Network Engineer

Pyramid Consulting, Inc; Región Centro; On-site; MXN 600,000 - 1,000,000; Full time

Job summary

Pyramid Consulting, Inc. is seeking an experienced network engineering professional to own the WAN architecture for a multi-site environment.

You will lead critical security infrastructure including Palo Alto NGFW, Prisma Access, and GlobalProtect remote access, while ensuring robust IT/OT segmentation and high reliability across the estate. You will also manage Mist and Meraki wireless deployments, drive optimization, and participate in firewall migrations and network refresh programs to

Qualifications

• 8-12 years of enterprise network engineering experience.
• Expert-level Palo Alto NGFW experience: security policy design, App-ID, URL filtering, Threat Prevention, NAT, VPN and SCM (Strata Cloud Manager).
• Hands-on with Palo Alto Prisma Access or comparable SASE/security platforms.
• Strong routing and WAN fundamentals: BGP, OSPF, dynamic routing over DIA circuits, path selection and failover design.
• Experience managing a distributed circuit estate, carrier management and escalation.
• Practical experience with load balancers, IPS, DPI and DLP technologies.
• Understanding IT/OT segmentation, Purdue model concepts and industrial control network security.
• Experience leading firewall migration or network refresh programmes, including cutover planning and rollback.
• Knowledge of Mist and Meraki enterprise wireless tech and deployments.
• Proficiency in English and Spanish.

Responsibilities

• Own WAN architecture for a multi-site organization and lead related issue resolution.
• Oversee maintenance, troubleshooting, and optimization of Palo Alto SD-WAN, Prisma Access, and GlobalProtect remote access.
• Manage and support Mist and Meraki wireless environments across locations, including upgrades and performance tuning.
• Support firewall migration and network refresh programmes with planning and rollback execution.
• Collaborate with Client Services to align last-mile networking and OT environment needs.

Skills

Palo Alto NGFW

Prisma Access

WAN architecture

Mist & Meraki wireless

BGP & OSPF

IT/OT segmentation

NGFW migration

Cloud security platforms

Load balancers / IPS / DPI / DLP

English & Spanish proficiency

Education

Bachelor's degree in CS/Telecom/Engineering

PCNSE certification

CCNP Enterprise or CCIE (desirable)

CWNA certification (desirable)

Tools

Ansible

Python

Palo Alto XML API

Job description

Key Responsibilities

Responsible for WAN architecture and lead for handling issues related to:

• WAN connectivity across an estate of approximately 50-60 Dedicated Internet Access (DIA) circuits.
• Next-Generation Firewalls (NGFW).
• Load balancers.
• Deep Packet Inspection (DPI).
• Intrusion Prevention Systems (IPS).
• Issues relating to the firewall separating the IT and OT networks.
• Oversee the administration, maintenance, troubleshooting, and optimization of Palo Alto SD-WAN, Prisma Access, and Global Protect remote access infrastructure
• Manage and support enterprise Mist and Meraki wireless environments, including ongoing maintenance, troubleshooting, performance optimization, and infrastructure upgrades
• Palo Alto is the go-forward perimeter standard, with Prisma Access providing secure remote connectivity. Cisco ASA firewalls remain in the estate pending the refresh.
• The Cisco ASA to Palo Alto NGFW migration is completed, so no additional project support is required from this role beyond business-as-usual operations.
• The Network team is supported by the Client Services team, which handles last-mile networking, servers, the OT environment and end-user device issues. Client Services staff understand PLCs and manufacturing equipment, cover Ethernet, basic networking and basic wireless, and manage iPads and handheld devices.

Required Skills & Experience

• 8-12 years of enterprise network engineering experience, with demonstrated ownership of WAN architecture at a multi-site organization.
• Expert-level Palo Alto NGFW experience: security policy design, App-ID, URL filtering, Threat Prevention, NAT, VPN and SCM (Strata Cloud Manager) for centralized management.
• Hands-on experience with Palo Alto Prisma Access or comparable SASE / cloud-delivered security platforms.
• Strong routing and WAN fundamentals: BGP, OSPF, dynamic routing over DIA circuits, path selection and failover design.
• Experience managing a distributed circuit estate at scale, including carrier management and escalation.
• Practical experience with load balancers, IPS, DPI and DLP technologies.
• Demonstrated understanding of IT/OT segmentation, Purdue model concepts and the security considerations of firewalling industrial control networks.
• Experience leading firewall migration or network refresh programmes, including cutover planning and rollback.
• Strong knowledge and hands-on experience with Mist and Meraki enterprise wireless technologies, including configuration, administration, troubleshooting, performance optimization, and supporting reliable and secure wireless connectivity across multiple locations
• Professional working proficiency in English and Spanish.

Preferred Qualifications

• Exposure to SD-WAN design and deployment.
• Experience in a manufacturing or food production environment with plant-floor network responsibilities.
• Familiarity with network automation and configuration management (Ansible, Python, Palo Alto XML API).
• Experience producing WAN architecture documentation and standards in a low-documentation-maturity environment.

Education & Certifications

• Bachelor's degree in Computer Science, Telecommunications, Electronics Engineering or a related discipline.
• Palo Alto Networks Certified Network Security Engineer (PCNSE) (strongly desirable).
• Cisco CCNP Enterprise or CCIE (desirable).
• Certified Wireless Network Administrator (desirable).