Idiomas: PT e ING
\nLocal de Trabalho: Expo
\nModelo de Trabalho: H\u00edbrido 2x semana
\nSal\u00e1rio L\u00edquido m\u00e1ximo: N\/D | Fixed Fee: 80k\/85k – x12 meses – Rate Anual
\nDisponibilidade M\u00e1xima: N\/D<\/p>\n
Engenheiro\/a S\u00e9nior de DataCenter \u2013 Switching e Seguran\u00e7a de per\u00edmetro<\/p>\n
Enquadramento:
\nEngenheiro\/a S\u00e9nior de Redes de DataCenter com forte voca\u00e7\u00e3o para automa\u00e7\u00e3o, para integrar a equipa respons\u00e1vel pelo desenho e evolu\u00e7\u00e3o das infraestruturas de rede de DataCenter (fabrics de switching, interliga\u00e7\u00e3o entre DataCenters e seguran\u00e7a perimetral).<\/p>\n
A miss\u00e3o consiste em acelerar a transforma\u00e7\u00e3o da rede para um modelo NetDevOps: automatizar o provisionamento e a configura\u00e7\u00e3o, implementar a valida\u00e7\u00e3o de altera\u00e7\u00f5es e desenvolver telemetria e observabilidade, garantindo a fiabilidade, escalabilidade e seguran\u00e7a das infraestruturas de DataCenter.<\/p>\n
Principais Responsabilidades:
\n– Participar no desenho e evolu\u00e7\u00e3o da arquitetura de rede de DataCenter: fabrics spine-leaf, VXLAN\/EVPN, routing BGP\/OSPF, multi-tenancy, interliga\u00e7\u00e3o entre DataCenters (DCI), QoS e engenharia de tr\u00e1fego.
\n– Desenhar e evoluir a camada de seguran\u00e7a perimetral: firewalls de nova gera\u00e7\u00e3o, segmenta\u00e7\u00e3o e microsegmenta\u00e7\u00e3o, IDS\/IPS, VPNs e balanceamento de carga.
\n– Desenhar, desenvolver e manter solu\u00e7\u00f5es de automa\u00e7\u00e3o para provisionamento, configura\u00e7\u00e3o e ciclo de vida dos equipamentos de DataCenter (switches, firewalls e balanceadores).
\n– Participar na implementa\u00e7\u00e3o de pipelines de CI\/CD e IaC para altera\u00e7\u00f5es de rede, incluindo valida\u00e7\u00e3o autom\u00e1tica, testes pr\u00e9-implementa\u00e7\u00e3o (dry-run, laborat\u00f3rios virtuais) e mecanismos de rollback.
\n– Implementar telemetria de rede (streaming telemetry, gNMI\/gRPC, SNMP) e dashboards de observabilidade para suporte ao planeamento de capacidade.
\n– Apoiar a opera\u00e7\u00e3o em incidentes complexos, incluindo incidentes de seguran\u00e7a, e identifica\u00e7\u00e3o de causas.
\n– Elaborar documenta\u00e7\u00e3o t\u00e9cnica, standards de configura\u00e7\u00e3o, pol\u00edticas de seguran\u00e7a e boas pr\u00e1ticas de automa\u00e7\u00e3o.
\n– Mentorar engenheiros menos experientes e dinamizar a ado\u00e7\u00e3o de pr\u00e1ticas NetDevOps.
\n– Colaborar com fornecedores e equipas internas na avalia\u00e7\u00e3o de novas tecnologias e provas de conceito.<\/p>\n
Compet\u00eancias T\u00e9cnicas
\nRedes de DataCenter \u2013 Switching (dom\u00ednio s\u00f3lido – obrigat\u00f3rio):
\n– Fabrics spine-leaf: VXLAN\/EVPN, BGP e OSPF em ambiente de fabric, vPC\/MLAG, STP e mecanismos de prote\u00e7\u00e3o L2, multicast e QoS.
\n– Arquiteturas multi-tenant e interliga\u00e7\u00e3o entre DataCenters (EVPN Multi-Site); integra\u00e7\u00e3o com plataformas de virtualiza\u00e7\u00e3o e contentores (VMware, Kubernetes) e com redes de armazenamento (iSCSI, RoCE).
\n– Experi\u00eancia multi-vendor com equipamentos de DataCenter (Cisco Nexus NX-OS\/ACI, Arista EOS\/CloudVision, Juniper QFX\/Apstra, Nokia).<\/p>\n
Seguran\u00e7a de per\u00edmetro (dom\u00ednio s\u00f3lido – obrigat\u00f3rio):
\n– Firewalls de nova gera\u00e7\u00e3o multi-vendor (Palo Alto, Fortinet, Cisco, CheckPoint): pol\u00edticas de seguran\u00e7a, NAT, VPN IPsec\/SSL e inspe\u00e7\u00e3o de tr\u00e1fego.
\n– Arquiteturas de segmenta\u00e7\u00e3o e microsegmenta\u00e7\u00e3o, DMZ e princ\u00edpios Zero Trust.
\n– IDS\/IPS, mitiga\u00e7\u00e3o de DDoS, WAF e balanceadores de carga (F5 ou equivalentes).
\n– Hardening de equipamentos de rede e prote\u00e7\u00e3o do plano de controlo.<\/p>\n
Automa\u00e7\u00e3o e desenvolvimento (obrigat\u00f3rio):
\n– Python avan\u00e7ado aplicado a redes e boas pr\u00e1ticas de engenharia de software (Git, testes, code review).
\n– Ansible para gest\u00e3o de configura\u00e7\u00e3o em escala; modelos de dados YANG e interfaces NETCONF\/RESTCONF\/gNMI.
\n– Pipelines de CI\/CD (Gitlab, Github) aplicados a altera\u00e7\u00f5es de rede; valida\u00e7\u00e3o com laborat\u00f3rios virtuais (Containerlab, GNS3).
\n– Telemetria e observabilidade: streaming telemetry, Prometheus\/Grafana, ELK ou stacks equivalentes.<\/p>\n
Experi\u00eancia:
\n– M\u00ednimo de 8 anos de experi\u00eancia em engenharia de redes, dos quais pelo menos 5 em ambientes de DataCenter de grande escala (operador ou empresarial).
\n– M\u00ednimo de 3 anos de experi\u00eancia pr\u00e1tica em projetos de automa\u00e7\u00e3o de rede em produ\u00e7\u00e3o.
\n– Participa\u00e7\u00e3o em projetos de transforma\u00e7\u00e3o de DataCenter (migra\u00e7\u00e3o para fabrics VXLAN\/EVPN, consolida\u00e7\u00e3o de DataCenters, projetos de segmenta\u00e7\u00e3o e microsegmenta\u00e7\u00e3o) \u00e9 fortemente valorizada.<\/p>\n
Certifica\u00e7\u00f5es – Valorizadas as seguintes certifica\u00e7\u00f5es (ou equivalentes), sendo esperado pelo menos um de n\u00edvel \u201cExpert\u201d:
\n– Cisco CCNP\/CCIE Data Center;
\n– Juniper JNCIP-DC \/ JNCIE-DC;
\n– Arista ACE (n\u00edveis avan\u00e7ados);
\n– Palo Alto PCNSE \/ Fortinet NSE 7 (FCSS) ou equivalentes em seguran\u00e7a de rede;
\n– Cisco Certified DevNet Professional ou DevNet Expert;
\n– Red Hat Certified Specialist in Ansible Automation;
\n– Certifica\u00e7\u00f5es de programa\u00e7\u00e3o Python;<\/p>\n
Compet\u00eancias sociais
\n– Pensamento cr\u00edtico e capacidade anal\u00edtica: resolu\u00e7\u00e3o estruturada de problemas complexos;
\n– Autonomia e sentido de ownership: capacidade de conduzir iniciativas e de modo aut\u00f3nomo;
\n– Comunica\u00e7\u00e3o: clareza a comunicar temas t\u00e9cnicos, a audi\u00eancias t\u00e9cnicas e de gest\u00e3o, em Portugu\u00eas e Ingl\u00eas (obrigat\u00f3rio).
\n– Lideran\u00e7a t\u00e9cnica e mentoria: refer\u00eancia t\u00e9cnica na equipa, capaz de orientar e formar.
\n– Colabora\u00e7\u00e3o: trabalho em ambientes multidisciplinares e em contexto de mudan\u00e7a.
\n– Gest\u00e3o de prioridades e resili\u00eancia: capacidade de gerir m\u00faltiplos projetos e em situa\u00e7\u00f5es de incidente ou press\u00e3o.
\n– Curiosidade e aprendizagem cont\u00ednua: acompanhamento ativo da evolu\u00e7\u00e3o tecnol\u00f3gica.
\n– Orienta\u00e7\u00e3o a resultados e ao cliente: foco na qualidade de servi\u00e7o e na experi\u00eancia do cliente final.<\/p>\n
Forma\u00e7\u00e3o Acad\u00e9mica_
\n– Licenciatura ou Mestrado em Engenharia Eletrot\u00e9cnica, Engenharia Inform\u00e1tica, Telecomunica\u00e7\u00f5es ou \u00e1rea equivalente (ou experi\u00eancia profissional comprovadamente equivalente)<\/p>","protected":false},"excerpt":{"rendered":"
AO6876 \u00b7 Portugal \u00b7 telecommunications \u00b7 Open<\/p>","protected":false},"featured_media":0,"template":"","meta":{"_acf_changed":false,"boond_id":"6876","boond_reference":"AO6876","boond_place":"","boond_place_label":"Portugal","boond_state":12,"boond_state_label":"Open","boond_start_date":"immediate","boond_closing_date":"","boond_answer_date":"","boond_duration":255,"boond_raw_description":"Idiomas: PT e ING\nLocal de Trabalho: Expo\nModelo Trabalho: H\u00edbrido 2x semana\nSal\u00e1rio L\u00edquido m\u00e1ximo: N\/D | Fixed Fee: 80k\/85k - x12 meses - Rate Anual\nDisponibilidade M\u00e1xima: N\/D\n\nEngenheiro\/a S\u00e9nior de DataCenter \u2013 Switching e Seguran\u00e7a de per\u00edmetro\n\nEnquadramento:\nEngenheiro\/a S\u00e9nior de Redes de DataCenter com forte voca\u00e7\u00e3o para automa\u00e7\u00e3o, para integrar a equipa respons\u00e1vel pelo desenho e evolu\u00e7\u00e3o das infraestruturas de rede de DataCenter (fabrics de switching, interliga\u00e7\u00e3o entre DataCenters e seguran\u00e7a perimetral).\n\nA miss\u00e3o consiste em acelerar a transforma\u00e7\u00e3o da rede para um modelo NetDevOps: automatizar o provisionamento e a configura\u00e7\u00e3o, implementar a valida\u00e7\u00e3o de altera\u00e7\u00f5es e desenvolver telemetria e observabilidade, garantindo a fiabilidade, escalabilidade e seguran\u00e7a das infraestruturas de DataCenter.\n\nPrincipais Responsabilidades:\n- Participar no desenho e evolu\u00e7\u00e3o da arquitetura de rede de DataCenter: fabrics spine-leaf, VXLAN\/EVPN, routing BGP\/OSPF, multi-tenancy, interliga\u00e7\u00e3o entre DataCenters (DCI), QoS e engenharia de tr\u00e1fego.\n- Desenhar e evoluir a camada de seguran\u00e7a perimetral: firewalls de nova gera\u00e7\u00e3o, segmenta\u00e7\u00e3o e microsegmenta\u00e7\u00e3o, IDS\/IPS, VPNs e balanceamento de carga.\n- Desenhar, desenvolver e manter solu\u00e7\u00f5es de automa\u00e7\u00e3o para provisionamento, configura\u00e7\u00e3o e ciclo de vida dos equipamentos de DataCenter (switches, firewalls e balanceadores).\n- Participar na implementa\u00e7\u00e3o de pipelines de CI\/CD e IaC para altera\u00e7\u00f5es de rede, incluindo valida\u00e7\u00e3o autom\u00e1tica, testes pr\u00e9-implementa\u00e7\u00e3o (dry-run, laborat\u00f3rios virtuais) e mecanismos de rollback.\n- Implementar telemetria de rede (streaming telemetry, gNMI\/gRPC, SNMP) e dashboards de observabilidade para suporte ao planeamento de capacidade.\n- Apoiar a opera\u00e7\u00e3o em incidentes complexos, incluindo incidentes de seguran\u00e7a, e identifica\u00e7\u00e3o de causas.\n- Elaborar documenta\u00e7\u00e3o t\u00e9cnica, standards de configura\u00e7\u00e3o, pol\u00edticas de seguran\u00e7a e boas pr\u00e1ticas de automa\u00e7\u00e3o.\n- Mentorar engenheiros menos experientes e dinamizar a ado\u00e7\u00e3o de pr\u00e1ticas NetDevOps.\n- Colaborar com fornecedores e equipas internas na avalia\u00e7\u00e3o de novas tecnologias e provas de conceito.\n\nCompet\u00eancias T\u00e9cnicas\nRedes de DataCenter \u2013 Switching (dom\u00ednio s\u00f3lido - obrigat\u00f3rio):\n- Fabrics spine-leaf: VXLAN\/EVPN, BGP e OSPF em ambiente de fabric, vPC\/MLAG, STP e mecanismos de prote\u00e7\u00e3o L2, multicast e QoS.\n- Arquiteturas multi-tenant e interliga\u00e7\u00e3o entre DataCenters (EVPN Multi-Site); integra\u00e7\u00e3o com plataformas de virtualiza\u00e7\u00e3o e contentores (VMware, Kubernetes) e com redes de armazenamento (iSCSI, RoCE).\n- Experi\u00eancia multi-vendor com equipamentos de DataCenter (Cisco Nexus NX-OS\/ACI, Arista EOS\/CloudVision, Juniper QFX\/Apstra, Nokia).\n\nSeguran\u00e7a de per\u00edmetro (dom\u00ednio s\u00f3lido - obrigat\u00f3rio):\n- Firewalls de nova gera\u00e7\u00e3o multi-vendor (Palo Alto, Fortinet, Cisco, CheckPoint): pol\u00edticas de seguran\u00e7a, NAT, VPN IPsec\/SSL e inspe\u00e7\u00e3o de tr\u00e1fego.\n- Arquiteturas de segmenta\u00e7\u00e3o e microsegmenta\u00e7\u00e3o, DMZ e princ\u00edpios Zero Trust.\n- IDS\/IPS, mitiga\u00e7\u00e3o de DDoS, WAF e balanceadores de carga (F5 ou equivalentes).\n- Hardening de equipamentos de rede e prote\u00e7\u00e3o do plano de controlo.\n\nAutoma\u00e7\u00e3o e desenvolvimento (obrigat\u00f3rio):\n- Python avan\u00e7ado aplicado a redes e boas pr\u00e1ticas de engenharia de software (Git, testes, code review).\n- Ansible para gest\u00e3o de configura\u00e7\u00e3o em escala; modelos de dados YANG e interfaces NETCONF\/RESTCONF\/gNMI.\n- Pipelines de CI\/CD (Gitlab, Github) aplicados a altera\u00e7\u00f5es de rede; valida\u00e7\u00e3o com laborat\u00f3rios virtuais (Containerlab, GNS3).\n- Telemetria e observabilidade: streaming telemetry, Prometheus\/Grafana, ELK ou stacks equivalentes.\n\nExperi\u00eancia:\n- M\u00ednimo de 8 anos de experi\u00eancia em engenharia de redes, dos quais pelo menos 5 em ambientes de DataCenter de grande escala (operador ou empresarial).\n- M\u00ednimo de 3 anos de experi\u00eancia pr\u00e1tica em projetos de automa\u00e7\u00e3o de rede em produ\u00e7\u00e3o.\n- Participa\u00e7\u00e3o em projetos de transforma\u00e7\u00e3o de DataCenter (migra\u00e7\u00e3o para fabrics VXLAN\/EVPN, consolida\u00e7\u00e3o de DataCenters, projetos de segmenta\u00e7\u00e3o e microsegmenta\u00e7\u00e3o) \u00e9 fortemente valorizada.\n\nCertifica\u00e7\u00f5es - Valorizadas as seguintes certifica\u00e7\u00f5es (ou equivalentes), sendo esperado pelo menos um de n\u00edvel \u201cExpert\u201d:\n- Cisco CCNP\/CCIE Data Center;\n- Juniper JNCIP-DC \/ JNCIE-DC;\n- Arista ACE (n\u00edveis avan\u00e7ados);\n- Palo Alto PCNSE \/ Fortinet NSE 7 (FCSS) ou equivalentes em seguran\u00e7a de rede;\n- Cisco Certified DevNet Professional ou DevNet Expert;\n- Red Hat Certified Specialist in Ansible Automation;\n- Certifica\u00e7\u00f5es de programa\u00e7\u00e3o Python;\n\nSoft Skills\n- Pensamento cr\u00edtico e capacidade anal\u00edtica: resolu\u00e7\u00e3o estruturada de problemas complexos;\n- Autonomia e sentido de ownership: capacidade de conduzir iniciativas e de modo aut\u00f3nomo;\n- Comunica\u00e7\u00e3o: clareza a comunicar temas t\u00e9cnicos, a audi\u00eancias t\u00e9cnicas e de gest\u00e3o, em Portugu\u00eas e Ingl\u00eas (obrigat\u00f3rio).\n- Lideran\u00e7a t\u00e9cnica e mentoria: refer\u00eancia t\u00e9cnica na equipa, capaz de orientar e formar.\n- Colabora\u00e7\u00e3o: trabalho em ambientes multidisciplinares e em contexto de mudan\u00e7a.\n- Gest\u00e3o de prioridades e resili\u00eancia: capacidade de gerir m\u00faltiplos projetos e em situa\u00e7\u00f5es de incidente ou press\u00e3o.\n- Curiosidade e aprendizagem cont\u00ednua: acompanhamento ativo da evolu\u00e7\u00e3o tecnol\u00f3gica.\n- Orienta\u00e7\u00e3o a resultados e ao cliente: foco na qualidade de servi\u00e7o e na experi\u00eancia do cliente final.\n\nForma\u00e7\u00e3o Acad\u00e9mica_\n- Licenciatura ou Mestrado em Engenharia Eletrot\u00e9cnica, Engenharia Inform\u00e1tica, Telecomunica\u00e7\u00f5es ou \u00e1rea equivalente (ou experi\u00eancia profissional comprovadamente equivalente)","boond_criteria":"ABOUT THE OPPORTUNITY\n\nWe are looking for a Senior DataCenter Network Engineer to reinforce an engineering team in the telecommunications sector, focused on DataCenter switching, routing, perimeter security and network automation.\n\nWHAT YOU WILL DO\n\n- Design and evolve DataCenter network architectures, including spine-leaf fabrics, VXLAN\/EVPN, BGP\/OSPF routing, multi-tenancy, DataCenter interconnect, QoS and traffic engineering.\n- Support perimeter security architecture, including firewalls, segmentation, microsegmentation, IDS\/IPS, VPNs and load balancing.\n- Develop automation for provisioning, configuration and lifecycle management of switches, firewalls and load balancers.\n- Contribute to CI\/CD and Infrastructure as Code practices for network changes, including validation, dry-run testing, virtual labs and rollback.\n- Implement network telemetry and observability to support capacity planning, analysis and reliability.\n- Support complex incident analysis, including security incidents and root cause investigation.\n- Produce technical documentation, configuration standards, security policies and automation best practices.\n- Mentor less experienced engineers and promote NetDevOps practices.\n- Collaborate with internal teams and technology providers in solution assessment and proofs of concept.\n\nWHAT WE ARE LOOKING FOR\n\n- At least 8 years of network engineering experience, including at least 5 years in large-scale DataCenter environments.\n- At least 3 years of practical experience in production network automation.\n- Autonomy, ownership and structured problem-solving in complex technical contexts.\n- Professional working proficiency in Portuguese and English, with clear communication across technical and management audiences.\n- Collaborative, resilient and solution-oriented approach in multi-project and incident-driven environments.\n- Degree in Electrical Engineering, Computer Engineering, Telecommunications or a related field, or equivalent professional experience.\n\nTECHNICAL SKILLS\n\n- DataCenter switching and routing: spine-leaf, VXLAN\/EVPN, BGP, OSPF, vPC\/MLAG, STP, L2 protection, multicast and QoS.\n- Multi-tenant architectures and DataCenter interconnect, including EVPN Multi-Site.\n- Integration with virtualization, containers and storage networks, including VMware, Kubernetes, iSCSI and RoCE.\n- Multi-vendor DataCenter platforms, including Cisco Nexus NX-OS\/ACI, Arista EOS\/CloudVision, Juniper QFX\/Apstra and Nokia.\n- Perimeter security: Palo Alto, Fortinet, Cisco, CheckPoint, NAT, IPsec\/SSL VPN, traffic inspection and DMZ.\n- Segmentation, microsegmentation, Zero Trust principles, IDS\/IPS, DDoS mitigation, WAF and F5 or equivalent load balancing.\n- Network hardening and control plane protection.\n- Python for network automation, Git, testing and code review.\n- Ansible, YANG data models, NETCONF, RESTCONF and gNMI.\n- GitLab or GitHub CI\/CD pipelines applied to network changes.\n- Containerlab or GNS3 for virtual lab validation.\n- Streaming telemetry, gNMI\/gRPC, SNMP, Prometheus, Grafana, ELK or equivalent stacks.\n- NetDevOps, Infrastructure as Code and automated change validation.\n\nNICE TO HAVE\n\n- Experience in DataCenter transformation initiatives, including VXLAN\/EVPN migration, DataCenter consolidation, segmentation or microsegmentation.\n- Advanced certification in DataCenter networking, network security, network automation or Python, such as CCNP\/CCIE Data Center, JNCIP-DC\/JNCIE-DC, Arista ACE, PCNSE, Fortinet NSE 7, Cisco DevNet, Red Hat Ansible Automation or equivalent.\n\nCOMPENSATION TRANSPARENCY\n\nBase salary range: EUR 18,000 - EUR 22,000 gross\/year\nTotal compensation: up to EUR 35,000\/year\nThe salary range is based on objective and gender-neutral criteria, including required competencies, professional experience, level of responsibility and role requirements. Final compensation will be determined according to the candidate's profile and position requirements.\n\nWHAT WE OFFER\n\n- Private health insurance from day one, with optional family extension.\n- Confidential mental health support through psychological support, content and live sessions.\n- Continuous training and certification support for long-term development.\n- Flexibility whenever the role and context allow it.\n- Practical family support measures, including childcare vouchers.\n- Team moments, shared milestones and leadership presence when it matters most.\n- Upskilling in information security, quality management and cybersecurity best practices.\n\nEQUAL OPPORTUNITY\n\nHexa promotes equal opportunity and inclusive recruitment practices. We value diverse backgrounds, experiences and perspectives, with fair and objective processes aligned with the Portuguese Diversity Charter.\n\nHEXA LIFE\n\nAt Hexa, every professional is a Builder. We work with honesty, mutual support and agility, building strong teams that learn, adapt and deliver with quality and intention.","boond_expertise_area":"telecommunications","boond_is_visible":true,"boond_created_at":"2026-07-22T12:06:12+0200","boond_created_ts":1784714772,"boond_updated_at":"2026-07-22T19:30:27+0200","boond_type_of":1,"boond_mode":1,"boond_active_positionings":1,"boond_manager_id":"17496","boond_agency_id":"1","boond_agency_label":"Hexa Consulting","boond_pole_id":"1","job_location":"Portugal","job_contract":"telecommunications","job_business_unit":"Hexa Consulting","job_seniority":"Senior","job_title_without_seniority":"DataCenter Network Engineer","job_remote_url":"","job_source":"boond","manatal_hash":"","manatal_status":"","job_last_synced_at":"2026-08-05 22:53:12"},"class_list":["post-7035","company_job","type-company_job","status-publish","hentry"],"blocksy_meta":[],"acf":[],"_links":{"self":[{"href":"https:\/\/www.hexa-group.pt\/pt\/wp-json\/wp\/v2\/company_job\/7035","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.hexa-group.pt\/pt\/wp-json\/wp\/v2\/company_job"}],"about":[{"href":"https:\/\/www.hexa-group.pt\/pt\/wp-json\/wp\/v2\/types\/company_job"}],"version-history":[{"count":1,"href":"https:\/\/www.hexa-group.pt\/pt\/wp-json\/wp\/v2\/company_job\/7035\/revisions"}],"predecessor-version":[{"id":7036,"href":"https:\/\/www.hexa-group.pt\/pt\/wp-json\/wp\/v2\/company_job\/7035\/revisions\/7036"}],"wp:attachment":[{"href":"https:\/\/www.hexa-group.pt\/pt\/wp-json\/wp\/v2\/media?parent=7035"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}