Lead Network Engineer
Quick Summary
Architect, deploy, and scale global Zero Trust Network Access (ZTNA) solutions that provide secure, granular access in place of traditional perimeter VPN entry points.
Headquartered in New York City, Take-Two Interactive Software, Inc. is a leading developer, publisher, and marketer of interactive entertainment for consumers around the globe. We develop and publish products principally through Rockstar Games, 2K, and Zynga. Our strategy is to create hit entertainment experiences, delivered on every platform relevant to our audience through a variety of sound business models. Our pillars - creativity, innovation, and efficiency - guide us as we strive to create the highest quality, most captivating experiences for our consumers. The Company’s common stock is publicly traded on NASDAQ under the symbol TTWO. For more corporate and product information please visit our website at http://www.take2games.com.
While our offices (physical and virtual) are casual and inviting, we are deeply committed to our core tenets of creativity, innovation and efficiency, and individual and team development opportunities. Our industry and business are continually evolving and fast-paced, providing numerous opportunities to learn and hone your skills. We work hard, but we also like to have fun, and believe that we provide a great place to come to work each day to pursue your passions.
Join a highly skilled, collaborative, and forward-thinking Global Network Engineering team dedicated to maintaining a robust, resilient, and cutting-edge network infrastructure. We pride ourselves on a culture of shared knowledge, continuous improvement, and mutual support, always ready to innovate and tackle complex challenges together as we transition toward identity-centric, automated network architectures.
We are looking for a Lead Network Engineer to help shift our global network away from a traditional perimeter model toward a modern Zero Trust Architecture (ZTA) and Infrastructure as Code approach. The core of this role is deep, hands-on expertise with Palo Alto Networks security and identity-driven access, paired with the ability to act as technical lead for the engineers around you.
- Architect, deploy, and scale global Zero Trust Network Access (ZTNA) solutions that provide secure, granular access in place of traditional perimeter VPN entry points.
- Lead the design and enforcement of identity-based microsegmentation policies across data centers and corporate offices to restrict lateral movement and enforce least privilege.
- Own the evolution of our SASE (Secure Access Service Edge) roadmap, delivering policy-driven security for a distributed workforce and cloud workloads.
- Serve as the subject matter expert for Palo Alto Networks firewalls and Panorama, using advanced capabilities such as App-ID, User-ID, and WildFire to maintain a strong security posture.
- Maintain and grow our centralized Network Source of Truth (NetBox or Nautobot) as the data foundation for automated network and security configuration.
- Use Python, Ansible, and Terraform to automate deployments, standardize configuration, and eliminate manual drift.
- Build automated workflows and CI/CD pipelines, and champion network programmability across the team.
- Design secure network topologies in AWS and GCP, aligning cloud-native constructs such as VPCs and Transit Gateways with our Zero Trust requirements.
- Manage our physical and virtual infrastructure — Arista switching, Meraki wireless and MX, F5 BIG-IP load balancing, and existing SD-WAN — as the transport layer beneath the security architecture.
- Use Checkmk and cloud-native visibility tools to proactively identify and resolve performance and security incidents, with telemetry from the physical port to the cloud WAN.
- Partner with ISPs and technology vendors to keep our global footprint resilient and performant.
- Act as technical lead for engineers on the team, setting direction on design decisions, reviewing work, and sharing knowledge across the group.
- Set the bar for design, configuration, and documentation quality through peer review and cross-functional collaboration.
- Participate in a rotating on-call schedule (1 week primary, 1 week backup) supporting critical network infrastructure.
- 7+ years in enterprise network engineering, including meaningful time spent on network security.
- Deep, hands-on experience with Palo Alto Networks firewalls and Panorama (PAN-OS, App-ID, User-ID). This is the center of the role.
- Practical experience designing or operating Zero Trust, ZTNA, SASE, or microsegmentation solutions in production.
- Solid routing and switching fundamentals, including BGP in a multi-circuit environment.
- Working knowledge of public cloud networking (AWS or GCP): VPCs, Transit Gateways, and cloud load balancers.
- Comfort automating your own work with Python, Ansible, or Terraform.
- Experience as a technical lead, driving design decisions and technical work across teams.
- Strong communication skills, with the ability to explain complex technical concepts to technical and non-technical audiences alike.
- Bachelor's degree in Computer Science, Information Technology, or a related field — or equivalent practical experience.
- Strong experience with Arista EOS, Meraki (switching, wireless, MX), or SD-WAN platforms such as Silverpeak / Aruba EdgeConnect.
- F5 BIG-IP (LTM/DNS/APM) and network monitoring tools such as Checkmk.
- Source-of-truth tooling (NetBox, Nautobot) and CI/CD for network configuration.
- Certifications such as PCNSE, CCNP, or Meraki CMNA/CMNO — or equivalent hands-on experience.
What We Offer
~2 min readLocation & Eligibility
About this job
- Who can apply
- United States
- Posted
- 83 days ago
Listing Details
- Posted
- July 23, 2026
- First seen
- July 23, 2026
- Last seen
- October 15, 2026
Posting Health
- Days active
- 83
- Repost count
- 0
- Trust Level
- 23%
- Scored at
- October 15, 2026
Signal breakdown
Browse Similar Jobs
Stay ahead of the market
Get the latest job openings, salary trends, and hiring insights delivered to your inbox every week.
No spam. Unsubscribe at any time.
