Key Responsibilities

Responsible for WAN architecture and lead for handling issues related to:

- WAN connectivity across an estate of approximately 50-60 Dedicated Internet Access (DIA) circuits.
- Next-Generation Firewalls (NGFW).
- Load balancers.
- Deep Packet Inspection (DPI).
- Intrusion Prevention Systems (IPS).
- Issues relating to the firewall separating the IT and OT networks.
- Oversee the administration, maintenance, troubleshooting, and optimization of Palo Alto SD-WAN, Prisma Access, and General Protect remote access infrastructure
- Manage and support enterprise Mist and Meraki wireless environments, including ongoing maintenance, troubleshooting, performance optimization, and infrastructure upgrades
- Palo Alto is the go-forward perimeter standard, with Prisma Access providing secure remote connectivity. Cisco ASA firewalls remain in the estate pending the refresh.
- The Cisco ASA to Palo Alto NGFW migration is completed, so no additional project support is required from this role beyond business-as-usual operations.
- The Network team is supported by the Client Services team, which handles last-mile networking, servers, the OT environment and end-user device issues. Client Services staff understand PLCs and manufacturing equipment, cover Ethernet, basic networking and basic wireless, and manage iPads and handheld devices.

Required Skills & Experience

- 8-12 years of enterprise network engineering experience, with demonstrated ownership of WAN architecture at a multi-site organization.
- Expert-level Palo Alto NGFW experience: security policy design, App-ID, URL filtering, Threat Prevention, NAT, VPN and SCM (Strata Cloud Manager) for centralized management.




- Hands-on experience with Palo Alto Prisma Access or comparable SASE / cloud-delivered security platforms.
- Strong routing and WAN fundamentals: BGP, OSPF, dynamic routing over DIA circuits, path selection and failover design.
- Experience managing a distributed circuit estate at scale, including carrier management and escalation.
- Practical experience with load balancers, IPS, DPI and DLP technologies.
- Demonstrated understanding of IT/OT segmentation, Purdue model concepts and the security considerations of firewalling industrial control networks.
- Experience leading firewall migration or network refresh programmes, including cutover planning and rollback.
- Strong knowledge and hands-on experience with Mist and Meraki enterprise wireless technologies, including configuration, administration, troubleshooting, performance optimization, and supporting reliable and secure wireless connectivity across multiple locations
- Professional working proficiency in English and Spanish.

Preferred Qualifications

- Exposure to SD-WAN design and deployment.
- Experience in a manufacturing or food production environment with plant-floor network responsibilities.
- Familiarity with network automation and configuration management (Ansible, Python, Palo Alto XML API).
- Experience producing WAN architecture documentation and standards in a low-documentation-maturity environment.

Education & Certifications

- Bachelor's degree in Computer Science, Telecommunications, Electronics Engineering or a related discipline.
- Palo Alto Networks Certified Network Security Engineer (PCNSE) (strongly desirable).
- Cisco CCNP Enterprise or CCIE (desirable).
- Certified Wireless Network Administrator (desirable).

📌 Network Engineer (Centro)
🏢 Pyramid Consulting
📍 Centro