Lead Network Engineer

Location: Santa Fe, Mexico City (100% on-site)

Tential is seeking a Lead Network Security & Automation Engineer to help modernize large-scale enterprise networking toward Zero Trust Architecture and Infrastructure as Code. This role requires deep network-security expertise, strong automation and cloud-networking skills, and the ability to lead technical initiatives, mentor engineers, and improve the reliability, security, and programmability of global network infrastructure.

Responsibilities

• Zero Trust & Network Security: Architect, deploy, and scale Zero Trust Network Access solutions; design identity-based microsegmentation; manage SASE strategy; and serve as a subject-matter expert for Palo Alto Networks firewalls and Panorama.
• Network Automation & Source of Truth: Architect and maintain a centralized network source of truth using platforms such as NetBox or Nautobot, and drive Infrastructure as Code using Python, Ansible, and Terraform.
• Automation & CI/CD: Develop automated workflows, scripts, tools, and CI/CD pipelines that reduce manual configuration, prevent drift, and improve operational agility.
• Cloud Networking: Design and scale secure network topologies across AWS and GCP, including VPCs, Transit Gateways, routing, cloud-native security, and connectivity patterns aligned with Zero Trust requirements.
• Enterprise Network Operations: Manage and support physical and virtual network infrastructure, including Arista switching, Meraki wireless and network devices, and SD-WAN technologies.
• Application Delivery: Manage and optimize F5 BIG-IP technologies for load balancing, application delivery, and security.
• Monitoring & Troubleshooting: Use Checkmk and cloud-native observability tools to identify, diagnose, and resolve complex network performance and security incidents from campus infrastructure through cloud WAN connectivity.
• Resiliency & Vendor Collaboration: Work with ISPs and technology partners to improve network resiliency, availability, and performance across the enterprise footprint.
• Mentorship & Standards: Mentor junior network engineers, lead knowledge-sharing and peer reviews, and champion best practices in network programmability, documentation, and configuration quality.
• On-Call Support: Participate in a rotating on-call schedule to provide support for critical network infrastructure.

Required Qualifications

• 8+ years of progressive experience in large-scale enterprise network engineering, including significant experience with network automation and cloud implementation.
• Deep understanding of cloud-native networking constructs such as VPCs, Shared VPCs, Transit Gateways, Cloud Routers, ALB/NLB, and cloud WAF/security services.
• Expert-level experience with Palo Alto Networks firewalls, PAN-OS, and Panorama, including advanced features and troubleshooting.
• Deep hands-on experience with BGP routing in complex or global multi-circuit environments.
• Strong experience with Arista EOS and Meraki switches, access points, and MX devices.
• Experience with Silver Peak / Aruba EdgeConnect SD-WAN or comparable enterprise SD-WAN platforms.
• Proficiency with F5 BIG-IP technologies, including LTM and related application-delivery modules.
• Strong programming and automation experience using Python, Ansible, Terraform, or comparable tooling.
• Strong cloud-networking experience in AWS, GCP, or both.
• Extensive experience designing, implementing, and troubleshooting enterprise wireless networks, particularly Meraki Wi-Fi.
• Familiarity with network-monitoring platforms such as Checkmk.
• Excellent analytical, problem-solving, and troubleshooting skills.
• Strong written and verbal communication skills, including the ability to explain complex technical concepts to technical and non-technical audiences.
• Ability to work independently while also leading and collaborating within a fast-paced engineering team.

Preferred Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Relevant industry certifications such as PCNSE, CCNP, CCIE, or Meraki certifications.
• Experience with SASE, ZTNA, microsegmentation, and identity-centric network architectures at enterprise scale.