Key Responsibilities
Responsible for WAN architecture and lead for handling issues related to:WAN connectivity across an estate of approximately * Dedicated Internet Access (DIA) circuits.
Next-Generation Firewalls (NGFW).
Load balancers.
Deep Packet Inspection (DPI).
Intrusion Prevention Systems (IPS).
Issues relating to the firewall separating the IT and OT networks.
Oversee the administration, maintenance, troubleshooting, and optimization of Palo Alto SD-WAN, Prisma Access, and General Protect remote access infrastructureManage and support enterprise Mist and Meraki wireless environments, including ongoing maintenance, troubleshooting, performance optimization, and infrastructure upgradesPalo Alto is the go-forward perimeter standard, with Prisma Access providing secure remote connectivity.
Cisco ASA firewalls remain in the estate pending the refresh.
The Cisco ASA to Palo Alto NGFW migration is completed, so no additional project support is required from this role beyond business-as-usual operations.
The Network team is supported by the Client Services team, which handles last-mile networking, servers, the OT environment and end-user device issues.
Client Services staff understand PLCs and manufacturing equipment, cover Ethernet, basic networking and basic wireless, and manage iPads and handheld devices.
Required Skills & Experience8-12 years of enterprise network engineering experience, with demonstrated ownership of WAN architecture at a multi-site organization.
Expert-level Palo Alto NGFW

experience:
security policy design, App-ID, URL filtering, Threat Prevention, NAT, VPN and SCM (Strata Cloud Manager) for centralized management.




Hands-on experience with Palo Alto Prisma Access or comparable SASE / cloud-delivered security platforms.
Strong routing and WAN fundamentals: BGP, OSPF, dynamic routing over DIA circuits, path selection and failover design.
Experience managing a distributed circuit estate at scale, including carrier management and escalation.
Practical experience with load balancers, IPS, DPI and DLP technologies.
Demonstrated understanding of IT/OT segmentation, Purdue model concepts and the security considerations of firewalling industrial control networks.
Experience leading firewall migration or network refresh programmes, including cutover planning and rollback.
Strong knowledge and hands-on experience with Mist and Meraki enterprise wireless technologies, including configuration, administration, troubleshooting, performance optimization, and supporting reliable and secure wireless connectivity across multiple locationsProfessional working proficiency in English and Spanish.
Preferred QualificationsExposure to SD-WAN design and deployment.
Experience in a manufacturing or food production environment with plant-floor network responsibilities.
Familiarity with network automation and configuration management (Ansible, Python, Palo Alto XML API).
Experience producing WAN architecture documentation and standards in a low-documentation-maturity environment.
Education & CertificationsBachelor's degree in Computer Science, Telecommunications, Electronics Engineering or a related discipline.
Palo Alto Networks Certified Network Security Engineer (PCNSE) (strongly desirable).
Cisco CCNP Enterprise or CCIE (desirable).
Certified Wireless Network Administrator (desirable).
#J-*-Ljbffr

📌 Network Engineer (México)
🏢 Pyramid Consulting
📍 México