Lead Network Engineer

We are seeking a Lead Network Engineer to design, implement, and maintain firewall automation, network connectivity, and IPAM/DNS solutions across multi-cloud and on-premises environments. The successful candidate will work closely with Network Architects and cross-functional teams to deliver secure, scalable, and automated network infrastructure while operating within strict change-control processes.

Responsibilities

Implement and maintain firewall automation modules across Palo. Alto, F5, and Cloudflare, including security rules, address/service objects, NAT, VIP/pool configuration, WAF policy, and certificate binding, following designs defined by the Network Architect Build and maintain DNS and Net. Box IPAM automation, including zone/record management, prefix/role/tenant data entry, and reconciliation jobs Implement Azure core connectivity modules such as VNets/subnets, Application Gateway, WAF, Azure Firewall, and NSGs via Terraform/Open.

Tofu Support VMware NSX-T segment and distributed firewall (DFW) rule implementation in coordination with the VMware team Execute commit/lock handling procedures for concurrent firewall pipeline changes, including Palo. Alto/Panorama candidate-config workflows Troubleshoot and remediate production network/firewall issues during Implementation and Adoption phases Operate within change-control processes given the high blast-radius of network changes Requirements 5+ years of hands-on experience automating firewall platforms such as Palo.

Alto, F5, and/or Cloudflare via Infrastructure as Code Experience implementing Azure networking constructs, including VNets, Application Gateway, WAF, Azure Firewall, and NSGs via Terraform/Open. Tofu Working knowledge of DNS and IPAM (Net. Box) data models and automation Familiarity with VMware NSX-T network segmentation and distributed firewall concepts Ability to operate within change-control processes for high-blast-radius network/security modifications Working experience with Ansible for network/firewall configuration tasks, complementing Terraform/Open.

Tofu-based provisioning, with combined Terraform/Ansible proficiency expected Flexibility to use AI-assisted tools such as GitHub Copilot in a project-wide capacity Proficiency in English at a B2+ level Nice to have Experience with certificate distribution (Venafi) tied to network/load-balancer endpoints Exposure to global traffic management/multi-region failover patterns