Location: Santa Fe, Mexico City (100% on-site)

Tential is seeking a Lead Network Security & Automation Engineer to help modernize large-scale enterprise networking toward Zero Trust Architecture and Infrastructure as Code. This role requires deep network-security expertise, strong automation and cloud-networking skills, and the ability to lead technical initiatives, mentor engineers, and improve the reliability, security, and programmability of global network infrastructure.

Responsibilities

- Zero Trust & Network Security: Architect, deploy, and scale Zero Trust Network Access solutions; design identity-based microsegmentation; manage SASE strategy; and serve as a subject-matter expert for Palo Alto Networks firewalls and Panorama.
- Network Automation & Source of Truth: Architect and maintain a centralized network source of truth using platforms such as NetBox or Nautobot, and drive Infrastructure as Code using Python, Ansible, and Terraform.
- Automation & CI/CD: Develop automated workflows, scripts, tools, and CI/CD pipelines that reduce manual configuration, prevent drift, and improve operational agility.
- Cloud Networking: Design and scale secure network topologies across AWS and GCP, including VPCs, Transit Gateways, routing, cloud-native security, and connectivity patterns aligned with Zero Trust requirements.
- Enterprise Network Operations: Manage and support physical and virtual network infrastructure, including Arista switching, Meraki wireless and network devices, and SD-WAN technologies.
- Application Delivery: Manage and optimize F5 BIG-IP technologies for load balancing, application delivery, and security.
- Monitoring & Troubleshooting: Use Checkmk and cloud-native observability tools to identify, diagnose, and resolve complex network performance and security incidents from campus infrastructure through cloud WAN connectivity.
- Resiliency & Vendor Collaboration: Work with ISPs and technology partners to improve network resiliency, availability, and performance across the enterprise footprint.
- Mentorship & Standards:



Mentor junior network engineers, lead knowledge-sharing and peer reviews, and champion best practices in network programmability, documentation, and configuration quality.
- On-Call Support: Participate in a rotating on-call schedule to provide support for critical network infrastructure.

Required Qualifications

- 8+ years of progressive experience in large-scale enterprise network engineering, including significant experience with network automation and cloud implementation.
- Deep understanding of cloud-native networking constructs such as VPCs, Shared VPCs, Transit Gateways, Cloud Routers, ALB/NLB, and cloud WAF/security services.
- Expert-level experience with Palo Alto Networks firewalls, PAN-OS, and Panorama, including advanced features and troubleshooting.
- Deep hands-on experience with BGP routing in complex or general multi-circuit environments.
- Strong experience with Arista EOS and Meraki switches, access points, and MX devices.
- Experience with Silver Peak / Aruba EdgeConnect SD-WAN or comparable enterprise SD-WAN platforms.
- Proficiency with F5 BIG-IP technologies, including LTM and related application-delivery modules.
- Strong programming and automation experience using Python, Ansible, Terraform, or comparable tooling.
- Strong cloud-networking experience in AWS, GCP, or both.
- Extensive experience designing, implementing, and troubleshooting enterprise wireless networks, particularly Meraki Wi-Fi.
- Familiarity with network-monitoring platforms such as Checkmk.
- Excellent analytical, problem-solving, and troubleshooting skills.
- Strong written and verbal communication skills, including the ability to explain complex technical concepts to technical and non-technical audiences.
- Ability to work independently while also leading and collaborating within a fast-paced engineering team.

Preferred Qualifications

- Bachelor's degree in Computer Science, Information Technology, or a related field.
- Relevant industry certifications such as PCNSE, CCNP, CCIE, or Meraki certifications.
- Experience with SASE, ZTNA, microsegmentation, and identity-centric network architectures at enterprise scale.

📌 Lead Network Engineer (Ciudad de México)
🏢 Tential Solutions
📍 Ciudad de México