Network Engineer / Lead with Security (Palo Alto)

Senior network engineer and technical lead to operate, troubleshoot, and improve a global, hybrid-cloud network across local/office sites, data centers, and cloud. Owns complex incidents and changes, serves as a senior escalation point, and partners on design and standards. What You’ll Support

• Sites & scale: local/office locations, multiple data centers, and cloud (AWS and OCI), including international and remote sites, some in PCI/SOC-regulated scope.
• Routing & switching: Cisco Nexus and IOS-XE/NX-OS platforms; OSPF, BGP, vPC, VRF, VLANs, and QoS.
• Security & edge: Palo Alto firewalls (Panorama), GlobalProtect VPN, DMZ/NAT, IPS/IDS, and web proxy.
• Wireless & access: Cisco wireless (WLC/AP), FortiNAC, Cisco ISE, and TACACS+/RADIUS.
• Connectivity: MPLS and IPsec WAN, cloud interconnects and partner VPNs, and DNS/DHCP.
• Tooling: SolarWinds, Cisco DNA Center, syslog/SIEM, Qualys, and ServiceNow (ITSM/CMDB)., * Monitor, diagnose, and resolve complex network incidents; lead P1 bridges to resolution.
• Plan, test, and implement changes under change control; manage device configs and firmware lifecycle.
• Build and validate firewall rules, NAT, and VPN within security and compliance guidelines.
• Perform root-cause analysis, drive problem management, and set technical standards for the team.
• Coordinate carriers and hardware vendors; manage TAC/support cases through to closure.
• Mentor and uplift frontline engineers; keep diagrams, runbooks, IP records, and the CMDB current.
• Partner on design, technology refresh, automation, and continuous improvement.

• 8+ years in enterprise network operations and engineering, including senior or lead-level responsibility on a multi-site, hybrid-cloud estate.
• Strong hands-on Cisco routing/switching (Nexus, IOS-XE) and Palo Alto firewall (Panorama) skills.
• Practical experience with cloud networking (AWS/OCI), enterprise WAN, Cisco ISE, and enterprise monitoring tools.
• Comfortable working within ITIL processes (incident, change, problem) in ServiceNow, and within PCI/SOC boundaries.
• Clear written and spoken English; able to lead a P1 bridge, mentor others, and write clean RCAs and runbooks.

Certifications

• CCNP Enterprise required (or equivalent proven depth); CCIE (Enterprise Infrastructure or Security) strongly preferred.
• Palo Alto PCNSE and cloud-networking (AWS/OCI) credentials a plus.