Senior Network Engineer

Senior Network Engineer Responsibilities: Design, plan, deploy, monitor, and maintain a Fixed Wireless ISP to increase network reliability and scalability. Lead IP/Layer 2 & Layer 3 network design and deployment focusing on Reliability, Availability, Serviceability, and Manageability. Create and maintain documentation for network design and deployment, fostering adoption of ISP platforms. Coach lower-tier technical employees on network design, deployment, implementation, and troubleshooting techniques. Foster a culture of Reliability, Availability, Serviceability, Manageability, and Affordability. Design, deploy, maintain, and coach on customer LAN and other networks. Perform other reasonable activities as required by management. Duties: Provision and support DWDM Network and Ethernet Demarcation equipment. Monitor network performance and troubleshoot issues. Respond to alerts and outages and resolve incidents. Review and apply security patches and updates. Support escalated network-related tickets from Tier 2 and priority clients. Document changes and maintain network diagrams. Ensure compliance with security policies and best practices. Analyze network traffic and performance trends. Conduct routine maintenance (e.g., firmware updates, log reviews). Optimize routing and switching configurations. Test and verify backups of network device configurations. Coordinate with fiber and wireless teams on upcoming changes or projects. Perform security audits and vulnerability assessments. Review and update network documentation and policies. Plan and implement network upgrades or capacity expansions. Optimize Quality of Service (QoS) and bandwidth utilization. Review vendor contacts and evaluate new technologies. Work with deployment teams on Fiber and Fixed Wireless expansion. Create and maintain project plans for all network and customer projects. Create and maintain documentation for customer networks. Project-Based/Long-Term Tasks: Design and deploy new network infrastructure (e.g., core upgrades, new sites). Implement redundancy and high-availability solutions. Manage large-scale migrations (e.g., IPv6 adoption, CG-NAT, MPLS over MikroTIK). Develop automation scripts to improve network efficiency and monitoring. Collaborate on security frameworks. Train and mentor junior admins. Requirements: 5 – 7 years of proven experience in Fixed Wireless ISP, IP, and network design. Competency with TCP/IP, VLANs, VRFs, OSPF, BGP, MPLS, and Spanning Tree. In-depth experience in circuits and ISP routing protocols. High-level troubleshooting skills. Thorough understanding of carrier Ethernet networks, LAN/WAN networks, IP protocol, routing, switching, network management, and security. Customer relations skills. Understanding of wiring and installation standards for equipment. Understanding of computing system technologies and environments, including servers, PCs, and storage systems. Competency with vendor platforms: Mikrotik, Cambium, Telrad, Tarana, Nokia, Adtran, Zhone. Desirable Qualifications: Soft switch dial translations, call routing, and associated functionality design, deployment, maintenance, and coaching. VoIP/POTS/Other voice service design, deployment, maintenance, and coaching. Provision circuits across the telephony network. Experience in statewide/regional carrier networks and LEC call routing. Experience with MetroEthernet standard. Background in provisioning circuits. Previous experience with security tools, such as SonicWall firewall. Install and maintain carrier-grade soft switch technology. Technical Skills: Networking Protocols & Concepts: Strong understanding of TCP/IP, BGP, OSPF, MPLS, VLANs, VRFs. Layer 2 & Layer 3 switching and routing. Quality of Service (QoS) implementation. Network segmentation and traffic engineering. Hardware & Infrastructure: Experience with carrier-grade routers, switches, and firewalls (e.g., Cisco, MikroTik, Arista, IP Infusion). Wireless networking and RF planning (FWA Specifically). DWDM, dark fiber, and carrier-grade transport networks. VPN concentrators and technologies. Security & Compliance: Firewall rules, ACLs, and IPS/IDS. Network access control (Radius, TACacs, 802.1X authentication). VPN technologies (IPSec, SSL VPN, L2TP, GRE tunnels). DDoS mitigation strategies. Monitoring & Troubleshooting: Packet analysis tools (Wireshark, TCPdump, NetFlow). SNMP-based monitoring (Cacti, WhatsUp Gold). Syslog and event correlation. Experience with troubleshooting latency, jitter, and congestion issues. TR-069 Protocol. Scripting & Automation: Network automation (VBScript, Bash, MikroTik scripting). REST APIs for managing network devices. CLI proficiency in multiple vendors. Beyond SOF