Solution Architect

Job Description

Job Title: Tier-3 (T3) NOC/TAC IP/MPLS & Security Support Engineer

Job Summary

The Tier-3 NOC/TAC IP/MPLS & Security Support Engineer provides advanced technical support for large-scale service provider or enterprise networks. This role focuses on resolving complex incidents escalated from Tier-1 and Tier-2 teams, ensuring network stability, performing in-depth troubleshooting, and coordinating with vendors for critical issues. The engineer will support IP/MPLS backbone networks, data center connectivity, firewalls, and CGNAT platforms across Nokia, Cisco, Juniper, Fortinet, and Checkpoint devices.

Key Responsibilities

Incident & Escalation Management

• Act as the highest operational escalation point for complex network and security incidents.
• Perform real-time troubleshooting on IP/MPLS backbone, core routers, and security appliances.
• Lead Major Incident (P1/P2) bridges and restore service in minimal time.
• Work closely with Tier-1/2 NOC teams, providing guidance and technical support.
  
  

Troubleshooting & Analysis

• Diagnose advanced issues involving:
• MPLS, MPLS-TE, RSVP-TE
• L3VPN, L2VPN (VPLS, VPWS, EVPN)
• Routing protocols: BGP, OSPF, IS-IS
• Analyze packet captures, logs, and control-plane behavior.
• Troubleshoot performance, latency, flaps, routing loops, and service outages.

Firewall & CGNAT Support

• Resolve escalations for:
• Juniper SRX, Fortinet, Checkpoint firewalls
• Nokia and Cisco CGNAT platforms
• Troubleshoot NAT, filtering policies, VPN issues, and security rule conflicts.
• Support customer-impacting security incidents.

Network Stability & Optimization

• Perform proactive audits and health checks on backbone infrastructure.
• Optimize routing policies, MPLS tunnels, and traffic engineering parameters.
• Recommend long-term fixes and preventive measures.
  
  

Vendor Coordination

• Collaborate with GTAC (Nokia), JTAC (Juniper), Cisco TAC, Fortinet, and Checkpoint support for unresolved issues.
• Track vendor cases, implement interim workarounds, and validate permanent fixes.
  
  

Change Management

• Review and validate change requests (CRs) and methods of procedure (MOPs).
• Support scheduled maintenance on backbone routers, firewalls, or MPLS services.
• Participate in planned upgrades, migrations, and feature enablements.
  
  

Documentation & Knowledge Sharing

• Create technical documents, RCA reports, and troubleshooting guides.
• Train and mentor Tier-1 and Tier-2 NOC engineers.
• Maintain accurate system diagrams and configuration archives.
  
  

Required Skills & Experience

Networking & MPLS Expertise

• Strong hands-on experience with:
• MPLS, MPLS-TE, RSVP-TE
• MPLS L3VPN / L2VPN / VPLS / EVPN
• Solid understanding of BGP, OSPF, IS-IS, route policies, and traffic engineering.
• Experience with QoS, multicast, redundancy protocols (VRRP/HSRP), and LAG/LACP.

Multi-Vendor Platform Knowledge

• Nokia 7750 SR / SR-OS
• Cisco NCS540, ASR9000 (IOS-XR)
• Juniper MX, QFX, SRX
• Fortinet FortiGate, Checkpoint firewalls
• CGNAT platforms across Nokia, Juniper, and Cisco
  
  

Security Knowledge

• Firewall rule management, NAT, IPS/IDS
• VPN troubleshooting (IPSec, IKE, SSL)
• CGNAT/LSN behavior, logging, and capacity issues
  
  

Operational Skill Set

• Strong incident management capability
• Familiarity with monitoring tools (NetFlow, SNMP, Telemetry)
• Log analysis, packet capture tools (tcpdump, Wireshark)
• Experience with ITIL-driven processes (Incident, Change, Problem)
• Good documentation and communication skills
  
  

Education & Certifications (Preferred)

• Bachelor's in Engineering, Computer Science, or related field
• Certifications preferred:
• CCNP/CCIE
• JNCIP/JNCIE
• Nokia NRS-II or SRA
• Fortinet NSE4/7
• Checkpoint CCSA/CCSE
  

Soft Skills

• Strong analytical and problem-solving abilities
• Calm under pressure, especially during outages
• Excellent coordination skills for major incidents
• Ability to guide and mentor junior team members
• Strong ownership and accountability
  
  

Qualifications

Bachelors Degree

Range Of Year Experience-Min Year

12

Range Of Year Experience-Max Year

15