SASE Firewall QA Automation Engineer

Overview

Help validate NETGEAR's next-generation firewall and cybersecurity platform by building and maintaining automated tests across NGFW, SASE, ZTNA, SWG, VPN and SD-WAN features. You will work alongside firewall developers and senior QA engineers, and support is provided to grow across the stack.

What you'll do

• Develop and maintain automated test suites that validate firewall functionality, including policy and rule evaluation, NAT, stateful session handling, and traffic filtering across NGFW, SASE, ZTNA, SWG, VPN and SD-WAN features.
• Build and maintain test topologies and lab environments, including virtual machines, containers, and physical firewall appliances.
• Generate and shape realistic network traffic to exercise the firewall data plane, and verify observed behavior against expected policy outcomes.
• Run test suites in CI, triage failures, distinguish product defects from environment and test issues, and file clear, reproducible defect reports with supporting packet captures and logs.
• Contribute to test plans and test-case design from firewall requirements, and help keep automation coverage mapped to those test cases.
• Support performance and scale testing (throughput, connections per second, concurrent sessions) and help identify regressions.
• Work with developers to improve testability, and stay current with automation tooling, including AI-assisted test generation, maintenance, and failure triage.

What you'll need

• Bachelor's degree in computer science, Engineering, or a related technical field.
• 2 to 4 years of professional experience in QA automation or test engineering, preferably for networking or security products.
• Strong automation scripting ability in Python and Bash, comfort working in Ubuntu or other Linux environments from the command line, and day-to-day use of Git.
• Working knowledge of networking protocols and traffic flows: TCP/IP, DNS, HTTP/HTTPS, TLS/SSL, NAT, and routing fundamentals.
• Understanding of firewall fundamentals such as packet filtering, stateful connection tracking, NAT, and rule and policy evaluation.
• Hands-on experience with Linux networking and firewall tooling: iptables and nftables rule configuration, conntrack for session inspection, and iproute2 (ip addr, ip route, network namespaces, bridges, VLANs) for building and inspecting test topologies.
• Proficient in analyzing logs and network captures using Wireshark, tshark, and tcpdump.
• Experience with a test framework and runner such as pytest or Robot Framework.
• Experience with REST API testing using Postman, REST Assured, or scripted HTTP clients, for validating firewall management and policy APIs.
• Experience running automated tests in CI/CD pipelines (e.g., Jenkins, GitHub Actions, GitLab CI).
• Familiarity with defect tracking and test management tools (e.g., Jira, TestRail, Xray), and good communication skills in an agile, cross-functional team.

Nice to have

• Experience with traffic generation, shaping, and impairment tools such as iperf3, Scapy, hping3, tc/netem, TRex, or commercial testers like Spirent or Ixia.
• Contributions to open-source security or networking projects.
• Exposure to firewall security testing: IPS/IDS signature validation, TLS/SSL inspection, URL filtering, and threat-feed verification.
• Familiarity with virtualization and container tooling for building test labs (Docker and Docker Compose, VMware or KVM, Kubernetes), and with infrastructure-as-code such as Ansible or Terraform.
• Exposure to performance and scale testing, and to high-availability and failover validation.
• Familiarity with AI-assisted and agentic testing tools, for example LLM-assisted test generation, self-healing test maintenance, or agent-based exploratory testing, and an interest in applying them to network security test suites.
• Experience automating network devices and appliances over SSH and CLI using libraries such as Paramiko or Netmiko.
• Familiarity with certificate and PKI tooling such as OpenSSL, for generating test certificates and validating TLS/SSL inspection behavior.
• Experience validating firewall logging and telemetry (syslog, NetFlow, or IPFIX export) against expected policy events.

Details

• Location: Bengaluru, India.