Welcome to the future of cloud networking and security!

Cato Networks is the first company to converge enterprise networking and security into one centralized and global service that is delivered by cloud. It is led by networking and security pioneer Shlomo Kramer (Check Point, Imperva) and early investor (Palo Alto Networks, Exabeam, Trusteer and more). Cato’s unique technology inspired a brand-new product category, later named “SASE” by Gartner and a market expected to reach $28.5 billion by 2028.

This is your opportunity to get on the rocket ship and join a company that is building a cutting-edge enterprise network and secure cloud platform, and is on a fast track to becoming the worldwide market leader – don’t miss it!

About the Role

We are seeking a highly technical and hands-on Enablement Lab Engineer to design, build, and scale our cloud-based enablement lab platform.

In this role, you will architect and deliver browser-accessible, on-demand lab environments to spin up complete networking and cybersecurity environments with the click of a button. You will work at the intersection of cloud automation, networking, SaaS integration, and front-end orchestration — transforming infrastructure into a seamless self-service enablement experience.

The Product Enablement team’s mission is to unlock our product’s full potential through engaging learning experiences. You’ll be architecting and building the foundational lab environment that enables us to do this.

The lab product you create will be used by various audiences, including bite-sized labs delivered direct to end users and partners as part of sales enablement, and a modular lab environment used by Sales Engineers and internal enablement teams.

To scope requirements and get feedback, you will collaborate within our team of content developers and data engineers, as well as product management, engineering, sales engineers and other enablement teams. To develop and deliver a finished product that meets the requirements, you will collaborate closely with our data engineers and content developers.

This role combines elements of:

Lab Development Engineer (hands-on training environments)

Cloud Enablement Engineer (IaC, automation, platform reliability)

Network/Security Engineer (real-world infrastructure configuration)

What You’ll Do

Design & Build Enablement Lab Platform

Architect and develop a browser-accessible lab front end (e.g., Guacamole or similar remote access technologies).

Build backend orchestration systems that allow users to:

Spin up/down VMs on demand

Deploy networking components

Reset environments

Enable/disable modular data scenarios

Create a scalable, multi-tenant lab environment for parallel user access.

Cloud Automation & Infrastructure

Design and automate lab provisioning in AWS and/or Azure.

Use Terraform (or similar IaC tools) to provision:

Virtual machines

Networking infrastructure (VPC/VNet, routing, security groups)

IAM roles and access controls

Build reusable infrastructure modules and templates.

Implement automation for environment lifecycle management (provisioning, teardown, reset).

Networking & Security Configuration

Configure VPN clients and secure connectivity between SaaS accounts and lab infrastructure.

Deploy and configure:

Virtual networking components

Firewalls and routing policies

Physical networking gear (switches, Wi-Fi access points, etc. as needed)

Windows VMs

Troubleshoot TCP/IP, DNS, routing, NAT, and policy configuration issues.

Saa

S & API Integration:

Integrate lab orchestration with Saa

S APIs to:

Provision tenant accounts

Configure policies

Enable features

Bind accounts to lab infrastructure

Implement secure authentication and automation workflows.

Validation, Monitoring & Reliability

Develop validation scripts and health checks to verify:

VM health

Network connectivity

SaaS configuration state

Implement logging and error handling across the lab stack.

Build automation to detect and remediate failed lab deployments.

Optimize lab reliability, performance, and scalability.

What You Bring

Required Qualifications

10+ years of experience in the Networking or Security industry

5+ years of experience in cloud, networking, or automation engineering

Experience with building demo, training or enablement lab environments

Strong programming skills in Python (required).

Experience with backend development (Python, Go, Node.js, or similar).

Expert-level with Azure.

Deep experience with Terraform or other Infrastructure-as-Code tools.

Deep working knowledge of Linux command-line environments, including networking tools (tcpdump, curl, ip, netstat), package management, and system services

Strong PowerShell scripting experience for automation of Windows systems, VM provisioning, and SaaS/API interactions

Strong understanding of:

TCP/IP networking

VPN configuration

Firewalls and routing

SaaS architecture concepts

Experience building automated provisioning pipelines.

Experience integrating REST APIs into automation workflows.

Preferred Qualifications

Networking or Security certifications (e.g. CCNA)

Experience with browser-based remote access platforms (e.g., Apache Guacamole).

Experience with GraphQL APIs:

Familiarity with cybersecurity tools and secure network architectures.

Experience with containerization (Docker).

Experience building internal platforms or developer enablement tools.

Why This Role Is Unique

You won’t just manage infrastructure — you’ll build a modular lab product used by a range of audiences, including customers, partners, Sales Engineers and internal enablement teams. Your work will directly influence how effectively the field is able to communicate the technical value of our products to customers, using real-world scenarios.

Cato provides a competitive salary and comprehensive benefits plan. Benefits for this role include health/vision/dental insurance, 401(k), stock options, Health Savings/Flexible Spending Accounts, flexible time-off, paid parental leave and disability benefits.

As an EEO/Affirmative Action Employer all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status.