Network Engineer

Network and Traffic Engineering Engineer

Employment Type: Contract
Location Preference: India
Working Hours: 40 hours per week

Role Overview

The Network and Traffic Engineering Engineer will be responsible for the design, implementation, and operational management of PoP and colocation networks, including BGP routing, DDoS mitigation, network automation, traffic optimization, and DNS-based traffic steering. The ideal candidate will have strong experience in ISP, telecom, service-provider, hosting, or CDN environments, with the ability to take network designs from planning through production deployment and establish repeatable processes for bringing new edge sites online.

Required Qualifications

• 7+ years of network engineering experience in an ISP, telecom operator, CDN, hosting provider, or large-scale edge network environment.
• Strong hands-on expertise in BGP routing, including routing policies, communities, multihoming, FlowSpec (RFC 8955), and RTBH.
• Proven production experience with DDoS detection and mitigation using sFlow, NetFlow, or IPFIX, including upstream or on-premises traffic scrubbing.
• Experience with global traffic management, GeoDNS, health- and latency-based steering, anycast, and IP-geolocation data.
• Hands-on configuration and troubleshooting experience with enterprise or service-provider routers and switches.
• Experience designing and implementing out-of-band network management.
• Practical experience with Ansible-based network automation and NetBox or an equivalent source-of-truth platform.
• Python scripting experience for network automation, monitoring, or operational tooling.
• Experience with GitLab CI/CD, Git-based configuration management, and peer-reviewed network changes.
• Strong incident management, troubleshooting, and root-cause analysis skills.
• Excellent written and verbal English communication skills.
• Experience working independently in remote teams across multiple time zones.
• Previous production on-call experience and the ability to provide examples of network design documents or operational runbooks.

Preferred Qualifications

• Experience with sFlow-RT and authoritative DNS operations.
• Knowledge of Internet Exchange (IX) peering and interconnection.
• Experience integrating commercial WAF and DDoS protection platforms.
• Experience with network hardware selection, cost analysis, and bill-of-materials preparation.
• Familiarity with Redis or Kafka as data sources.
• Experience with Prometheus monitoring and alerting.
• Familiarity with OpenBao, HashiCorp Vault, or compatible secrets-management platforms.
• Experience working with telecom operators or ISPs in India.

Key Deliverables and Success Metrics

• Complete and obtain approval for the network design document, including site architecture, service placement, and out-of-band management.
• Finalize the BGP FlowSpec and RTBH implementation approach and submit a costed hardware recommendation by February 12, 2027.
• Implement, test, and document the end-to-end DDoS mitigation process.
• Establish traffic-steering monitoring and alerts for anomalies and stale geolocation data, and automate the monthly data refresh.
• Maintain accurate NetBox inventory and implement standardized Ansible-based network configuration templates.
• Successfully use the site bring-up checklist to deploy at least one new edge site.