Location: Santa Fe, Mexico City (100% on-site)

Tential is seeking a Lead Network Security & Automation Engineer to help modernize large-scale enterprise networking toward Zero Trust Architecture and Infrastructure as Code. This role requires deep network-security expertise, strong automation and cloud-networking skills, and the ability to lead technical initiatives, mentor engineers, and improve the reliability, security, and programmability of global network infrastructure.

Responsibilities

Zero Trust & Network Security: Architect, deploy, and scale Zero Trust Network Access solutions; design identity-based microsegmentation; manage SASE strategy; and serve as a subject-matter expert for Palo Alto Networks firewalls and Panorama.

Network Automation & Source of Truth: Architect and maintain a centralized network source of truth using platforms such as NetBox or Nautobot, and drive Infrastructure as Code using Python, Ansible, and Terraform.

Automation & CI/CD: Develop automated workflows, scripts, tools, and CI/CD pipelines that reduce manual configuration, prevent drift, and improve operational agility.

Cloud Networking: Design and scale secure network topologies across AWS and GCP, including VPCs, Transit Gateways, routing, cloud-native security, and connectivity patterns aligned with Zero Trust requirements.

Enterprise Network Operations: Manage and support physical and virtual network infrastructure, including Arista switching, Meraki wireless and network devices, and SD-WAN technologies.

Application Delivery:



Manage and optimize F5 BIG-IP technologies for load balancing, application delivery, and security.

Monitoring & Troubleshooting: Use Checkmk and cloud-native observability tools to identify, diagnose, and resolve complex network performance and security incidents from campus infrastructure through cloud WAN connectivity.

Resiliency & Vendor Collaboration: Work with ISPs and technology partners to improve network resiliency, availability, and performance across the enterprise footprint.

Mentorship & Standards: Mentor junior network engineers, lead knowledge-sharing and peer reviews, and champion best practices in network programmability, documentation, and configuration quality.

On-Call Support: Participate in a rotating on-call schedule to provide support for critical network infrastructure.

Required Qualifications

8+ years of progressive experience in large-scale enterprise network engineering, including significant experience with network automation and cloud implementation.

Deep understanding of cloud-native networking constructs such as VPCs, Shared VPCs, Transit Gateways, Cloud Routers, ALB/NLB, and cloud WAF/security services.

Expert-level experience with Palo Alto Networks firewalls,



PAN-OS, and Panorama, including advanced features and troubleshooting.

Deep hands-on experience with BGP routing in complex or integral multi-circuit environments.

Strong experience with Arista EOS and Meraki switches, access points, and MX devices.

Experience with Silver Peak / Aruba EdgeConnect SD-WAN or comparable enterprise SD-WAN platforms.

Proficiency with F5 BIG-IP technologies, including LTM and related application-delivery modules.

Strong programming and automation experience using Python, Ansible, Terraform, or comparable tooling.

Strong cloud-networking experience in AWS, GCP, or both.

Extensive experience designing, implementing, and troubleshooting enterprise wireless networks, particularly Meraki Wi-Fi.

Familiarity with network-monitoring platforms such as Checkmk.

Excellent analytical, problem-solving, and troubleshooting skills.

Strong written and verbal communication skills, including the ability to explain complex technical concepts to technical and non-technical audiences.

Ability to work independently while also leading and collaborating within a fast-paced engineering team.

Preferred Qualifications

Bachelor's degree in Computer Science, Information Technology, or a related field.

Relevant industry certifications such as PCNSE, CCNP, CCIE, or Meraki certifications.

Experience with SASE, ZTNA, microsegmentation, and identity-centric network architectures at enterprise scale.

#J-18808-Ljbffr

📌 Lead Network Engineer (Nezahualcóyotl)
🏢 Tential Solutions
📍 Nezahualcóyotl