Senior Network Engineer
Hace 14 horas
Guadalajara, Sonora, México
Genpact
Jornada completa
Gratis con email o Google
Guarda esta oferta y sigue tu búsqueda
Crea una cuenta gratis para guardar empleos, crear alertas y volver a esta oferta desde tu panel.
Gratis con email o Google
Al continuar, aceptas nuestros Términos & Política de Privacidad.
Role Overview
The Networks Engineer/ Architect – WAN is the senior technical lead for wide area network architecture and perimeter security estate. The role owns WAN design direction and acts as escalation lead for issues spanning firewalls, load balancing, and inline inspection and protection services — including the firewall boundary separating the IT and OT networks.
Key Responsibilities
Responsible for WAN architecture and lead for handling issues related to:
• WAN connectivity across an estate of approximately 50–60 Dedicated Internet Access (DIA) circuits.
• Next-Generation Firewalls (NGFW).
• Load balancers.
• Deep Packet Inspection (DPI).
• Intrusion Prevention Systems (IPS).
• Data Loss Prevention (DLP).
• Issues relating to the firewall separating the IT and OT networks.
• Oversee the administration, maintenance, troubleshooting, and optimization of Palo Alto SD-WAN, Prisma Access, and Global Protect remote access infrastructure
• Manage and support enterprise Mist and Meraki wireless environments, including ongoing maintenance, troubleshooting, performance optimization, and infrastructure upgrades Required Skills &
Experience:
• Enterprise network engineering experience, with demonstrated ownership of WAN architecture at a multi-site organization.
• Expert-level Palo Alto NGFW
experience:
security policy design, App-ID, URL filtering, Threat Prevention, NAT, VPN and SCM (Strata Cloud Manager) for centralized management.
• Hands-on experience with Palo Alto Prisma Access or comparable SASE / cloud-delivered security platforms.
• Strong routing and WAN fundamentals: BGP, OSPF, dynamic routing over DIA circuits, path selection and failover design.
• Experience managing a distributed circuit estate at scale, including carrier management and escalation.
• Practical experience with load balancers, IPS, DPI and DLP technologies.
• Demonstrated understanding of IT/OT segmentation, Purdue model concepts and the security considerations of firewalling industrial control networks.
• Experience leading firewall migration or network refresh programmes, including cutover planning and rollback.
• Strong knowledge and hands-on experience with Mist and Meraki enterprise wireless technologies, including configuration, administration, troubleshooting, performance optimization, and supporting reliable and secure wireless connectivity across multiple locations
• Professional working proficiency in English and Spanish. Preferred
Qualifications:
• Exposure to SD-WAN design and deployment.
• Experience in a manufacturing or food production environment with plant-floor network responsibilities.
• Familiarity with network automation and configuration management (Ansible, Python, Palo Alto XML API).
• Experience producing WAN architecture documentation and standards in a low-documentation-maturity environment. Education & Certifications:
• Bachelor's degree in Computer Science, Telecommunications, Electronics Engineering or a related discipline.
• Palo Alto Networks Certified Network Security Engineer (PCNSE) (strongly desirable).
• Cisco CCNP Enterprise or CCIE (desirable).
• Certified Wireless Network Administrator (desirable).
• ITIL Foundation certification (desirable).
Key Responsibilities
Responsible for WAN architecture and lead for handling issues related to:
• WAN connectivity across an estate of approximately 50–60 Dedicated Internet Access (DIA) circuits.
• Next-Generation Firewalls (NGFW).
• Load balancers.
• Deep Packet Inspection (DPI).
• Intrusion Prevention Systems (IPS).
• Data Loss Prevention (DLP).
• Issues relating to the firewall separating the IT and OT networks.
• Oversee the administration, maintenance, troubleshooting, and optimization of Palo Alto SD-WAN, Prisma Access, and Global Protect remote access infrastructure
• Manage and support enterprise Mist and Meraki wireless environments, including ongoing maintenance, troubleshooting, performance optimization, and infrastructure upgrades Required Skills &
Experience:
• Enterprise network engineering experience, with demonstrated ownership of WAN architecture at a multi-site organization.
• Expert-level Palo Alto NGFW
experience:
security policy design, App-ID, URL filtering, Threat Prevention, NAT, VPN and SCM (Strata Cloud Manager) for centralized management.
• Hands-on experience with Palo Alto Prisma Access or comparable SASE / cloud-delivered security platforms.
• Strong routing and WAN fundamentals: BGP, OSPF, dynamic routing over DIA circuits, path selection and failover design.
• Experience managing a distributed circuit estate at scale, including carrier management and escalation.
• Practical experience with load balancers, IPS, DPI and DLP technologies.
• Demonstrated understanding of IT/OT segmentation, Purdue model concepts and the security considerations of firewalling industrial control networks.
• Experience leading firewall migration or network refresh programmes, including cutover planning and rollback.
• Strong knowledge and hands-on experience with Mist and Meraki enterprise wireless technologies, including configuration, administration, troubleshooting, performance optimization, and supporting reliable and secure wireless connectivity across multiple locations
• Professional working proficiency in English and Spanish. Preferred
Qualifications:
• Exposure to SD-WAN design and deployment.
• Experience in a manufacturing or food production environment with plant-floor network responsibilities.
• Familiarity with network automation and configuration management (Ansible, Python, Palo Alto XML API).
• Experience producing WAN architecture documentation and standards in a low-documentation-maturity environment. Education & Certifications:
• Bachelor's degree in Computer Science, Telecommunications, Electronics Engineering or a related discipline.
• Palo Alto Networks Certified Network Security Engineer (PCNSE) (strongly desirable).
• Cisco CCNP Enterprise or CCIE (desirable).
• Certified Wireless Network Administrator (desirable).
• ITIL Foundation certification (desirable).