Senior Network Engineer SASE

The
Senior Network Engineer, SASE
will serve as the subject matter expert (SME) for all SASE-related technologies, driving the network and security transformation from traditional, perimeter-based models to a secure, cloud-centric architecture. This role involves integrating core SASE components—such as SD-WAN, Cloud Access Security Broker (CASB), Secure Web Gateway (SWG), and Zero Trust Network Access (ZTNA)—to deliver secure and high-performance access for all users, regardless of location. Join us to tackle challenging projects and make a direct impact on our core product while investing in your professional growth

Mexico.

In this role, you will have the opportunity to:

• Design and Architect highly available, scalable, and secure SASE solutions for complex, global, and hybrid-cloud network environments.
• Lead the implementation and deployment of core SASE components, including SD-WAN, ZTNA, CASB, Firewall-as-a-Service (FWaaS), and DNS security solutions.
• Develop, implement, and optimize security policies, routing, and traffic steering logic across the SASE platform to enforce a consistent security posture.
• Evaluate and integrate new SASE-related technologies and features to maintain a state-of-the-art security and networking stack.
• Drive Zero Trust principles by designing and implementing fine-grained, identity-centric access control policies (ZTNA).
• Identify and implement automation opportunities
  using scripting and Infrastructure-as-Code (IaC) tools to increase deployment speed and operational efficiency.
• Partner with Cyber Security teams
  to ensure SASE policies and configurations align with organizational security standards and compliance requirements (e.g., PCI, HIPAA, ISO).

The essential requirements of the job include:

• Bachelor's degree in Computer Science, Information Technology, Network Engineering, or a related field, or equivalent practical experience.
• 5+ years of progressive experience in network and/or security engineering, with at least 2 years focused on SASE or similar cloud security architectures.
• Expert knowledge of SASE Framework and its core components (SD-WAN, ZTNA, CASB, SWG, FWaaS).
• Extensive hands-on experience with major SASE vendor solutions (e.g., Zscaler, Palo Alto Networks Prisma Access, Fortinet, Cisco/Meraki).
• Deep understanding of Network Protocols including TCP/IP, BGP, OSPF, and IPsec VPNs.
• Proficiency in Cloud Networking and security principles in one or more major public cloud platforms (AWS, Azure, or GCP).
• Strong Scripting and Automation skills (e.g., Python, Bash, Terraform, Ansible) for infrastructure provisioning and management.
• Familiarity with Network Security concepts such as Next-Generation Firewalls, IDS/IPS, TLS inspection, and Security Information and Event Management (SIEM)

Travel, Motor Vehicle Record & Physical/Environment Requirements:

• 5%-15% travel as per business requirements.

It would be a plus if you also possess previous experience in:

• Python, YAML
• Jira, Confluence
• Ansible automation