Lead Network Engineer

Tential Solutions; Ciudad de México; On-site; MXN 900,000 - 1,800,000; Full time

Job summary

Tential Solutions seeks a Lead Network Security & Automation Engineer to modernize large-scale enterprise networking toward Zero Trust Architecture and Infrastructure as Code. You will lead initiatives, mentor engineers, and improve reliability, security, and programmability of global network infrastructure from Santa Fe, Mexico City, on-site.

Responsibilities include deploying ZTNA, building a centralized source of truth, driving IaC with Python/Ansible/Terraform, and designing secure cloud

Qualifications

• 8+ years of progressive experience in large-scale enterprise network engineering.
• Deep understanding of cloud-native networking constructs such as VPCs, Shared VPCs, Transit Gateways, Cloud Routers, ALB/NLB, and cloud WAF/security services.
• Expert-level experience with Palo Alto Networks firewalls, PAN-OS, and Panorama, including advanced features and troubleshooting.
• Deep hands-on experience with BGP routing in complex or global multi-circuit environments.
• Strong experience with Arista EOS and Meraki switches, access points, and MX devices.
• Experience with Silver Peak / Aruba EdgeConnect SD-WAN or comparable enterprise SD-WAN platforms.
• Proficiency with F5 BIG-IP technologies, including LTM and related application-delivery modules.
• Strong programming and automation experience using Python, Ansible, Terraform, or comparable tooling.
• Strong cloud-networking experience in AWS, GCP, or both.
• Extensive experience designing, implementing, and troubleshooting enterprise wireless networks, particularly Meraki Wi-Fi.
• Familiarity with network-monitoring platforms such as Checkmk.
• Excellent analytical, problem-solving, and troubleshooting skills.
• Strong written and verbal communication skills, including the ability to explain complex technical concepts to technical and non-technical audiences.
• Ability to work independently while also leading and collaborating within a fast-paced engineering team.

Responsibilities

• Zero Trust & Network Security: Architect, deploy, and scale Zero Trust Network Access solutions; design identity-based microsegmentation; manage SASE strategy; and serve as a subject-matter expert for Palo Alto Networks firewalls and Panorama.
• Network Automation & Source of Truth: Architect and maintain a centralized network source of truth using platforms such as NetBox or Nautobot, and drive Infrastructure as Code using Python, Ansible, and Terraform.
• Automation & CI/CD: Develop automated workflows, scripts, tools, and CI/CD pipelines that reduce manual configuration, prevent drift, and improve operational agility.
• Cloud Networking: Design and scale secure network topologies across AWS and GCP, including VPCs, Transit Gateways, routing, cloud-native security, and connectivity patterns aligned with Zero Trust requirements.
• Enterprise Network Operations: Manage and support physical and virtual network infrastructure, including Arista switching, Meraki wireless and network devices, and SD-WAN technologies.
• Application Delivery: Manage and optimize F5 BIG-IP technologies for load balancing, application delivery, and security.
• Monitoring & Troubleshooting: Use Checkmk and cloud-native observability tools to identify, diagnose, and resolve complex network performance and security incidents from campus infrastructure through cloud WAN connectivity.
• Resiliency & Vendor Collaboration: Work with ISPs and technology partners to improve network resiliency, availability, and performance across the enterprise footprint.
• Mentorship & Standards: Mentor junior network engineers, lead knowledge-sharing and peer reviews, and champion best practices in network programmability, documentation, and configuration quality.
• On-Call Support: Participate in a rotating on-call schedule to provide support for critical network infrastructure.

Skills

Zero Trust

Network Security

Automation Engineering

Cloud Networking

Python

Ansible

Terraform

Checkmk

BGP Routing

Arista EOS

Meraki SD-WAN

F5 BIG-IP

Palo Alto PAN-OS

PAN Panorama

SASE

ZTNA

Education

Bachelor's degree

Tools

Palo Alto Networks

Arista

Meraki

Checkmk

NetBox/Nautobot

AWS

GCP

Terraform

Job description

Location: Santa Fe, Mexico City (100% on-site)

Tential is seeking a Lead Network Security & Automation Engineer to help modernize large-scale enterprise networking toward Zero Trust Architecture and Infrastructure as Code. This role requires deep network-security expertise, strong automation and cloud-networking skills, and the ability to lead technical initiatives, mentor engineers, and improve the reliability, security, and programmability of global network infrastructure.

Responsibilities

• Zero Trust & Network Security: Architect, deploy, and scale Zero Trust Network Access solutions; design identity-based microsegmentation; manage SASE strategy; and serve as a subject-matter expert for Palo Alto Networks firewalls and Panorama.
• Network Automation & Source of Truth: Architect and maintain a centralized network source of truth using platforms such as NetBox or Nautobot, and drive Infrastructure as Code using Python, Ansible, and Terraform.
• Automation & CI/CD: Develop automated workflows, scripts, tools, and CI/CD pipelines that reduce manual configuration, prevent drift, and improve operational agility.
• Cloud Networking: Design and scale secure network topologies across AWS and GCP, including VPCs, Transit Gateways, routing, cloud-native security, and connectivity patterns aligned with Zero Trust requirements.
• Enterprise Network Operations: Manage and support physical and virtual network infrastructure, including Arista switching, Meraki wireless and network devices, and SD-WAN technologies.
• Application Delivery: Manage and optimize F5 BIG-IP technologies for load balancing, application delivery, and security.
• Monitoring & Troubleshooting: Use Checkmk and cloud-native observability tools to identify, diagnose, and resolve complex network performance and security incidents from campus infrastructure through cloud WAN connectivity.
• Resiliency & Vendor Collaboration: Work with ISPs and technology partners to improve network resiliency, availability, and performance across the enterprise footprint.
• Mentorship & Standards: Mentor junior network engineers, lead knowledge-sharing and peer reviews, and champion best practices in network programmability, documentation, and configuration quality.
• On-Call Support: Participate in a rotating on-call schedule to provide support for critical network infrastructure.

Required Qualifications

• 8+ years of progressive experience in large-scale enterprise network engineering, including significant experience with network automation and cloud implementation.
• Deep understanding of cloud-native networking constructs such as VPCs, Shared VPCs, Transit Gateways, Cloud Routers, ALB/NLB, and cloud WAF/security services.
• Expert-level experience with Palo Alto Networks firewalls, PAN-OS, and Panorama, including advanced features and troubleshooting.
• Deep hands-on experience with BGP routing in complex or global multi-circuit environments.
• Strong experience with Arista EOS and Meraki switches, access points, and MX devices.
• Experience with Silver Peak / Aruba EdgeConnect SD-WAN or comparable enterprise SD-WAN platforms.
• Proficiency with F5 BIG-IP technologies, including LTM and related application-delivery modules.
• Strong programming and automation experience using Python, Ansible, Terraform, or comparable tooling.
• Strong cloud-networking experience in AWS, GCP, or both.
• Extensive experience designing, implementing, and troubleshooting enterprise wireless networks, particularly Meraki Wi-Fi.
• Familiarity with network-monitoring platforms such as Checkmk.
• Excellent analytical, problem-solving, and troubleshooting skills.
• Strong written and verbal communication skills, including the ability to explain complex technical concepts to technical and non-technical audiences.
• Ability to work independently while also leading and collaborating within a fast-paced engineering team.

Preferred Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Relevant industry certifications such as PCNSE, CCNP, CCIE, or Meraki certifications.
• Experience with SASE, ZTNA, microsegmentation, and identity-centric network architectures at enterprise scale.