Senior Network Engineer

Genpact; Castilla-La Mancha; Presencial; EUR 70 000 - 100 000; Tempo integral

Resumo da oferta

Genpact seeks a Networks Engineer/ Architect – WAN to lead WAN design and perimeter security across an enterprise estate. You will own WAN architecture and act as escalation lead for firewall, load balancer, DPI, and IPS related issues, including IT/OT segmentation.

You will oversee Palo Alto SD-WAN, Prisma Access, and Global Protect remote access, plus Mist/Meraki wireless maintenance and optimization across multiple sites, with bilingual English/Spanish proficiency.

Qualificações

• Enterprise network engineering experience with WAN architecture ownership.
• Expert-level Palo Alto NGFW skills: policy design, App-ID, URL filtering, Threat Prevention, NAT, VPN, SCM.
• Hands-on with Palo Alto Prisma Access or similar SASE platforms.
• Strong routing fundamentals: BGP, OSPF, dynamic routing over DIA, failover design.
• Experience managing a distributed circuit estate, including carrier management.
• Practical knowledge of load balancers, IPS, DPI and DLP technologies.
• IT/OT segmentation and Purdue model awareness for industrial networks.
• Experience leading firewall migrations or network refresh programs.

Responsabilidades

• Own WAN architecture direction and escalation lead for issues spanning firewalls and DPI.
• Oversee WAN connectivity across 50–60 DIA circuits and related devices.
• Manage and optimize NGFW, load balancers, and DPI/IPS implementations.
• Lead migration and cutover planning for firewall/network refresh projects.
• Ensure secure IT/OT segmentation and cross-location connectivity.

Conhecimentos

WAN architecture

Palo Alto NGFW

Prisma Access

Mist/Meraki Wireless

BGP/OSPF

IT/OT segmentation

Security policy design

SASE / cloud security

Firewall migration planning

Project leadership

Formação académica

Bachelor's degree in CS/Telecom/Elect Eng

PCNSE certification

CCNP Enterprise or CCIE

CWNA (certified wireless)

Ferramentas

Palo Alto XML API

Ansible

Python

GlobalProtect

Descrição da oferta de emprego

The Networks Engineer/ Architect – WAN is the senior technical lead for wide area network architecture and perimeter security estate. The role owns WAN design direction and acts as escalation lead for issues spanning firewalls, load balancing, and inline inspection and protection services — including the firewall boundary separating the IT and OT networks.

Key Responsibilities

Responsible for WAN architecture and lead for handling issues related to:

• WAN connectivity across an estate of approximately 50–60 Dedicated Internet Access (DIA) circuits.
• Next-Generation Firewalls (NGFW).
• Load balancers.
• Deep Packet Inspection (DPI).
• Intrusion Prevention Systems (IPS).
• Issues relating to the firewall separating the IT and OT networks.
• Oversee the administration, maintenance, troubleshooting, and optimization of Palo Alto SD-WAN, Prisma Access, and Global Protect remote access infrastructure
• Manage and support enterprise Mist and Meraki wireless environments, including ongoing maintenance, troubleshooting, performance optimization, and infrastructure upgrades

Required Skills & Experience

• Enterprise network engineering experience, with demonstrated ownership of WAN architecture at a multi-site organization.
• Expert-level Palo Alto NGFW experience: security policy design, App-ID, URL filtering, Threat Prevention, NAT, VPN and SCM (Strata Cloud Manager) for centralized management.
• Hands-on experience with Palo Alto Prisma Access or comparable SASE / cloud-delivered security platforms.
• Strong routing and WAN fundamentals: BGP, OSPF, dynamic routing over DIA circuits, path selection and failover design.
• Experience managing a distributed circuit estate at scale, including carrier management and escalation.
• Practical experience with load balancers, IPS, DPI and DLP technologies.
• Demonstrated understanding of IT/OT segmentation, Purdue model concepts and the security considerations of firewalling industrial control networks.
• Experience leading firewall migration or network refresh programmes, including cutover planning and rollback.
• Strong knowledge and hands‑on experience with Mist and Meraki enterprise wireless technologies, including configuration, administration, troubleshooting, performance optimization, and supporting reliable and secure wireless connectivity across multiple locations
• Professional working proficiency in English and Spanish.

Preferred Qualifications

• Exposure to SD-WAN design and deployment.
• Experience in a manufacturing or food production environment with plant‑floor network responsibilities.
• Familiarity with network automation and configuration management (Ansible, Python, Palo Alto XML API).
• Experience producing WAN architecture documentation and standards in a low‑documentation‑maturity environment.

Education & Certifications

• Bachelor's degree in Computer Science, Telecommunications, Electronics Engineering or a related discipline.
• Palo Alto Networks Certified Network Security Engineer (PCNSE) (strongly desirable).
• Cisco CCNP Enterprise or CCIE (desirable).
• Certified Wireless Network Administrator (desirable).