Senior Network and Security Engineer

Description

Position Summary: We are seeking a Senior Network and Security Engineer to design, configure, support, and optimize network and security solutions in complex enterprise environments. Key Highlights: 1. Experience in enterprise and multi-site environments 2. Ability to analyze and resolve complex problems 3. Collaboration within multidisciplinary teams Capital Empresarial Horizonte Empresa Mexicana, a Mexican company specializing in Human Resources and Information Technologies, is seeking: Senior Network and Security Engineer **Conversational English required** **Hybrid work arrangement in CDMX, Guadalajara and/or Monterrey (3 days on-site and 2 days remote)** Technical Requirements Bachelor’s degree in Computer Engineering or related field **6 to 10 years** of experience in networking and security. Experience in **enterprise and multi-site environments**. Ability to perform **analysis and resolution of complex problems**. Ability to work effectively in **multidisciplinary teams**. Experience in **support, implementation, and operation** of network solutions. Knowledge of **best practices for high availability (HA) and disaster recovery (DR)**. ### **Primary Responsibilities** **1. Cisco ISE (core competency)** * Design, configure, and troubleshoot Cisco ISE components (PAN, PSN, MNT). * Develop and maintain policies for Wireless, Wired, VPN, and Network Access Control (NAC). * Conduct health checks, upgrades, optimization, and integration across multiple environments. **2. Forescout NAC** * Configure, administer, and support Forescout NAC for access control and security posture management. * Develop policies, device profiling, and compliance workflows. **3. Infoblox (DNS/DHCP/IPAM)** * Administer and optimize DNS, DHCP, and IPAM services. * Resolve incidents in core network services, ensuring high availability and security. **4. F5 Load Balancers (LTM, GTM, BIG-IQ)** * Configure, support, and troubleshoot F5 platforms. * Implement traffic policies, health monitoring, iRules, and global load balancing. **5. Cisco ACI** * Design and implement Leaf-Spine architectures. * Configure Tenants, VRFs, Bridge Domains, EPGs, Contracts, and Filters. * Implement Multi-Pod, Multi-Site, and Remote Leaf solutions. * Ensure high availability, disaster recovery, and scalability. **6. IBM NS1** * Administer the platform for DNS automation and global traffic management. * Optimize DNS service performance and availability. **7. Time Synchronization Systems (Microchip NTP)** * Manage NTP devices, monitor, and synchronize time. **8. Network Testing (Ixia)** * Execute L2/L3 testing, traffic simulation, and troubleshooting. **9. Automation (Gluware)** * Configure automation workflows and engines. * Develop solutions for orchestration and configuration management. **10. Ansible** * Develop automation playbooks and scripts. * Manage deployment pipelines and ensure operational consistency. ### **Secondary Responsibilities** * Administration of Cisco networks (routing & switching). * Aruba wireless infrastructure. * Implementation and operation of SD-WAN (Versa). * Administration of A10 load balancers. **We offer:** * Office working hours * 100% payroll-based compensation * Salary open to negotiation based on experience * Statutory benefits * Enhanced benefits (family SGMM, SV 1 million, grocery vouchers, 30-day bonus, PTU)