Lead Network Engineer

We are seeking a Lead Network Engineer to design, implement, and maintain firewall automation, network connectivity, and IPAM/DNS solutions across multi-cloud and on-premises environments. The successful candidate will work closely with Network Architects and cross-functional teams to deliver secure, scalable, and automated network infrastructure while operating within strict change-control processes.

Responsibilities

• Implement and maintain firewall automation modules across PaloAlto, F5, and Cloudflare, including security rules, address/service objects, NAT, VIP/pool configuration, WAF policy, and certificate binding, following designs defined by the Network Architect
• Build and maintain DNS and NetBox IPAM automation, including zone/record management, prefix/role/tenant data entry, and reconciliation jobs
• Implement Azure core connectivity modules such as VNets/subnets, Application Gateway, WAF, Azure Firewall, and NSGs via Terraform/OpenTofu
• Support VMware NSX-T segment and distributed firewall (DFW) rule implementation in coordination with the VMware team
• Execute commit/lock handling procedures for concurrent firewall pipeline changes, including PaloAlto/Panorama candidate-config workflows
• Troubleshoot and remediate production network/firewall issues during Implementation and Adoption phases
• Operate within change-control processes given the high blast-radius of network changes

Requirements

• 5+ years of hands-on experience automating firewall platforms such as PaloAlto, F5, and/or Cloudflare via Infrastructure as Code
• Experience implementing Azure networking constructs, including VNets, Application Gateway, WAF, Azure Firewall, and NSGs via Terraform/OpenTofu
• Working knowledge of DNS and IPAM (NetBox) data models and automation
• Familiarity with VMware NSX-T network segmentation and distributed firewall concepts
• Ability to operate within change-control processes for high-blast-radius network/security modifications
• Working experience with Ansible for network/firewall configuration tasks, complementing Terraform/OpenTofu-based provisioning, with combined Terraform/Ansible proficiency expected
• Flexibility to use AI-assisted tools such as GitHub Copilot in a project-wide capacity
• Proficiency in English at a B2+ level

Nice to have

• Experience with certificate distribution (Venafi) tied to network/load-balancer endpoints
• Exposure to global traffic management/multi-region failover patterns