Lead Network Engineer

Location:
Santa Fe, Mexico City (100% on-site) Tential is seeking a Lead Network Security & Automation Engineer to help modernize large-scale enterprise networking toward Zero Trust Architecture and Infrastructure as Code. This role requires deep network-security expertise, strong automation and cloud-networking skills, and the ability to lead technical initiatives, mentor engineers, and improve the reliability, security, and programmability of global network infrastructure. Responsibilities Zero Trust & Network Security: Architect, deploy, and scale Zero Trust Network Access solutions; design identity-based microsegmentation; manage SASE strategy; and serve as a subject-matter expert for Palo Alto Networks firewalls and Panorama. Network Automation & Source of Truth: Architect and maintain a centralized network source of truth using platforms such as NetBox or Nautobot, and drive Infrastructure as Code using Python, Ansible, and Terraform. Automation & CI/CD: Develop automated workflows, scripts, tools, and CI/CD pipelines that reduce manual configuration, prevent drift, and improve operational agility. Cloud Networking: Design and scale secure network topologies across AWS and GCP, including VPCs, Transit Gateways, routing, cloud-native security, and connectivity patterns aligned with Zero Trust requirements. Enterprise Network Operations: Manage and support physical and virtual network infrastructure, including Arista switching, Meraki wireless and network devices, and SD-WAN technologies. Application Delivery: Manage and optimize F5 BIG-IP technologies for load balancing, application delivery, and security. Monitoring & Troubleshooting: Use Checkmk and cloud-native observability tools to identify, diagnose, and resolve complex network performance and security incidents from campus infrastructure through cloud WAN connectivity. Resiliency & Vendor Collaboration: Work with ISPs and technology partners to improve network resiliency, availability, and performance across the enterprise footprint. Mentorship & Standards: Mentor junior network engineers, lead knowledge-sharing and peer reviews, and champion best practices in network programmability, documentation, and configuration quality. On-Call Support: Participate in a rotating on-call schedule to provide support for critical network infrastructure. Required Qualifications 8+ years of progressive experience in large-scale enterprise network engineering, including significant experience with network automation and cloud implementation. Deep understanding of cloud-native networking constructs such as VPCs, Shared VPCs, Transit Gateways, Cloud Routers, ALB/NLB, and cloud WAF/security services. Expert-level experience with Palo Alto Networks firewalls, PAN-OS, and Panorama, including advanced features and troubleshooting. Deep hands-on experience with BGP routing in complex or global multi-circuit environments. Strong experience with Arista EOS and Meraki switches, access points, and MX devices. Experience with Silver Peak / Aruba EdgeConnect SD-WAN or comparable enterprise SD-WAN platforms. Proficiency with F5 BIG-IP technologies, including LTM and related application-delivery modules. Strong programming and automation experience using Python, Ansible, Terraform, or comparable tooling. Strong cloud-networking experience in AWS, GCP, or both. Extensive experience designing, implementing, and troubleshooting enterprise wireless networks, particularly Meraki Wi-Fi. Familiarity with network-monitoring platforms such as Checkmk. Excellent analytical, problem-solving, and troubleshooting skills. Strong written and verbal communication skills, including the ability to explain complex technical concepts to technical and non-technical audiences. Ability to work independently while also leading and collaborating within a fast-paced engineering team. Preferred Qualifications Bachelor's degree in Computer Science, Information Technology, or a related field. Relevant industry certifications such as PCNSE, CCNP, CCIE, or Meraki certifications. Experience with SASE, ZTNA, microsegmentation, and identity-centric network architectures at enterprise scale.