Enablement Lab Engineer
Welcome to the future of cloud networking and security!
Cato Networks is the first company to converge enterprise networking and security into one centralized and global service that is delivered by cloud. It is led by networking and security pioneer Shlomo Kramer (Check Point, Imperva) and early investor (Palo Alto Networks, Exabeam, Trusteer and more). Cato’s unique technology inspired a brand-new product category, later named “SASE” by Gartner and a market expected to reach $28.5 billion by 2028.
This is your opportunity to get on the rocket ship and join a company that is building a cutting-edge enterprise network and secure cloud platform, and is on a fast track to becoming the worldwide market leader – don’t miss it!
About the Role
We are seeking a highly technical and hands-on Enablement Lab Engineer to design, build, and scale our cloud-based enablement lab platform.
In this role, you will architect and deliver browser-accessible, on-demand lab environments to spin up complete networking and cybersecurity environments with the click of a button. You will work at the intersection of cloud automation, networking, SaaS integration, and front-end orchestration — transforming infrastructure into a seamless self-service enablement experience.
The Product Enablement team’s mission is to unlock our product’s full potential through engaging learning experiences. You’ll be architecting and building the foundational lab environment that enables us to do this.
The lab product you create will be used by various audiences, including bite-sized labs delivered direct to end users and partners as part of sales enablement, and a modular lab environment used by Sales Engineers and internal enablement teams.
To scope requirements and get feedback, you will collaborate within our team of content developers and data engineers, as well as product management, engineering, sales engineers and other enablement teams. To develop and deliver a finished product that meets the requirements, you will collaborate closely with our data engineers and content developers.
This role combines elements of:
Lab Development Engineer (hands-on training environments)
Cloud Enablement Engineer (IaC, automation, platform reliability)
Network/Security Engineer (real-world infrastructure configuration)
What You’ll Do
Design & Build Enablement Lab Platform
Architect and develop a browser-accessible lab front end (e.g., Guacamole or similar remote access technologies).
Build backend orchestration systems that allow users to:
Spin up/down VMs on demand
Deploy networking components
Reset environments
Enable/disable modular data scenarios
Create a scalable, multi-tenant lab environment for parallel user access.
Cloud Automation & Infrastructure
Design and automate lab provisioning in AWS and/or Azure.
Use Terraform (or similar IaC tools) to provision:
Virtual machines
Networking infrastructure (VPC/VNet, routing, security groups)
IAM roles and access controls
Build reusable infrastructure modules and templates.
Implement automation for environment lifecycle management (provisioning, teardown, reset).
Networking & Security Configuration
Configure VPN clients and secure connectivity between SaaS accounts and lab infrastructure.
Deploy and configure:
Virtual networking components
Firewalls and routing policies
Physical networking gear (switches, Wi-Fi access points, etc. as needed)
Windows VMs
Troubleshoot TCP/IP, DNS, routing, NAT, and policy configuration issues.
SaaS & API Integration
Integrate lab orchestration with SaaS APIs to:
Provision tenant accounts
Configure policies
Enable features
Bind accounts to lab infrastructure
Implement secure authentication and automation workflows.
Validation, Monitoring & Reliability
Develop validation scripts and health checks to verify:
VM health
Network connectivity
SaaS configuration state
Implement logging and error handling across the lab stack.
Build automation to detect and remediate failed lab deployments.
Optimize lab reliability, performance, and scalability.
What You Bring
Required Qualifications
10+ years of experience in the Networking or Security industry
5+ years of experience in cloud, networking, or automation engineering
Experience with building demo, training or enablement lab environments
Strong programming skills in Python (required).
Experience with backend development (Python, Go, Node.js, or similar).
Expert-level with Azure.
Deep experience with Terraform or other Infrastructure-as-Code tools.
Deep working knowledge of Linux command-line environments, including networking tools (tcpdump, curl, ip, netstat), package management, and system services
Strong PowerShell scripting experience for automation of Windows systems, VM provisioning, and SaaS/API interactions
Strong understanding of:
TCP/IP networking
VPN configuration
Firewalls and routing
SaaS architecture concepts
Experience building automated provisioning pipelines.
Experience integrating REST APIs into automation workflows.
Preferred Qualifications
Networking or Security certifications (e.g. CCNA)
Experience with browser-based remote access platforms (e.g., Apache Guacamole).
Experience with GraphQL APIs
Familiarity with cybersecurity tools and secure network architectures.
Experience with containerization (Docker).
Experience building internal platforms or developer enablement tools.
Why This Role Is Unique
You won’t just manage infrastructure — you’ll build a modular lab product used by a range of audiences, including customers, partners, Sales Engineers and internal enablement teams. Your work will directly influence how effectively the field is able to communicate the technical value of our products to customers, using real-world scenarios.
Cato provides a competitive salary and comprehensive benefits plan. Benefits for this role include health/vision/dental insurance, 401(k), stock options, Health Savings/Flexible Spending Accounts, flexible time-off, paid parental leave and disability benefits.
As an EEO/Affirmative Action Employer all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status.
#LI-GG1