Back to SearchLead Network Engineer
Hybrid in Republic of Lithuania
Networks & Telecommunication& 3 others
Looking for something else?
Find a vacancy that works for you. Send us your CV to receive a personalized offer.
Find me a job
We are seeking a Lead Network Engineer to design, implement, and maintain firewall automation, network connectivity, and IPAM/DNS solutions across multi-cloud and on-premises environments. The successful candidate will work closely with Network Architects and cross-functional teams to deliver secure, scalable, and automated network infrastructure while operating within strict change-control processes.
Responsibilities
- Implement and maintain firewall automation modules across PaloAlto, F5, and Cloudflare, including security rules, address/service objects, NAT, VIP/pool configuration, WAF policy, and certificate binding, following designs defined by the Network Architect
- Build and maintain DNS and NetBox IPAM automation, including zone/record management, prefix/role/tenant data entry, and reconciliation jobs
- Implement Azure core connectivity modules such as VNets/subnets, Application Gateway, WAF, Azure Firewall, and NSGs via Terraform/OpenTofu
- Support VMware NSX-T segment and distributed firewall (DFW) rule implementation in coordination with the VMware team
- Execute commit/lock handling procedures for concurrent firewall pipeline changes, including PaloAlto/Panorama candidate-config workflows
- Troubleshoot and remediate production network/firewall issues during Implementation and Adoption phases
- Operate within change-control processes given the high blast-radius of network changes
Requirements
- 5+ years of hands-on experience automating firewall platforms such as PaloAlto, F5, and/or Cloudflare via Infrastructure as Code
- Experience implementing Azure networking constructs, including VNets, Application Gateway, WAF, Azure Firewall, and NSGs via Terraform/OpenTofu
- Working knowledge of DNS and IPAM (NetBox) data models and automation
- Familiarity with VMware NSX-T network segmentation and distributed firewall concepts
- Ability to operate within change-control processes for high-blast-radius network/security modifications
- Working experience with Ansible for network/firewall configuration tasks, complementing Terraform/OpenTofu-based provisioning, with combined Terraform/Ansible proficiency expected
- Flexibility to use AI-assisted tools such as GitHub Copilot in a project-wide capacity
- Proficiency in English at a B2+ level
Nice to have
- Experience with certificate distribution (Venafi) tied to network/load-balancer endpoints
- Exposure to global traffic management/multi-region failover patterns