Job description

WHO WE ARE Headquartered in New York City, Take-Two Interactive Software, Inc. is a leading developer, publisher, and marketer of interactive entertainment for consumers around the globe. We develop and publish products principally through Rockstar Games, 2K, and Zynga. Our strategy is to create hit entertainment experiences, delivered on every platform relevant to our audience through a variety of sound business models. Our pillars - creativity, innovation, and efficiency - guide us as we strive to create the highest quality, most captivating experiences for our consumers. The Company’s common stock is publicly traded on NASDAQ under the symbol TTWO. For more corporate and product information please visit our website at take2games.com. While our offices (physical and virtual) are casual and inviting, we are deeply committed to our core tenets of creativity, innovation and efficiency, and individual and team development opportunities. Our industry and business are continually evolving and fast-paced, providing numerous opportunities to learn and hone your skills. We work hard, but we also like to have fun, and believe that we provide a great place to come to work each day to pursue your passions. THE CHALLENGE Join a highly skilled, collaborative, and forward-thinking Global Network Engineering team dedicated to maintaining a robust, resilient, and cutting-edge network infrastructure. We pride ourselves on a culture of shared knowledge, continuous improvement, and mutual support, always ready to innovate and tackle complex challenges together as we transition toward identity-centric, automated network architectures. We are looking for a Lead Network Engineer to help shift our global network away from a traditional perimeter model toward a modern Zero Trust Architecture (ZTA) and Infrastructure as Code approach. The core of this role is deep, hands-on expertise with Palo Alto Networks security and identity-driven access, paired with the ability to act as technical lead for the engineers around you. WHAT YOU’LL TAKE ON Zero Trust Architecture & Network Security: Architect, deploy, and scale global Zero Trust Network Access (ZTNA) solutions that provide secure, granular access in place of traditional perimeter VPN entry points. Lead the design and enforcement of identity-based microsegmentation policies across data centers and corporate offices to restrict lateral movement and enforce least privilege. Own the evolution of our SASE (Secure Access Service Edge) roadmap, delivering policy-driven security for a distributed workforce and cloud workloads. Serve as the subject matter expert for Palo Alto Networks firewalls and Panorama, using advanced capabilities such as App-ID, User-ID, and WildFire to maintain a strong security posture. Network Automation & Source of Truth: Maintain and grow our centralized Network Source of Truth (NetBox or Nautobot) as the data foundation for automated network and security configuration. Use Python, Ansible, and Terraform to automate deployments, standardize configuration, and eliminate manual drift. Build automated workflows and CI/CD pipelines, and champion network programmability across the team. Cloud & Infrastructure Operations: Design secure network topologies in AWS and GCP, aligning cloud-native constructs such as VPCs and Transit Gateways with our Zero Trust requirements. Manage our physical and virtual infrastructure — Arista switching, Meraki wireless and MX, F5 BIG-IP load balancing, and existing SD-WAN — as the transport layer beneath the security architecture. Use Checkmk and cloud-native visibility tools to proactively identify and resolve performance and security incidents, with telemetry from the physical port to the cloud WAN. Partner with ISPs and technology vendors to keep our global footprint resilient and performant. Technical Leadership & Collaboration: Act as technical lead for engineers on the team, setting direction on design decisions, reviewing work, and sharing knowledge across the group. Set the bar for design, configuration, and documentation quality through peer review and cross-functional collaboration. On-Call Support: Participate in a rotating on-call schedule (1 week primary, 1 week backup) supporting critical network infrastructure. WHAT YOU BRING 7+ years in enterprise network engineering, including meaningful time spent on network security. Deep, hands-on experience with Palo Alto Networks firewalls and Panorama (PAN-OS, App-ID, User-ID). This is the center of the role. Practical experience designing or operating Zero Trust, ZTNA, SASE, or microsegmentation solutions in production. Solid routing and switching fundamentals, including BGP in a multi-circuit environment. Working knowledge of public cloud networking (AWS or GCP): VPCs, Transit Gateways, and cloud load balancers. Comfort automating your own work with Python, Ansible, or Terraform . Experience as a technical lead, driving design decisions and technical work across teams. Strong communication skills, with the ability to explain complex technical concepts to technical and non-technical audiences alike. Bachelor's degree in Computer Science, Information Technology, or a related field — or equivalent practical experience. Strong experience with Arista EOS, Meraki (switching, wireless, MX), or SD-WAN platforms such as Silverpeak / Aruba EdgeConnect. F5 BIG-IP (LTM/DNS/APM) and network monitoring tools such as Checkmk. Source-of-truth tooling (NetBox, Nautobot) and CI/CD for network configuration. Certifications such as PCNSE, CCNP, or Meraki CMNA/CMNO — or equivalent hands-on experience. WHAT WE OFFER YOU Great Company Culture . Ranked as one of the most creative and innovative places to work, creativity, innovation, efficiency, diversity and philanthropy are among the core tenets of our organization and are integral drivers of our continued success. Growth : As a global entertainment company, we pride ourselves on creating environments where employees are encouraged to be themselves, inquisitive, collaborative and to grow within and around the company. Work Hard, Play Hard. Our employees bond, blow-off steam, and flex some creative muscles – through corporate boot camp classes, company parties, game release events, monthly socials, and team challenges. Benefits . Medical (HSA & FSA), dental, vision, 401(k) with company match, employee stock purchase plan, commuter benefits, in-house wellness program, broad learning & development opportunities, a charitable giving platform with company match and more! Perks . Fitness allowance, employee discount programs, free games & events and stocked pantries. Please be aware that Take-Two does not conduct job interviews or make job offers over third-party messaging apps such as Telegram, WhatsApp, or others. Take-Two also does not engage in any financial exchanges during the recruitment or onboarding process, and the Company will never ask a candidate for their personal or financial information over an app or other unofficial chat channel. Any attempt to do so may be the result of a scam or phishing exercise. Take-Two’s in-house recruitment team will only contact individuals through their official Company email addresses (i.e., via a take2games.com email domain). If you need to report an issue or otherwise have questions, please contact Careers@take2games.com As an equal opportunity employer, Take-Two Interactive Software, Inc. (“Take-Two”) is committed to fostering and celebrating the diverse thoughts, cultures, and backgrounds of its talent, partners, and communities throughout its organization. Consistent with this commitment, Take-Two does not discriminate or retaliate against any employee or job applicant because of their race, color, religion, sex (including pregnancy, sexual orientation, and gender identity), national origin, age, disability, and genetic information (including family medical history), or on the basis of any other trait protected by applicable law. If you need to report a concern or have questions regarding Take-Two’s equal opportunity commitment, please contact Careers@take2games.com.

Requirements

Must-haves

Architect, deploy, and scale global Zero Trust Network Access (ZTNA) solutions that provide secure, granular access in place of traditional perimeter VPN entry points.
Lead the design and enforcement of identity-based microsegmentation policies across data centers and corporate offices to restrict lateral movement and enforce least privilege.
Own the evolution of our SASE (Secure Access Service Edge) roadmap, delivering policy-driven security for a distributed workforce and cloud workloads.
Serve as the subject matter expert for Palo Alto Networks firewalls and Panorama, using advanced capabilities such as App-ID, User-ID, and WildFire to maintain a strong security posture.
Maintain and grow our centralized Network Source of Truth (NetBox or Nautobot) as the data foundation for automated network and security configuration.
Use Python, Ansible, and Terraform to automate deployments, standardize configuration, and eliminate manual drift.
Build automated workflows and CI/CD pipelines, and champion network programmability across the team.
Design secure network topologies in AWS and GCP, aligning cloud-native constructs such as VPCs and Transit Gateways with our Zero Trust requirements.
Manage our physical and virtual infrastructure — Arista switching, Meraki wireless and MX, F5 BIG-IP load balancing, and existing SD-WAN — as the transport layer beneath the security architecture.
Use Checkmk and cloud-native visibility tools to proactively identify and resolve performance and security incidents, with telemetry from the physical port to the cloud WAN.
Partner with ISPs and technology vendors to keep our global footprint resilient and performant.
Act as technical lead for engineers on the team, setting direction on design decisions, reviewing work, and sharing knowledge across the group.
Set the bar for design, configuration, and documentation quality through peer review and cross-functional collaboration.
Participate in a rotating on-call schedule (1 week primary, 1 week backup) supporting critical network infrastructure.
7+ years in enterprise network engineering, including meaningful time spent on network security.
Deep, hands-on experience with Palo Alto Networks firewalls and Panorama (PAN-OS, App-ID, User-ID). This is the center of the role.
Practical experience designing or operating Zero Trust, ZTNA, SASE, or microsegmentation solutions in production.
Solid routing and switching fundamentals, including BGP in a multi-circuit environment.
Working knowledge of public cloud networking (AWS or GCP): VPCs, Transit Gateways, and cloud load balancers.
Comfort automating your own work with Python, Ansible, or Terraform .
Experience as a technical lead, driving design decisions and technical work across teams.
Strong communication skills, with the ability to explain complex technical concepts to technical and non-technical audiences alike.
Bachelor's degree in Computer Science, Information Technology, or a related field — or equivalent practical experience.
Strong experience with Arista EOS, Meraki (switching, wireless, MX), or SD-WAN platforms such as Silverpeak / Aruba EdgeConnect.

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

pythonci/cdawsgcp

Platform: greenhouse
Effort: quick

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Wellness