Principal Network & Core Services Architect

Job Description : Senior Network and Core Services Engineer

Role Summary

The Senior Network and Core Services Engineer is responsible for the design, implementation, and 24 / 7 operation of critical core network services and security infrastructure. This role requires deep, hands-on expertise across multiple vendor platforms and open-source technologies essential for Carrier-Grade performance, regulatory compliance, and subscriber services, including large-scale NAT, DNS / NTP services, and high-volume security logging. This role focuses on ensuring high availability, performance, and security of services like IPDR, CG-NAT, DNS, and Load Balancing, while driving process improvements and acting as an escalation point for complex technical issues.

Key Responsibilities

• Incident and Problem Management (L0-L3) : Act as the final technical escalation point, performing deep-dive analysis, troubleshooting, and resolution for critical outages across the entire service delivery chain (Network, Applications, Security).
• System Maintenance and Health : Lead the administration, configuration, and maintenance of specialized Telco / Security platforms, including A10 CG-NAT, F5 BigIP (LTM / GTM), and Fortigate ADC / Firewall.
• Monitoring and Logging : Design, implement, and manage monitoring dashboards and alerts. Oversee the operation and optimization of the SGBox Log Management system for event correlation and security analysis.
• Security Operations : Monitor and respond to security events, perform vulnerability assessments, and ensure compliance with operational security policies (acting as a blended NOC / SOC function).
• Standard Operating Procedures (SOPs) : Create, refine, and enforce SOPs and Methods of Procedure (MOPs) for routine maintenance, fault isolation, and disaster recovery scenarios.
• Team Leadership & Mentorship : Provide technical guidance and mentorship to junior NOC / SOC analysts (L0 / L1), conducting post-mortem analysis (RCA) and sharing knowledge to prevent recurring incidents.
• Architect, configure, and manage Carrier-Grade Network Address Translation (CGNAT) solutions on A10 Networks devices (e.G., Thunder Series) to support IPv4 address exhaustion, including LSN, DS-Lite, and advanced logging mechanisms
• Deploy, maintain, and troubleshoot the IP Detail Record (IPDR) or equivalent Open-Source logging solution for CGNAT session logging to ensure compliance with legal and regulatory requirements (Lawful Intercept / Data Retention).
• Manage the deployment and performance of DNS and Network Time Protocol (NTP) services, primarily utilizing F5 BIG-IP DNS (formerly GTM) for intelligent traffic steering and high availability
• Design and manage complex Application Delivery Controller (ADC) solutions and load-balancing services using F5 BIG-IP Local Traffic Manager (LTM), including VIPs, Pools, Monitors, iRules development, and SSL offloading.
• Configure, manage, and optimize FortiGate firewalls for network segmentation, high-speed security policies, VPN termination, and threat prevention.
• Integrate all core devices (A10, F5, FortiGate) with the SGBox platform for centralized Log Management and SIEM correlation. Develop custom parser rules, dashboards, reports, and correlation rules for proactive threat detection and compliance
• Utilize scripting (Python, Ansible) for configuration management, device provisioning, and log analysis automation across the multi-vendor environment.

Key Skills and Qualifications : -

Network & Core Telco

Expert : Deep configuration and troubleshooting experience with A10 or similar platforms (Carrier-Grade NAT, LSN, D-DOS Protection).

Expert : Advanced administration of LTM (Local Traffic Manager), GTM / DNS (Global Traffic Manager), iRules scripting, and high-availability setups.

Strong experience with deployment, policy management, routing, and Application Delivery Controller (ADC) features.

Proficient in managing, querying, and configuring alert correlation rules within SGBox 2or a comparable SIEM / Log Management solution.

Expert-level knowledge of BIND / ISC-DNS or similar, synchronization protocols, and their operational security in a large-scale environment.

Understanding of IP Detail Record (IPDR) generation, collection, and correlation for billing / lawful interception purposes.

Advanced proficiency in Linux (RHEL / CentOS / Ubuntu) for application / server management, scripting (Bash / Python), and service troubleshooting.

Soft Skills : -

Relevant Certifications

Certifications from the primary OEM vendors are highly desirable :

Vendor / Technology

Recommended Certification Level

NOC Management Requirements