ManagerTech Lead, Network Engineering

Manager/Tech Lead Network Engineering

CTH

On-site Sunnyvale CA

About this role:
Were looking for a hands-on Manager / Senior Technical Lead to take end-to-end ownership of our global corporate network and network security posture from the switch port to the SASE edge.
Youll own everything that connects our people to our systems: in-office wired and wireless connectivity secure remote access inter-office and third-party connectivity and the governance of mobile and endpoint assets on the network. Youll also lead a strategic initiative: migrating our remote access model from Tailscale to Zscaler enabling Zscaler Private Access (ZPA) to front our most sensitive internal applications.
This is a builders role. Youll inherit a modern well-invested stack (Palo Alto firewalls Meraki switching/AP Infoblox DDI dual-ISP resilience per site) and be expected to mature it into a globally consistent secure and observable network as we open new offices and grow headcount.

What Youll Own
Global Network Architecture & Operations
- Take ownership of network architecture and operations across all Applied Intuition offices globally including standards for wired/wireless LAN WAN and site design.
- Manage dual-ISP redundancy failover and site connectivity for each office location.
- Own our Palo Alto firewall estate (policy segmentation NAT threat prevention) and Meraki switching/wireless environment (MX/MS/MR) across all sites.
- Administer and evolve our Infoblox DDI environment (DNS DHCP IPAM) as the source of truth for network addressing globally.

Zero Trust & Secure Remote Access
- Lead the migration from Tailscale to Zscaler standing up ZIA for secure internet access and ZPA to broker access to sensitive internal applications without exposing them on a flat network.
- Design the target-state Zero Trust access model: user/device posture app segmentation and policy replacing broad VPN-style access with least-privilege app-specific access.
- Manage the cutover plan user migration and legacy VPN decommissioning with minimal disruption to the business.

Site & Inter-Office Connectivity
- Design and maintain secure performant connectivity between offices and to key third-party endpoints (data centers cloud environments partner networks).
- Build repeatable documented playbooks for opening new office locations (network standing up new sites quickly and consistently as the company grows).
Leadership & Roadmap
- Act as the technical authority and escalation point for all things network youll operate as both an individual contributor and a lead who can eventually build out a team as scope grows.
- Partner with the Head of Security and IT leaderships to set the multi-year network and network-security roadmap and vendor strategy.
- Own vendor relationships (Palo Alto Cisco Meraki Zscaler Infoblox) including licensing renewals and support escalations.
- Establish monitoring alerting and documentation standards so the network is observable and operable beyond tribal knowledge.

What Were Looking For
- 7 years in network engineering/architecture roles including experience owning network security for a multi-site organization ideally at a high-growth technology company that scaled offices and headcount quickly.
- Hands-on expertise with Palo Alto Networks firewalls (policy Panorama threat prevention) and Cisco Meraki (MX/MS/MR) in production multi-site environments.
- Direct experience with Infoblox or comparable DDI/IPAM platforms.
- Experience designing or migrating to a SASE/ZTN

A architecture direct Zscaler (ZIA/ZPA) experience is a strong plus; experience with a comparable platform (Cloudflare Netskope Palo Alto Prisma Access) is also relevant.- Working knowledge of modern lightweight VPN/mesh tooling (Tailscale WireGuard) is a plus particularly if youve been part of a migration off of one.
- Strong grasp of core networking fundamentals: routing/switching VLANs SD-WAN DNS/DHCP NAT 802.1X/NAC.
- Experience governing mobile/BYOD device access on corporate networks (NAC MDM integration).
- A track record of taking ambiguous growing infrastructure and turning it into documented standardized and automatable operations.
- Comfort operating both strategically (roadmap vendor strategy budget) and hands-on (you will still be in the weeds especially early

Required Skills:

palo altonetworkingmerakiciscosaseztna