SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: CAD 118,300 - 168,300 / annual
Take-Two Interactive, a leading developer and publisher of interactive entertainment headquartered in New York City, is seeking a Lead Network Engineer to join its Global Network Engineering team in Toronto. The role focuses on architecting and implementing a modern Zero Trust Architecture (ZTA) and Infrastructure as Code approach, moving away from traditional perimeter-based network models.
You will serve as a technical lead with deep hands-on expertise in Palo Alto Networks security and identity-driven access solutions. Key responsibilities include:
**Zero Trust Architecture & Network Security:**
Architect, deploy, and scale global Zero Trust Network Access (ZTNA) solutions to replace traditional VPN entry points. Lead the design and enforcement of identity-based microsegmentation policies across data centers and corporate offices to restrict lateral movement and enforce least privilege access. Own the evolution of the SASE (Secure Access Service Edge) roadmap, delivering policy-driven security for distributed workforces and cloud workloads. Serve as the subject matter expert for Palo Alto Networks firewalls and Panorama, leveraging advanced capabilities such as App-ID, User-ID, and WildFire.
**Network Automation & Source of Truth:**
Maintain and expand the centralized Network Source of Truth (NetBox or Nautobot) as the data foundation for automated network and security configuration. Use Python, Ansible, and Terraform to automate deployments, standardize configurations, and eliminate manual drift. Build automated workflows and CI/CD pipelines to champion network programmability across the team.
**Cloud & Infrastructure Operations:**
Design secure network topologies in AWS and GCP, aligning cloud-native constructs such as VPCs and Transit Gateways with Zero Trust requirements. Manage physical and virtual infrastructure including Arista switching, Meraki wireless and MX, F5 BIG-IP load balancing, and existing SD-WAN solutions as the transport layer. Use Checkmk and cloud-native visibility tools to proactively identify and resolve performance and security incidents. Partner with ISPs and technology vendors to maintain global network resilience and performance.
**Technical Leadership & Collaboration:**
Act as technical lead for team engineers, setting direction on design decisions, reviewing work, and sharing knowledge. Set the bar for design, configuration, and documentation quality through peer review and cross-functional collaboration. Participate in a rotating on-call schedule (1 week primary, 1 week backup) supporting critical network infrastructure.
**Requirements:**
- 7+ years in enterprise network engineering, including meaningful time on network security
- Deep, hands-on experience with Palo Alto Networks firewalls and Panorama (PAN-OS, App-ID, User-ID) — this is central to the role
- Practical experience designing or operating Zero Trust, ZTNA, SASE, or microsegmentation solutions in production
- Solid routing and switching fundamentals, including BGP in multi-circuit environments
- Working knowledge of public cloud networking (AWS or GCP): VPCs, Transit Gateways, and cloud load balancers
- Comfort automating work with Python, Ansible, or Terraform
- Experience as a technical lead, driving design decisions and technical work across teams
- Strong communication skills, able to explain complex technical concepts to technical and non-technical audiences
- Bachelor's degree in Computer Science, Information Technology, or related field — or equivalent practical experience
- Strong experience with Arista EOS, Meraki (switching, wireless, MX), or SD-WAN platforms such as Silverpeak/Aruba EdgeConnect (preferred)
- F5 BIG-IP (LTM/DNS/APM) and network monitoring tools such as Checkmk (preferred)
- Source-of-truth tooling (NetBox, Nautobot) and CI/CD for network configuration (preferred)
- Certifications such as PCNSE, CCNP, or Meraki CMNA/CMNO — or equivalent hands-on experience (preferred)
