Lead Network Engineer

The Challenge

Join a highly skilled, collaborative, and forward-thinking Global Network Engineering team dedicated to maintaining a robust, resilient, and cutting-edge network infrastructure. We pride ourselves on a culture of shared knowledge, continuous improvement, and mutual support, always ready to innovate and tackle complex challenges together as we transition toward identity-centric, automated network architectures.

We are looking for a Lead Network Engineer to help shift our global network away from a traditional perimeter model toward a modern Zero Trust Architecture (ZTA) and Infrastructure as Code approach. The core of this role is deep, hands-on expertise with Palo Alto Networks security and identity-driven access, paired with the ability to act as technical lead for the engineers around you.

Zero Trust Architecture & Network Security

• Architect, deploy, and scale global Zero Trust Network Access (ZTNA) solutions that provide secure, granular access in place of traditional perimeter VPN entry points.
• Lead the design and enforcement of identity-based microsegmentation policies across data centers and corporate offices to restrict lateral movement and enforce least privilege.
• Own the evolution of our SASE (Secure Access Service Edge) roadmap, delivering policy-driven security for a distributed workforce and cloud workloads.
• Serve as the subject matter expert for Palo Alto Networks firewalls and Panorama, using advanced capabilities such as App-ID, User-ID, and WildFire to maintain a strong security posture.

Network Automation & Source of Truth

• Maintain and grow our centralized Network Source of Truth (NetBox or Nautobot) as the data foundation for automated network and security configuration.
• Use Python, Ansible, and Terraform to automate deployments, standardize configuration, and eliminate manual drift.
• Build automated workflows and CI/CD pipelines, and champion network programmability across the team.

Cloud & Infrastructure Operations

• Design secure network topologies in AWS and GCP, aligning cloud-native constructs such as VPCs and Transit Gateways with our Zero Trust requirements.
• Manage our physical and virtual infrastructure - Arista switching, Meraki wireless and MX, F5 BIG-IP load balancing, and existing SD-WAN - as the transport layer beneath the security architecture.
• Use Checkmk and cloud-native visibility tools to proactively identify and resolve performance and security incidents, with telemetry from the physical port to the cloud WAN.
• Partner with ISPs and technology vendors to keep our global footprint resilient and performant.

Technical Leadership & Collaboration

• Act as technical lead for engineers on the team, setting direction on design decisions, reviewing work, and sharing knowledge across the group.
• Set the bar for design, configuration, and documentation quality through peer review and cross-functional collaboration.

On-Call Support

• Participate in a rotating on-call schedule (1 week primary, 1 week backup) supporting critical network infrastructure.

What You Bring

• 7+ years in enterprise network engineering, including meaningful time spent on network security.
• Deep, hands-on experience with Palo Alto Networks firewalls and Panorama (PAN-OS, App-ID, User-ID). This is the center of the role.
• Practical experience designing or operating Zero Trust, ZTNA, SASE, or microsegmentation solutions in production.
• Solid routing and switching fundamentals, including BGP in a multi-circuit environment.
• Working knowledge of public cloud networking (AWS or GCP): VPCs, Transit Gateways, and cloud load balancers.
• Comfort automating your own work with Python, Ansible, or Terraform.
• Experience as a technical lead, driving design decisions and technical work across teams.
• Strong communication skills, with the ability to explain complex technical concepts to technical and non-technical audiences alike.
• Bachelor's degree in Computer Science, Information Technology, or a related field - or equivalent practical experience.
• Strong experience with Arista EOS, Meraki (switching, wireless, MX), or SD-WAN platforms such as Silverpeak / Aruba EdgeConnect.
• F5 BIG-IP (LTM/DNS/APM) and network monitoring tools such as Checkmk.
• Source-of-truth tooling (NetBox, Nautobot) and CI/CD for network configuration.
• Certifications such as PCNSE, CCNP, or Meraki CMNA/CMNO - or equivalent hands-on experience.

What We Offer You

• Great Company Culture. Ranked as one of the most creative and innovative places to work, creativity, innovation, efficiency, diversity and philanthropy are among the core tenets of our organization and are integral drivers of our continued success.
• Growth: As a global entertainment company, we pride ourselves on creating environments where employees are encouraged to be themselves, inquisitive, collaborative and to grow within and around the company.
• Work Hard, Play Hard. Our employees bond, blow-off steam, and flex some creative muscles - through corporate boot camp classes, company parties, game release events, monthly socials, and team challenges.
• Benefits. Medical (HSA & FSA), dental, vision, 401(k) with company match, employee stock purchase plan, commuter benefits, in-house wellness program, broad learning & development opportunities, a charitable giving platform with company match and more!
• Perks. Fitness allowance, employee discount programs, free games & events and stocked pantries.

Please be aware that Take-Two does not conduct job interviews or make job offers over third-party messaging apps such as Telegram, WhatsApp, or others. Take-Two also does not engage in any financial exchanges during the recruitment or onboarding process, and the Company will never ask a candidate for their personal or financial information over an app or other unofficial chat channel.

• Any attempt to do so may be the result of a scam or phishing exercise.
• Take-Two's in-house recruitment team will only contact individuals through their official Company email addresses (i.e., via a take2games.com email domain).
• If you need to report an issue or otherwise have questions, please contact