> Markdown version of [/jobs/ext/3973992-lead-network-engineer](https://www.wearedevelopers.com/jobs/ext/3973992-lead-network-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Lead Network Engineer - **Company:** Take-Two Interactive Software, Inc. - **Location:** Austin, TX, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Border Gateway Protocol, Cloud Computing, Cloud Engineering, Cyber Security, Continuous Integration, Data Centers, Data Infrastructure, Domain Name System (DNS), Virtual Private Networks (VPN), Internet Service Provider, Python (Programming Language), Network Security, Transport Layer, Network Configuration and Change Management, Network Architecture, Network Monitoring, Cloud Services, Ansible, Zero Trust Network Access, VMware Infrastructure, Wide Area Networks, Load Balancing, CheckMK, Information Technology, Deployment Automation, Palo Alto Networks, Terraform, Open Network Automation Platform, Big Ip - **Published:** October 27, 2026 - **Apply:** https://www.careerbuilder.com/job-details/lead-network-engineer-austin-tx--436861fd-accf-4dc6-87b3-5d0cea20cbbc ## About the Role Network Architecture/Engineering, Equity Securities, Business Model, Customer Experience, Online Publications, Trading/Stockbroking, Online Marketing, Team Building, Network Architecture/Engineering, Continuous Improvement, * 7+ years in enterprise network engineering, including meaningful time spent on network security. * Deep, hands-on experience with Palo Alto Networks firewalls and Panorama (PAN-OS, App-ID, User-ID). This is the center of the role. * Practical experience designing or operating Zero Trust, ZTNA, SASE, or microsegmentation solutions in production. * Solid routing and switching fundamentals, including BGP in a multi-circuit environment. * Working knowledge of public cloud networking (AWS or GCP): VPCs, Transit Gateways, and cloud load balancers. * Comfort automating your own work with Python, Ansible, or Terraform. * Experience as a technical lead, driving design decisions and technical work across teams. * Strong communication skills, with the ability to explain complex technical concepts to technical and non-technical audiences alike. * Bachelor's degree in Computer Science, Information Technology, or a related field - or equivalent practical experience. * Strong experience with Arista EOS, Meraki (switching, wireless, MX), or SD-WAN platforms such as Silverpeak / Aruba EdgeConnect. * F5 BIG-IP (LTM/DNS/APM) and network monitoring tools such as Checkmk. * Source-of-truth tooling (NetBox, Nautobot) and CI/CD for network configuration. * Certifications such as PCNSE, CCNP, or Meraki CMNA/CMNO - or equivalent hands-on experience. ## Description * Architect, deploy, and scale global Zero Trust Network Access (ZTNA) solutions that provide secure, granular access in place of traditional perimeter VPN entry points. * Lead the design and enforcement of identity-based microsegmentation policies across data centers and corporate offices to restrict lateral movement and enforce least privilege. * Own the evolution of our SASE (Secure Access Service Edge) roadmap, delivering policy-driven security for a distributed workforce and cloud workloads. * Serve as the subject matter expert for Palo Alto Networks firewalls and Panorama, using advanced capabilities such as App-ID, User-ID, and WildFire to maintain a strong security posture. Network Automation & Source of Truth: * Maintain and grow our centralized Network Source of Truth (NetBox or Nautobot) as the data foundation for automated network and security configuration. * Use Python, Ansible, and Terraform to automate deployments, standardize configuration, and eliminate manual drift. * Build automated workflows and CI/CD pipelines, and champion network programmability across the team. Cloud & Infrastructure Operations: * Design secure network topologies in AWS and GCP, aligning cloud-native constructs such as VPCs and Transit Gateways with our Zero Trust requirements. * Manage our physical and virtual infrastructure - Arista switching, Meraki wireless and MX, F5 BIG-IP load balancing, and existing SD-WAN - as the transport layer beneath the security architecture. * Use Checkmk and cloud-native visibility tools to proactively identify and resolve performance and security incidents, with telemetry from the physical port to the cloud WAN. * Partner with ISPs and technology vendors to keep our global footprint resilient and performant. Technical Leadership & Collaboration: * Act as technical lead for engineers on the team, setting direction on design decisions, reviewing work, and sharing knowledge across the group. * Set the bar for design, configuration, and documentation quality through peer review and cross-functional collaboration. On-Call Support: * Participate in a rotating on-call schedule (1 week primary, 1 week backup) supporting critical network infrastructure.