Lead Network Engineer

About the Position

We are seeking a Lead Network Engineer to design, implement, and maintain firewall automation, network connectivity, and IPAM/DNS solutions across multi-cloud and on-premises environments. The successful candidate will work closely with Network Architects and cross-functional teams to deliver secure, scalable, and automated network infrastructure while operating within strict change-control processes.

Responsibilities

• Implement and maintain firewall automation modules across PaloAlto, F5, and Cloudflare, including security rules, address/service objects, NAT, VIP/pool configuration, WAF policy, and certificate binding, following designs defined by the Network Architect
• Build and maintain DNS and NetBox IPAM automation, including zone/record management, prefix/role/tenant data entry, and reconciliation jobs
• Implement Azure core connectivity modules such as VNets/subnets, Application Gateway, WAF, Azure Firewall, and NSGs via Terraform/OpenTofu
• Support VMware NSX-T segment and distributed firewall (DFW) rule implementation in coordination with the VMware team
• Execute commit/lock handling procedures for concurrent firewall pipeline changes, including PaloAlto/Panorama candidate-config workflows
• Troubleshoot and remediate production network/firewall issues during Implementation and Adoption phases
• Operate within change-control processes given the high blast-radius of network changes

Requirements

• 5+ years of hands-on experience automating firewall platforms such as PaloAlto, F5, and/or Cloudflare via Infrastructure as Code
• Experience implementing Azure networking constructs, including VNets, Application Gateway, WAF, Azure Firewall, and NSGs via Terraform/OpenTofu
• Working knowledge of DNS and IPAM (NetBox) data models and automation
• Familiarity with VMware NSX-T network segmentation and distributed firewall concepts
• Ability to operate within change-control processes for high-blast-radius network/security modifications
• Working experience with Ansible for network/firewall configuration tasks, complementing Terraform/OpenTofu-based provisioning, with combined Terraform/Ansible proficiency expected
• Flexibility to use AI-assisted tools such as GitHub Copilot in a project-wide capacity
• Proficiency in English at a B2+ level

Nice to Have

• Experience with certificate distribution (Venafi) tied to network/load-balancer endpoints
• Exposure to global traffic management/multi-region failover patterns

We Offer

• Engineering Heritage: Best-in-class experts sharing a culture of engineering excellence and tackling complex engineering challenges for over 30 years
• Advanced Tech Stack: Innovative projects where you can apply or enhance your expertise in Cloud, Data, AI, and other emerging technologies
• World-Class Clients: Work closely with 340+ of the Forbes Global 2000 on creating disruptive solutions that make a global impact
• Professional Growth: Exceptional support for career development with comprehensive resources for upskilling or reskilling in pioneering practices
• GenAI Community: Strong AI competencies with 600+ experts across 55+ locations driving GenAI-enabled transformation journeys
• Entrepreneurial Culture: If you're passionate and dedicated to improving business transformation, we provide the support you need to bring your ideas to life
• Hybrid Setup: The flexibility to work from any location in Lithuania, whether it's your home or our dynamic offices in Vilnius and Kaunas
• Other Benefits: Additional vacation and trust days, private health insurance, Employee Stock Purchase Plan and more

About the Company

[Company description if present]