Networks Engineer – WAN

Pyramid Consulting, Inc; Región Centro; Hybrid; MXN 900,000 - 1,200,000; Full time

Job summary

Pyramid Consulting, Inc. seeks a senior Networks Engineer – WAN to own the WAN architecture and security estate for a multi-site organization. You will lead NGFW design, WAN connectivity, and secure remote access strategies while coordinating with Client Services for last-mile support.

Requirements include 8–12 years of enterprise network experience, expert Palo Alto NGFW skills, and familiarity with Mist/Meraki wireless. Bilingual English/Spanish preferred.

Qualifications

• 8–12 years of enterprise network engineering experience with WAN ownership.
• Expert Palo Alto NGFW: policy design, App-ID, URL filtering, Threat Prevention, NAT, VPN.
• Hands-on with Prisma Access or similar SASE/cloud security platforms.
• Strong routing fundamentals: BGP, OSPF, DIA, failover design.
• Experience managing a distributed DIA circuit estate and carriers.
• Hands-on with load balancers, IPS, DPI, and DLP technologies.
• Understanding IT/OT segmentation and Purdue model security considerations.
• Experience leading firewall migrations or network refresh programs.

Responsibilities

• Own WAN architecture and lead cross-site issue resolution across NGFW, DPI, and DPI
• Oversee Palo Alto SD-WAN, Prisma Access, and Global Protect remote access infra
• Manage Mist and Meraki wireless environments; optimize performance and upgrades
• Ensure firewall boundary protection between IT and OT networks, including migration work
• Coordinate cutover planning and rollback for network refresh projects
• Collaborate with Client Services for last-mile networking and OT environment support

Skills

WAN architecture

Palo Alto NGFW

Prisma Access

BGP

OSPF

DIA circuits

NGFW migration

Mist & Meraki wireless

IT/OT segmentation

English

Spanish

Education

Bachelor's degree in Computer Science / Telecommunications / Electronics Engineering

PCNSE

CCNP Enterprise or CCIE

CWNA

Job description

Location: Hybrid in Guadalajara, Jalisco, Mexico

Job Description

The Networks Engineer – WAN is the senior technical lead for THE CLIENT's wide area network architecture and perimeter security estate. The role owns WAN design direction and acts as escalation lead for issues spanning firewalls, load balancing, and inline inspection and protection services — including the firewall boundary separating the IT and OT networks.

One position is being established in Mexico.

Key Responsibilities

• Responsible for WAN architecture and lead for handling issues related to:
• WAN connectivity across an estate of approximately 50–60 Dedicated Internet Access (DIA) circuits.
• Next-Generation Firewalls (NGFW).
• Load balancers.
• Deep Packet Inspection (DPI).
• Intrusion Prevention Systems (IPS).
• Issues relating to the firewall separating the IT and OT networks.
• Oversee the administration, maintenance, troubleshooting, and optimization of Palo Alto SD-WAN, Prisma Access, and Global Protect remote access infrastructure
• Manage and support enterprise Mist and Meraki wireless environments, including ongoing maintenance, troubleshooting, performance optimization, and infrastructure upgrades
• Palo Alto is the go-forward perimeter standard, with Prisma Access providing secure remote connectivity. Cisco ASA firewalls remain in the estate pending the refresh.
• The Cisco ASA to Palo Alto NGFW migration is completed, so no additional project support is required from this role beyond business-as-usual operations.
• The Network team is supported by the Client Services team, which handles last-mile networking, servers, the OT environment and end-user device issues. Client Services staff understand PLCs and manufacturing equipment, cover Ethernet, basic networking and basic wireless, and manage iPads and handheld devices.

Required Skills & Experience

• 8–12 years of enterprise network engineering experience, with demonstrated ownership of WAN architecture at a multi-site organization.
• Expert-level Palo Alto NGFW experience: security policy design, App-ID, URL filtering, Threat Prevention, NAT, VPN and SCM (Strata Cloud Manager) for centralized management.
• Hands-on experience with Palo Alto Prisma Access or comparable SASE / cloud-delivered security platforms.
• Strong routing and WAN fundamentals: BGP, OSPF, dynamic routing over DIA circuits, path selection and failover design.
• Experience managing a distributed circuit estate at scale, including carrier management and escalation.
• Practical experience with load balancers, IPS, DPI and DLP technologies.
• Demonstrated understanding of IT/OT segmentation, Purdue model concepts and the security considerations of firewalling industrial control networks.
• Experience leading firewall migration or network refresh programmes, including cutover planning and rollback.
• Strong knowledge and hands-on experience with Mist and Meraki enterprise wireless technologies, including configuration, administration, troubleshooting, performance optimization, and supporting reliable and secure wireless connectivity across multiple locations
• Professional working proficiency in English and Spanish.

Preferred Qualifications

• Exposure to SD-WAN design and deployment.
• Experience in a manufacturing or food production environment with plant-floor network responsibilities.
• Familiarity with network automation and configuration management (Ansible, Python, Palo Alto XML API).
• Experience producing WAN architecture documentation and standards in a low-documentation-maturity environment.

Education & Certifications

• Bachelor's degree in Computer Science, Telecommunications, Electronics Engineering or a related discipline.
• Palo Alto Networks Certified Network Security Engineer (PCNSE) (strongly desirable).
• Cisco CCNP Enterprise or CCIE (desirable).
• Certified Wireless Network Administrator (desirable).