Lead Network Engineer

Headquartered in New York City, Take-Two Interactive Software, Inc. is a leading developer, publisher, and marketer of interactive entertainment for consumers around the globe. We develop and publish products principally through Rockstar Games, 2K, and Zynga. Our strategy is to create hit entertainment experiences delivered on every platform relevant to our audience through a variety of sound business models. Our pillars—creativity, innovation, and efficiency—guide us as we strive to create the highest quality, most captivating experiences for our consumers.

While our offices (physical and virtual) are casual and inviting, we are deeply committed to our core tenets of creativity, innovation, and efficiency, and individual and team development opportunities. Our industry and business are continually evolving and fast-paced, providing numerous opportunities to learn and hone your skills. We work hard, but we also like to have fun, and believe that we provide a great place to come to work each day to pursue your passions.

About the Role

Join a highly skilled, collaborative, and forward-thinking Global Network Engineering team dedicated to maintaining a robust, resilient, and cutting-edge network infrastructure. We pride ourselves on a culture of shared knowledge, continuous improvement, and mutual support, always ready to innovate and tackle complex challenges together as we transition toward identity-centric, automated network architectures.

We are seeking a highly experienced and meticulous Lead Network Engineer to join our dynamic team. This pivotal role will shift our global paradigm away from traditional perimeter-based networking toward a modern Zero Trust Architecture (ZTA) and Infrastructure as Code (IaC) model. The ideal candidate will possess deep technical expertise in software-defined security, SASE frameworks, microsegmentation, and network automation. You will have a passion for treating the network as code, building a single source of truth, protecting assets via identity-driven access, and elevating team capabilities through mentorship.

Responsibilities

• Architect, deploy, and scale global Zero Trust Network Access (ZTNA) solutions to provide secure, granular access that replaces or abstracts traditional perimeter VPN entry points.
• Lead the design and enforcement of internal identity-based microsegmentation policies across data centers and corporate offices to strictly restrict lateral movement and implement the principle of least privilege.
• Own the evolution and management of our SASE (Secure Access Service Edge) roadmap to ensure seamless, policy-driven security for our distributed workforce and cloud-based workloads.
• Serve as the subject matter expert for Palo Alto Networks firewalls and Panorama management, utilizing advanced features like App-ID, User-ID, and WildFire to maintain a robust security posture.
• Architect, scale, and maintain our centralized Network Source of Truth (SoT), ensuring it serves as the programmatic data foundation for all automated network and security configurations.
• Drive the adoption of Infrastructure as Code by leveraging programming skills in Python, Ansible, and Terraform to streamline operations, automate deployments, and eliminate manual configuration drift.
• Develop and maintain automated workflows and CI/CD pipelines to enhance network efficiency, reduce manual effort, and improve operational agility.
• Champion best practices in network programmability and contribute to the team’s ongoing development in utilizing code-based methods for network management.
• Design and scale secure network topologies within public cloud environments such as AWS and GCP, ensuring cloud-native constructs like VPCs and Transit Gateways align with our Zero Trust security requirements.
• Manage and maintain our physical and virtual network infrastructure, including Arista switches, Meraki access points, and existing SD-WAN solutions, treating these as foundational transport layers.
• Utilize and optimize network monitoring tools, specifically Checkmk and cloud-native visibility platforms, to proactively identify, diagnose, and resolve network performance or security incidents.
• Collaborate closely with Internet Service Providers (ISPs) and technology partners to ensure maximum network resiliency and performance for our global footprint.
• Manage and optimize F5 BIG-IP LTM/ASM/APM devices for application delivery, load balancing, and security.
• Develop and maintain scripts and tools to enhance network efficiency, reduce manual effort, and improve overall operational agility.
• Design, deploy, and maintain a highly functioning and resilient wireless environment using Meraki access points, ensuring optimal coverage, performance, and security for all users.
• Perform in-depth troubleshooting of complex network incidents across various platforms.
• Act as a mentor and technical lead for junior network engineers, providing guidance, sharing knowledge, and fostering their professional growth.
• Contribute to a highly collaborative team environment, actively participating in knowledge sharing, peer reviews, and cross-functional initiatives.
• Participate in a rotating on-call schedule (1 week primary, 1 week backup) to provide 24/7 support for critical network infrastructure.

Requirements

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• 8+ years of progressive experience in large-scale enterprise network engineering, with a significant portion focused on network automation and cloud implementation.
• Deep understanding of cloud-native networking constructs: VPCs, Shared VPCs, Transit Gateways, Cloud Routers, Load Balancers (ALB/NLB), and Cloud Armor/WAF.
• Expert-level proficiency with Palo Alto Networks firewalls (PAN-OS, Panorama), including advanced features and troubleshooting.
• Deep understanding and hands-on experience with BGP routing in a global multi-circuit environment.
• Strong experience with Arista EOS and Meraki network devices (switches, APs, MX).
• Demonstrated experience with Silverpeak (Aruba HP EdgeConnect) SD-WAN.
• Proficiency in F5 BIG-IP LTM/DNS/APM.
• Proven programming/scripting experience (e.g., Python, Ansible, Terraform) for network automation.
• Strong understanding of cloud networking principles and experience with public cloud platforms (e.g., AWS, GCP).
• Extensive experience with wireless network design, implementation, and troubleshooting, particularly with Meraki Wi-Fi.
• Familiarity with network monitoring platforms like Checkmk.
• Excellent analytical, problem-solving, and troubleshooting skills.
• Strong communication (written and verbal) and interpersonal skills, with the ability to articulate complex technical concepts to both technical and non-technical audiences.
• Ability to work independently and as part of a highly collaborative team in a fast-paced environment.
• Relevant industry certifications highly desirable (e.g., Palo Alto Networks Certified Network Security Engineer (PCNSE), CCIE, CCNP, Certified Meraki Network Associate/Professional, etc.).

Benefits

• Medical (HSA & FSA), dental, and vision coverage.
• 401(k) with company match.
• Employee stock purchase plan.
• Commuter benefits.
• In-house wellness program.
• Broad learning & development opportunities.
• Charitable giving platform with company match.
• Fitness allowance.
• Employee discount programs.
• Free games & events and stocked pantries.

Ranked as one of the most creative and innovative places to work, creativity, innovation, efficiency, diversity, and philanthropy are among the core tenets of our organization and are integral drivers of our continued success. We pride ourselves on creating environments where employees are encouraged to be themselves, inquisitive, collaborative, and to grow within and around the company.