Lead Network Engineer – Toronto

Headquartered in New York City, Take-Two Interactive Software, Inc. is a leading developer, publisher, and marketer of interactive entertainment for consumers around the globe. We develop and publish products principally through Rockstar Games, 2K, and Zynga. Our strategy is to create hit entertainment experiences, delivered on every platform relevant to our audience through a variety of sound business models. Our pillars - creativity, innovation, and efficiency - guide us as we strive to create the highest quality, most captivating experiences for our consumers.

Join a highly skilled, collaborative, and forward-thinking Global Network Engineering team dedicated to maintaining a robust, resilient, and cutting-edge network infrastructure. We pride ourselves on a culture of shared knowledge, continuous improvement, and mutual support, always ready to innovate and tackle complex challenges together as we transition toward identity-centric, automated network architectures. We are looking for a Lead Network Engineer to help shift our global network away from a traditional perimeter model toward a modern Zero Trust Architecture (ZTA) and Infrastructure as Code approach. The core of this role is deep, hands-on expertise with Palo Alto Networks security and identity-driven access, paired with the ability to act as technical lead for the engineers around you.

WHAT YOU’LL TAKE ON

• Zero Trust Architecture & Network Security: Architect, deploy, and scale global Zero Trust Network Access (ZTNA) solutions that provide secure, granular access in place of traditional perimeter VPN entry points. Lead the design and enforcement of identity-based microsegmentation policies across data centers and corporate offices to restrict lateral movement and enforce least privilege. Own the evolution of our SASE (Secure Access Service Edge) roadmap, delivering policy-driven security for a distributed workforce and cloud workloads. Serve as the subject matter expert for Palo Alto Networks firewalls and Panorama, using advanced capabilities such as App-ID, User-ID, and WildFire to maintain a strong security posture.
• Network Automation & Source of Truth: Maintain and grow our centralized Network Source of Truth (NetBox or Nautobot) as the data foundation for automated network and security configuration. Use Python, Ansible, and Terraform to automate deployments, standardize configuration, and eliminate manual drift. Build automated workflows and CI/CD pipelines, and champion network programmability across the team.
• Cloud & Infrastructure Operations: Design secure network topologies in AWS and GCP, aligning cloud-native constructs such as VPCs and Transit Gateways with our Zero Trust requirements. Manage our physical and virtual infrastructure — Arista switching, Meraki wireless and MX, F5 BIG-IP load balancing, and existing SD-WAN — as the transport layer beneath the security architecture. Use Checkmk and cloud-native visibility tools to proactively identify and resolve performance and security incidents, with telemetry from the physical port to the cloud WAN. Partner with ISPs and technology vendors to keep our global footprint resilient and performant.
• Technical Leadership & Collaboration: Act as technical lead for engineers on the team, setting direction on design decisions, reviewing work, and sharing knowledge across the group. Set the bar for design, configuration, and documentation quality through peer review and cross-functional collaboration.
• On-Call Support: Participate in a rotating on-call schedule (1 week primary, 1 week backup) supporting critical network infrastructure.

WHAT YOU BRING

• 7+ years in enterprise network engineering, including meaningful time spent on network security.
• Deep, hands-on experience with Palo Alto Networks firewalls and Panorama (PAN-OS, App-ID, User-ID).
• Practical experience designing or operating Zero Trust, ZTNA, SASE, or microsegmentation solutions in production.
• Solid routing and switching fundamentals, including BGP in a multi-circuit environment.
• Working knowledge of public cloud networking (AWS or GCP): VPCs, Transit Gateways, and cloud load balancers.
• Comfort automating your own work with Python, Ansible, or Terraform.
• Experience as a technical lead, driving design decisions and technical work across teams.
• Strong communication skills, with the ability to explain complex technical concepts to technical and non-technical audiences alike.
• Bachelor's degree in Computer Science, Information Technology, or a related field — or equivalent practical experience.
• Strong experience with Arista EOS, Meraki (switching, wireless, MX), or SD-WAN platforms such as Silverpeak / Aruba EdgeConnect.
• F5 BIG-IP (LTM/DNS/APM) and network monitoring tools such as Checkmk.
• Source-of-truth tooling (NetBox, Nautobot) and CI/CD for network configuration.
• Certifications such as PCNSE, CCNP, or Meraki CMNA/CMNO — or equivalent hands-on experience.

WHAT WE OFFER YOU

• Great Company Culture.
• Growth.
• Work Hard, Play Hard.
• Benefits.
• Perks.

The pay range for this position in Ontario at the start of employment is expected to be between $118,300 and $168,300 per year. However, base pay offered is based on market location, and may vary further depending on individualized factors for job candidates, such as job-related knowledge, skills, experience, and other objective business considerations.

As an equal opportunity employer, Take-Two Interactive Software, Inc. is committed to fostering and celebrating the diverse thoughts, cultures, and backgrounds of its talent, partners, and communities throughout its organization.