About the Role

We are seeking a highly technical and hands-on Enablement Lab Engineer to design, build, and scale our cloud-based enablement lab platform.

In this role, you will architect and deliver browser-accessible, on-demand lab environments to spin up complete networking and cybersecurity environments with the click of a button. You will work at the intersection of cloud automation, networking, SaaS integration, and front-end orchestration — transforming infrastructure into a seamless self-service enablement experience.

The Product Enablement team’s mission is to unlock our product’s full potential through engaging learning experiences. You’ll be architecting and building the foundational lab environment that enables us to do this.

The lab product you create will be used by various audiences, including bite-sized labs delivered direct to end users and partners as part of sales enablement, and a modular lab environment used by Sales Engineers and internal enablement teams.

To scope requirements and get feedback, you will collaborate within our team of content developers and data engineers, as well as product management, engineering, sales engineers and other enablement teams. To develop and deliver a finished product that meets the requirements, you will collaborate closely with our data engineers and content developers.

This role combines elements of:

• Lab Development Engineer (hands-on training environments)

• Cloud Enablement Engineer (IaC, automation, platform reliability)

• Network/Security Engineer (real-world infrastructure configuration)

---

What You’ll Do

Design & Build Enablement Lab Platform

• Architect and develop a browser-accessible lab front end (e.g., Guacamole or similar remote access technologies).

• Build backend orchestration systems that allow users to:

  • Spin up/down VMs on demand

  • Deploy networking components

  • Reset environments

  • Enable/disable modular data scenarios

• Create a scalable, multi-tenant lab environment for parallel user access.

Cloud Automation & Infrastructure

• Design and automate lab provisioning in AWS and/or Azure.

• Use Terraform (or similar IaC tools) to provision:

  • Virtual machines

  • Networking infrastructure (VPC/VNet, routing, security groups)

  • IAM roles and access controls

• Build reusable infrastructure modules and templates.

• Implement automation for environment lifecycle management (provisioning, teardown, reset).

Networking & Security Configuration

• Configure VPN clients and secure connectivity between SaaS accounts and lab infrastructure.

• Deploy and configure:

  • Virtual networking components

  • Firewalls and routing policies

  • Physical networking gear (switches, Wi-Fi access points, etc. as needed)

  • Windows VMs

• Troubleshoot TCP/IP, DNS, routing, NAT, and policy configuration issues.

SaaS & API Integration

• Integrate lab orchestration with SaaS APIs to:

  • Provision tenant accounts

  • Configure policies

  • Enable features

  • Bind accounts to lab infrastructure

• Implement secure authentication and automation workflows.

Validation, Monitoring & Reliability

• Develop validation scripts and health checks to verify:

  • VM health

  • Network connectivity

  • SaaS configuration state

• Implement logging and error handling across the lab stack.

• Build automation to detect and remediate failed lab deployments.

• Optimize lab reliability, performance, and scalability.

---

What You Bring

Required Qualifications

• 10+ years of experience in the Networking or Security industry

• 5+ years of experience in cloud, networking, or automation engineering

• Experience with building demo, training or enablement lab environments

• Strong programming skills in Python (required).

• Experience with backend development (Python, Go, Node.js, or similar).

• Expert-level with Azure.

• Deep experience with Terraform or other Infrastructure-as-Code tools.

• Deep working knowledge of Linux command-line environments, including networking tools (tcpdump, curl, ip, netstat), package management, and system services

• Strong PowerShell scripting experience for automation of Windows systems, VM provisioning, and SaaS/API interactions

• Strong understanding of:

  • TCP/IP networking

  • VPN configuration

  • Firewalls and routing

  • SaaS architecture concepts

• Experience building automated provisioning pipelines.

• Experience integrating REST APIs into automation workflows.

Preferred Qualifications

• Networking or Security certifications (e.g. CCNA)

• Experience with browser-based remote access platforms (e.g., Apache Guacamole).

• Experience with GraphQL APIs

• Familiarity with cybersecurity tools and secure network architectures.

• Experience with containerization (Docker).

• Experience building internal platforms or developer enablement tools.

---

Why This Role Is Unique

You won’t just manage infrastructure — you’ll build a modular lab product used by a range of audiences, including customers, partners, Sales Engineers and internal enablement teams. Your work will directly influence how effectively the field is able to communicate the technical value of our products to customers, using real-world scenarios.

Cato provides a competitive salary and comprehensive benefits plan. Benefits for this role include health/vision/dental insurance, 401(k), stock options, Health Savings/Flexible Spending Accounts, flexible time-off, paid parental leave and disability benefits.

As an EEO/Affirmative Action Employer all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status.

#LI-GG1