Automation Engineer - Network & Security

About Gruve

Gruve is an innovative software services startup dedicated to transforming enterprises to AI powerhouses. We specialize in cybersecurity, customer experience, cloud infrastructure, and advanced technologies such as Large Language Models (LLMs). Our mission is to assist our customers in their business strategies utilizing their data to make more intelligent decisions. As a well-funded early-stage startup, Gruve offers a dynamic environment with strong customer and partner networks.

About the Role 

The Automation Engineer will develop and maintain custom scripts and automation workflows to support network and security solution deployments across the Cisco Security portfolio. This includes scripting for competitive firewall migrations, Cisco Secure Access onboarding and policy provisioning, ISE policy automation, and general network and security infrastructure tasks. The engineer will leverage AI coding tools (Codex, Claude Code) to accelerate script development and validate AI-generated output for production use. 

Key Responsibilities 

• Develop Python scripts to parse, transform, and push dropped configurations during competitive firewall migrations to Cisco FTD (from ASA, Palo Alto, Checkpoint, Fortinet), including feature gap remediation for unsupported NAT rules, ACL constructs, VPN configs, and object-group structures 

• Use AI coding tools (Codex, Claude Code) to accelerate script development; review, test, and validate AI-generated code before production deployment 

• Develop scripts for bulk configuration changes, compliance audits, drift detection, and health checks across network and security infrastructure using platform REST APIs (FMC, ISE, Catalyst Center, Secure Access) 

• Use AI coding tools (Codex, Claude Code) to accelerate script development; review, test, and validate AI-generated code before production deployment 

• Script bulk provisioning, policy migration, and onboarding workflows across Cisco routers and switches, security portfolio products including Secure Access, ISE, and Umbrella — including migrations from competitive platforms (Zscaler, Netskope, Prisma etc) 

• Build and maintain reusable script libraries, config transformation templates, and version-controlled repositories 

• Collaborate with delivery teams to support customer-facing engagements, ensuring scripts and automation workflows align with project timelines, customer requirements, and service delivery standards 

 Required Qualifications 

• 5+ years Python development experience focused on network or security automation 

• Understanding of firewall configuration syntax across at least 2 platforms (ASA, FTD, Palo Alto, Checkpoint, Fortinet) 

• Experience with REST APIs for network device configuration (FMC, ISE, or Catalyst Center API preferred) 

• Proficiency with AI coding tools (Codex, Claude Code, Copilot) for code generation and validation 

• Proficiency working in a customer-centric professional services or consulting delivery environment 

• Familiarity with Docker for containerized script execution 

• Git-based version control and CI/CD basics 

 Preferred Qualifications 

• Experience with Cisco Firewall Migration Tool (FMT) 

• Exposure to Cisco Secure Access, Umbrella, or competitive SSE/SASE platforms (Zscaler, Netskope, Prisma) 

• Knowledge of Playwright/Pytest for UI-based automation and testing 

• Experience with Ansible, Terraform, or Nornir for infrastructure automation 

• Exposure to ISE, SD-Access, or SD-WAN automation workflows 

• CCNA, CCNP Security, or DevNet Associate certification 

Why Gruve

At Gruve, we foster a culture of innovation, collaboration, and continuous learning. We are committed to building a diverse and inclusive workplace where everyone can thrive and contribute their best work. If you’re passionate about technology and eager to make an impact, we’d love to hear from you.

Gruve is an equal opportunity employer. We welcome applicants from all backgrounds and thank all who apply; however, only those selected for an interview will be contacted.