Lead Network and Core Infrastructure Engineer

Job Description : Senior Network and Core Services Engineer

Role Summary

The Senior Network and Core Services Engineer is responsible for the design, implementation, and 24 / 7 operation of critical core network services and security infrastructure. This role requires deep, hands-on expertise across multiple vendor platforms and open-source technologies essential for Carrier-Grade performance, regulatory compliance, and subscriber services, including large-scale NAT, DNS / NTP services, and high-volume security logging. This role focuses on ensuring high availability, performance, and security of services like IPDR, CG-NAT, DNS, and Load Balancing, while driving process improvements and acting as an escalation point for complex technical issues.

Key Responsibilities

Incident and Problem Management (L0-L3) : Act as the final technical escalation point, performing deep-dive analysis, troubleshooting, and resolution for critical outages across the entire service delivery chain (Network, Applications, Security).

System Maintenance and Health : Lead the administration, configuration, and maintenance of specialized Telco / Security platforms, including A10 CG-NAT, F5 BigIP (LTM / GTM), and Fortigate ADC / Firewall.

Monitoring and Logging : Design, implement, and manage monitoring dashboards and alerts. Oversee the operation and optimization of the SGBox Log Management system for event correlation and security analysis.

Security Operations : Monitor and respond to security events, perform vulnerability assessments, and ensure compliance with operational security policies (acting as a blended NOC / SOC function).

Standard Operating Procedures (SOPs) : Create, refine, and enforce SOPs and Methods of Procedure (MOPs) for routine maintenance, fault isolation, and disaster recovery scenarios.

Team Leadership & Mentorship : Provide technical guidance and mentorship to junior NOC / SOC analysts (L0 / L1), conducting post-mortem analysis (RCA) and sharing knowledge to prevent recurring incidents.

Architect, configure, and manage Carrier-Grade Network Address Translation (CGNAT) solutions on A10 Networks devices (e.G., Thunder Series) to support IPv4 address exhaustion, including LSN, DS-Lite, and advanced logging mechanisms

Deploy, maintain, and troubleshoot the IP Detail Record (IPDR) or equivalent Open-Source logging solution for CGNAT session logging to ensure compliance with legal and regulatory requirements (Lawful Intercept / Data Retention).

Manage the deployment and performance of DNS and Network Time Protocol (NTP) services, primarily utilizing F5 BIG-IP DNS (formerly GTM) for intelligent traffic steering and high availability

Design and manage complex Application Delivery Controller (ADC) solutions and load-balancing services using F5 BIG-IP Local Traffic Manager (LTM), including VIPs, Pools, Monitors, iRules development, and SSL offloading.

Configure, manage, and optimize FortiGate firewalls for network segmentation, high-speed security policies, VPN termination, and threat prevention.

Integrate all core devices (A10, F5, FortiGate) with the SGBox platform for centralized Log Management and SIEM correlation. Develop custom parser rules, dashboards, reports, and correlation rules for proactive threat detection and compliance

Utilize scripting (Python, Ansible) for configuration management, device provisioning, and log analysis automation across the multi-vendor environment.

Key Skills and Qualifications : -

Network & Core Telco

CG-NAT

Expert : Deep configuration and troubleshooting experience with A10 or similar platforms (Carrier-Grade NAT, LSN, D-DOS Protection).

Load Balancing & ADC- F5-BigIP

Expert : Advanced administration of LTM (Local Traffic Manager), GTM / DNS (Global Traffic Manager), iRules scripting, and high-availability setups.

Security & Firewalls-Fortigate

Strong experience with deployment, policy management, routing, and Application Delivery Controller (ADC) features.

Logging & SIEM- SGBox

Proficient in managing, querying, and configuring alert correlation rules within SGBox 2or a comparable SIEM / Log Management solution.

Infrastructure Services-DNS / NTP

Expert-level knowledge of BIND / ISC-DNS or similar, synchronization protocols, and their operational security in a large-scale environment.

Data / Billing-IPDR

Understanding of IP Detail Record (IPDR) generation, collection, and correlation for billing / lawful interception purposes.

Operating Systems-Open Source

Advanced proficiency in Linux (RHEL / CentOS / Ubuntu) for application / server management, scripting (Bash / Python), and service troubleshooting.

Soft Skills : -

Exceptional troubleshooting and analytical skills in a high-pressure, live-traffic environment.

Strong ability to document and train NOC staff on new procedures and core system operations.

Excellent communication skills for cross-functional collaboration (Legal, Engineering, NOC).

Exceptional Communication : Clear and concise communication, both written and verbal, for technical documentation, incident updates, and stakeholder reporting.

Critical Thinking & Problem Solving : Proven ability to quickly isolate root causes under high-pressure, critical incident situations (e.G., major network outages).

Ownership and Accountability : Demonstrates a high degree of ownership over incidents from detection through final resolution (L3).

Team Collaboration : Ability to effectively collaborate with cross-functional teams (Engineering, Development, Security) and external vendors.

Relevant Certifications

Certifications from the primary OEM vendors are highly desirable :

Vendor / Technology

Recommended Certification Level

A10 Networks (CGNAT)

ACOS Certified Professional (ACP) or similar A10 certification.

F5 Networks (ADC / DNS)

F5 Certified BIG-IP Technical Specialist (CTS) LTM and DNS .

Fortinet (Firewall)

Fortinet NSE 4 (or higher, e.G., NSE 7) .

Log Management

SGBox Certified Specialist (or equivalent certification in a leading SIEM platform if SGBox specific training is unavailable).

General Networking

CCNP Service Provider or equivalent is a strong plus.

NOC Management Requirements

Shift Operations : Must be available to work in a 24x7 rotating shift environment as required to maintain continuous operational coverage.

Escalation Management : Must be proficient in executing high-level escalations to vendor support (e.G., F5, A10, Fortinet) and managing internal C-Level communications during high-severity incidents.

Performance Metrics : Experience working with and driving performance against key operational metrics (MTTR - Mean Time to Resolution, MTBF - Mean Time Between Failures, SLA compliance).

Process Improvement : Ability to identify recurring issues and champion automation or process changes to eliminate manual, repetitive tasks

Familiar with ticket lifecycle management, event correlation, and trouble ticket prioritization.

Strong knowledge of incident severity classification, change advisory processes, and post-incident reviews.

Exposure to automation and orchestration platforms for network fault and performance management.

Ability to create and maintain dashboard views for real-time visibility of NOC / SOC performance metrics.