HIRING || Network Engineer || Guadalajara

Key Responsibilities

Responsible for WAN architecture and lead for handling issues related to:

- WAN connectivity across an estate of approximately 50–60 Dedicated Internet Access (DIA) circuits.
- Next-Generation Firewalls (NGFW).
- Load balancers.
- Deep Packet Inspection (DPI).
- Intrusion Prevention Systems (IPS).
- Data Loss Prevention (DLP).
- Issues relating to the firewall separating the IT and OT networks.
- Oversee the administration, maintenance, troubleshooting, and optimization of Palo Alto SD-WAN, Prisma Access, and Integral Protect remote access infrastructure
- Manage and support enterprise Mist and Meraki wireless environments, including ongoing maintenance, troubleshooting, performance optimization, and infrastructure upgrades

Environment & Engagement Context

- Palo Alto is the go-forward perimeter standard, with Prisma Access providing secure remote connectivity. Cisco ASA firewalls remain in the estate pending the refresh.
- The Cisco ASA to Palo Alto NGFW migration is completed, so no additional project support is required from this role beyond business-as-usual operations.
- The Network team is supported by the Client Services team, which handles last-mile networking, servers, the OT environment and end-user device issues. Client Services staff understand PLCs and manufacturing equipment, cover Ethernet, basic networking and basic wireless, and manage iPads and handheld devices.

Required Skills & Experience †

- 8–12 years of enterprise network engineering experience, with demonstrated ownership of WAN architecture at a multi-site organization.
- Expert-level Palo Alto NGFW experience: security policy design, App-ID, URL filtering, Threat Prevention, NAT, VPN and SCM (Strata Cloud Manager)



for centralized management.
- Hands-on experience with Palo Alto Prisma Access or comparable SASE / cloud-delivered security platforms.
- Strong routing and WAN fundamentals: BGP, OSPF, dynamic routing over DIA circuits, path selection and failover design.
- Experience managing a distributed circuit estate at scale, including carrier management and escalation.
- Practical experience with load balancers, IPS, DPI and DLP technologies.
- Demonstrated understanding of IT/OT segmentation, Purdue model concepts and the security considerations of firewalling industrial control networks.
- Experience leading firewall migration or network refresh programmes, including cutover planning and rollback.
- Strong knowledge and hands-on experience with Mist and Meraki enterprise wireless technologies, including configuration, administration, troubleshooting, performance optimization, and supporting reliable and secure wireless connectivity across multiple locations
- Professional working proficiency in English and Spanish.

Preferred Qualifications †

- Exposure to SD-WAN design and deployment.
- Experience in a manufacturing or food production environment with plant-floor network responsibilities.
- Familiarity with network automation and configuration management (Ansible, Python, Palo Alto XML API).
- Experience producing WAN architecture documentation and standards in a low-documentation-maturity environment.

Education & Certifications †

- Bachelor's degree in Computer Science, Telecommunications, Electronics Engineering or a related discipline.
- Palo Alto Networks Certified Network Security Engineer (PCNSE) (strongly desirable).
- Cisco CCNP Enterprise or CCIE (desirable).
- Certified Wireless Network Administrator (desirable).
- ITIL Foundation certification (desirable).

📌 Network Engineer (Guadalajara)
🏢 Pyramid Consulting
📍 Guadalajara