted test generation, self-healing test maintenance, or agent-based exploratory testing — and an interest in applying them to network security test suites.
- Experience automating network devices and appliances over SSH and CLI using libraries such as Paramiko or Netmiko.
- Familiarity with certificate and PKI tooling such as OpenSSL, for generating test certificates and validating TLS/SSL inspection behavior.
- Experience validating firewall logging and telemetry — syslog, NetFlow, or IPFIX export — against expected policy events.
- Company Statement/Values:
- At NETGEAR, we are on a mission to unleash the full potential of connectivity with intelligent solutions that delight and protect. We turn ideas into innovative networking products that connect people, power businesses, and advance the way we live.
- We're a performance-driven, talented and connected team that's committed to delivering world-class products for our customers. As a company, we value our employees as the most essential building blocks of our success. And as teammates, we commit to taking our work to the Next Gear by living our values: we Dare to Transform the future, Connect and Delight our customers, Communicate Courageously with each other and collaborate to Win It Together. You’ll find our values woven through our processes, present in our decisions, and celebrated throughout our culture.
- We strive to attract top talent and create a great workplace where people feel engaged, inspired, challenged, proud and respected. If you are creative, forward-thinking, passionate about technology and are looking for a rewarding career to make an impact, then you've got what it takes to succeed at NETGEAR. Join our network and help us shape the future of connectivity.
- NETGEAR hires based on merit. All qualified applicants will receive equal consideration for employment. All your information will be kept confidential according to EEO guidelines.
About NETGEAR
Public American networking company providing hardware, software, and connectivity security solutions for businesses, homes, and service providers.
Visit company websiteJobs and hiring trendsApply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at NETGEAR
Sr. Systems Engineer, ProAV - North Central
, USA
This position requires a candidate based in Ohio, Michigan, or the Chicago area, supporting NETGEAR’s ProAV customers across the North Central United States. The Sr. Systems Engineer, ProAV serves as a technical expert s
Technical Support Engineer
, CAN
L3 Technical Support Engineer, Enterprise Networking and AV Solutions Location: Remote, Canada (British Columbia preferred) Department: Customer Support and Services (CSS) Reports To: Manager, L3 Technical Support About
Engineer II, System validation Test - Insight QA
Chennai, IND
Senior Engineer I, Software Development - Insight QA
Bengaluru, IND
Engineer II ,Software Development
Chennai, IND
Position Overview We are seeking an Engineer II to join our embedded switching software development team. This entry-level position focuses on developing low-level C software for our managed switches built on Broadcom ch
SASE Desktop Client Senior SW Dev
, IND
Role Overview NETGEAR is looking for a Senior Windows Desktop Agent Developer to drive the development of our Windows desktop client for a next-generation security platform. In this role, you will design and build secure
Sr. Systems Engineer, ProAV - North Central
, USA
Technical Support Engineer
, CAN
Engineer II, System validation Test - Insight QA
Chennai, IND
Senior Engineer I, Software Development - Insight QA
Bengaluru, IND
Engineer II ,Software Development
Chennai, IND
Graphic Designer (12 mos. Contract)
, CAN
UI/UX Designer (12 mos. Contract)
, CAN
SASE Desktop Client Senior SW Dev
, IND