location: santa fe, mexico city (100% on-site)

tential is seeking a lead network security & automation engineer to help modernize large-scale enterprise networking toward zero trust architecture and infrastructure as code. This role requires deep network-security expertise, strong automation and cloud-networking skills, and the ability to lead technical initiatives, mentor engineers, and improve the reliability, security, and programmability of integral network infrastructure.

responsibilities zero trust & network security: architect, deploy, and scale zero trust network access solutions; design identity-based microsegmentation; manage sase strategy; and serve as a subject-matter expert for palo alto networks firewalls and panorama. Network automation & source of truth: architect and maintain a centralized network source of truth using platforms such as net box or nautobot, and drive infrastructure as code using python, ansible, and terraform. Automation & ci/cd: develop automated workflows, scripts, tools, and ci/cd pipelines that reduce manual configuration, prevent drift, and improve operational agility. Cloud networking: design and scale secure network topologies across aws and gcp, including vpcs, transit gateways, routing, cloud-native security, and connectivity patterns aligned with zero trust requirements. Enterprise network operations: manage and support physical and virtual network infrastructure, including arista switching, meraki wireless and network devices, and sd-wan technologies. Application delivery: manage and optimize f5 big-ip technologies for load balancing, application delivery, and security. Monitoring & troubleshooting: use checkmk and cloud-native observability tools to identify, diagnose, and resolve complex network performance and security incidents from campus infrastructure through cloud wan connectivity. Resiliency & vendor collaboration: work with isps and technology partners to improve network resiliency, availability, and performance across the enterprise footprint. Mentorship & standards:



mentor junior network engineers, lead knowledge-sharing and peer reviews, and champion best practices in network programmability, documentation, and configuration quality. On-call support: participate in a rotating on-call schedule to provide support for critical network infrastructure. Required qualifications 8+ years of progressive experience in large-scale enterprise network engineering, including significant experience with network automation and cloud implementation. Deep understanding of cloud-native networking constructs such as vpcs, shared vpcs, transit gateways, cloud routers, alb/nlb, and cloud waf/security services. Expert-level experience with palo alto networks firewalls, pan-os, and panorama, including advanced features and troubleshooting. Deep hands-on experience with bgp routing in complex or global multi-circuit environments. Strong experience with arista eos and meraki switches, access points, and mx devices. Experience with silver peak / aruba edge connect sd-wan or comparable enterprise sd-wan platforms. Proficiency with f5 big-ip technologies, including ltm and related application-delivery modules. Strong programming and automation experience using python, ansible, terraform, or comparable tooling. Strong cloud-networking experience in aws, gcp, or both. Extensive experience designing, implementing, and troubleshooting enterprise wireless networks, particularly meraki wi-fi. Familiarity with network-monitoring platforms such as checkmk. Excellent analytical, problem-solving, and troubleshooting skills. Strong written and verbal communication skills, including the ability to explain complex technical concepts to technical and non-technical audiences. Ability to work independently while also leading and collaborating within a fast-paced engineering team. Preferred qualifications bachelor's degree in computer science, information technology, or a related field. Relevant industry certifications such as pcnse, ccnp, ccie, or meraki certifications. Experience with sase, ztna, microsegmentation, and identity-centric network architectures at enterprise scale. #j-18808-ljbffr

📌 Lead network engineer (Ciudad de México)
🏢 Tential Solutions
📍 Ciudad de México