Lead Network Engineer

Take-Two Interactive Software, Inc.•Austin, TX

About The Position

Join a highly skilled, collaborative, and forward-thinking Global Network Engineering team dedicated to maintaining a robust, resilient, and cutting-edge network infrastructure. We pride ourselves on a culture of shared knowledge, continuous improvement, and mutual support, always ready to innovate and tackle complex challenges together as we transition toward identity-centric, automated network architectures. We are seeking a highly experienced and meticulous Lead Network Engineer to join our dynamic team. This pivotal role will shift our global paradigm away from traditional perimeter-based networking toward a modern Zero Trust Architecture (ZTA) and Infrastructure as Code (IaC) model. The ideal candidate will possess deep technical expertise in software-defined security, SASE frameworks, microsegmentation, and network automation. You will have a passion for treating the network as code, building a single source of truth, protecting assets via identity-driven access, and elevating team capabilities through mentorship.

Requirements

Bachelor's degree in Computer Science, Information Technology, or a related field
8+ years of progressive experience in large-scale enterprise network engineering, with a significant portion focused on network automation and cloud implementation.
Deep understanding of cloud-native networking constructs: VPCs, Shared VPCs, Transit Gateways, Cloud Routers, Load Balancers (ALB/NLB), and Cloud Armor/WAF.
Expert-level proficiency with Palo Alto Networks firewalls (PAN-OS, Panorama), including advanced features and troubleshooting.
Deep understanding and hands-on experience with BGP routing in a global multi-circuit environment.
Strong experience with Arista EOS and Meraki network devices (switches, APs, MX).
Demonstrated experience with Silverpeak (Aruba HP EdgeConnect) SD-WAN.
Proficiency in F5 BIG-IP LTM/DNS/APM.
Proven programming/scripting experience (e.g., Python, Ansible, Terraform) for network automation.
Strong understanding of cloud networking principles and experience with public cloud platforms (e.g., AWS, GCP).
Extensive experience with wireless network design, implementation, and troubleshooting, particularly with Meraki Wi-Fi.
Familiarity with network monitoring platforms like Checkmk.
Excellent analytical, problem-solving, and troubleshooting skills.
Strong communication (written and verbal) and interpersonal skills, with the ability to articulate complex technical concepts to both technical and non-technical audiences.
Ability to work independently and as part of a highly collaborative team in a fast-paced environment.

Nice To Haves

Relevant industry certifications highly desirable (e.g., Palo Alto Networks Certified Network Security Engineer (PCNSE), CCIE, CCNP, Certified Meraki Network Associate/Professional, etc.).

Responsibilities

Architect, deploy, and scale global Zero Trust Network Access (ZTNA) solutions to provide secure, granular access that replaces or abstracts traditional perimeter VPN entry points.
Lead the design and enforcement of internal identity-based microsegmentation policies across data centers and corporate offices to strictly restrict lateral movement and implement the principle of least privilege.
Own the evolution and management of our SASE (Secure Access Service Edge) roadmap to ensure seamless, policy-driven security for our distributed workforce and cloud-based workloads
Serve as the subject matter expert for Palo Alto Networks firewalls and Panorama management, utilizing advanced features like App-ID, User-ID, and WildFire to maintain a robust security posture.
Architect, scale, and maintain our centralized Network Source of Truth (SoT), ensuring it serves as the programmatic data foundation for all automated network and security configurations.
Drive the adoption of Infrastructure as Code by leveraging programming skills in Python, Ansible, and Terraform to streamline operations, automate deployments, and eliminate manual configuration drift.
Develop and maintain automated workflows and CI/CD pipelines to enhance network efficiency, reduce manual effort, and improve operational agility.
Champion best practices in network programmability and contribute to the team’s ongoing development in utilizing code-based methods for network management.
Design and scale secure network topologies within public cloud environments such as AWS and GCP, ensuring cloud-native constructs like VPCs and Transit Gateways align with our Zero Trust security requirements.
Manage and maintain our physical and virtual network infrastructure, including Arista switches, Meraki access points, and existing SD-WAN solutions, treating these as foundational transport layers.
Utilize and optimize network monitoring tools, specifically Checkmk and cloud-native visibility platforms, to proactively identify, diagnose, and resolve network performance or security incidents.
Collaborate closely with Internet Service Providers (ISPs) and technology partners to ensure maximum network resiliency and performance for our global footprint.
Manage and optimize F5 BIG-IP LTM/ASM/APM devices for application delivery, load balancing, and security.
Drive the adoption and implementation of network automation initiatives, leveraging programming skills (e.g., Python, Ansible, Terraform) to streamline network operations, configuration management, and deployment processes.
Architect, maintain and expand our centralized network source of truth using for example Netbox, or Nautobot.
Develop and maintain scripts and tools to enhance network efficiency, reduce manual effort, and improve overall operational agility.
Champion best practices in network programmability and contribute to the team's ongoing development in this area.
Design, deploy, and maintain a highly functioning and resilient wireless environment using Meraki access points, ensuring optimal coverage, performance, and security for all users.
Utilize and optimize network monitoring tools, specifically Checkmk, to proactively identify, diagnose, and resolve network performance issues and outages.
Perform in-depth troubleshooting of complex network incidents across various platforms.
Utilize cloud–native monitoring visibility tools to ensure telemetry from the physical port to the cloud WAN.
Act as a mentor and technical lead for junior network engineers, providing guidance, sharing knowledge, and fostering their professional growth.
Contribute to a highly collaborative team environment, actively participating in knowledge sharing, peer reviews, and cross-functional initiatives.
Demonstrate exceptional attention to detail and a meticulous approach to network design, configuration, and documentation.
Participate in a rotating on-call schedule (1 week primary, 1 week backup) to provide 24/7 support for critical network infrastructure.