Job Description

Role Overview:

We are seeking an accomplished and technically proficient

Technology Specialist

to lead our

main ISP backbone network infrastructure (Upstream and Downstream), datacentre facilities and core intranet infrastructure

. The ideal candidate will have a strong leadership background in managing Tier-1/Tier-2 ISP infrastructure and in-depth hands-on experience with

routing, transport, access, and SD-WAN technologies

. Also candidate will have

deep expertise in Internet routing and access technologies

, including

BGP (EBGP & IBGP), MPLS, BNG, GPON, ONT, and OLT systems

.

You will oversee the architecture, implementation, optimization, and security of our ISP's core services, scaling of the ISP's core and access networks and ensuring maximum uptime, performance, and security. Also ensure the network infrastructure supports business growth, performance, and reliability objectives.

Key Responsibilities:

1. Network Architecture & Planning

Lead the planning and execution of network expansion projects in alignment with business goals. Architect and optimize

BGP peering

, route reflectors, prefix filtering, and traffic engineering policies. Design and maintain

MPLS Layer 2 and Layer 3 VPNs

, ensuring optimal traffic segmentation and QoS policies. Lead network automation efforts for provisioning, monitoring, and configuration management.

2. Datacenter & Core Network Leadership

Lead all technical operations of the primary ISP datacenter, ensuring high availability, fault tolerance, and scalability of infrastructure. Plan and implement the physical and logical design of network infrastructure including rack layout, cabling, power, cooling, and redundancy. Oversee all physical and logical network infrastructure within the main datacenter including routers, switches, firewalls, load balancers, and fiber optic connectivity. Manage data center layout, power, cooling, and physical security in accordance with international standards (e.g., TIA-942, ISO 27001).

3. IP Core & Routing Architecture (BGP/MPLS)

Architect and maintain advanced

BGP peering policies

with upstream providers, IXPs, and CDN nodes for optimal route selection and traffic engineering. Design and manage

MPLS Layer 2/3 VPNs

, traffic segmentation, and QoS enforcement across the backbone. Maintain robust route-reflector topologies and redundancy plans in accordance with industry best practices. Oversee network convergence, route dampening, flap detection, and prefix filtering.

4. Subscriber Management (BNG)

Oversee and optimize

BNG systems

(Broadband Network Gateways) for PPPoE, DHCP, NAT, dynamic IP assignment, and AAA (RADIUS/TACACS) integration. Implement traffic shaping, policy-based routing, and per-user QoS profiles. Ensure seamless integration with OSS/BSS platforms and subscriber provisioning systems. Configure and manage

BNG systems

for IP address management, session control, authentication (RADIUS/AAA), QoS, and traffic shaping. Oversee dynamic IP assignment, PPPoE, DHCP, and NAT configurations on BNG routers.

5. Access Network Management (GPON, ONT, OLT)

Design, Supervise, optimize and maintain

GPON network deployments and access networks

, including provisioning, monitoring, and troubleshooting of

OLT/ONT systems

from vendors. Manage integration with BNG and aggregation layers to ensure efficient service delivery to subscribers. Define service profiles, VLAN tagging (TR-069, TR-101), and optical parameters (TX/RX, LOS, etc.) monitoring. Monitor performance and reliability of customer access networks and troubleshoot GPON-related issues. Ensure interoperability between GPON systems and BNG (Broadband Network Gateway) platforms for subscriber management.

6. SD-WAN & Edge Connectivity

Lead design and deployment of

SD-WAN

technologies for enterprise customer connectivity and service delivery. Integrate SD-WAN with MPLS/IPSec backbones, including high availability, path selection, and real-time failover strategies. Support Zero Touch Provisioning (ZTP) and centralized orchestration using SD-WAN controllers.

7. Monitoring, Automation & Performance Management

Implement robust NMS tools (Zabbix, Cacti, Nagios, LibreNMS, Prometheus, Grafana) for end-to-end visibility of all infrastructure. Automate configuration management using

Ansible, Python, Netconf/YANG

, and scripting tools. Monitor network KPIs (latency, jitter, packet loss) and enforce SLA compliance. Generate periodic reports on network health, usage statistics, incident reports, and capacity planning. Ensure 24x7 availability of critical services through structured NOC operations.

8. Security, Compliance & Risk Management

Ensure infrastructure compliance with local and international standards (ISO 27001, GDPR, LI). Enforce perimeter and internal security using ACLs, firewalls, IDS/IPS, and DDoS mitigation. Conduct regular risk assessments and implement network segmentation and access control. Ensure all systems are hardened and patched regularly to prevent unauthorized access and service disruption. Implement DDoS mitigation strategies and monitor for anomalies in traffic behaviour. Comply with local and international regulations on data protection and lawful interception (LI).

9. Leadership & Stakeholder Management

Lead a team of network and system engineers, NOC personnel, and support staff. Collaborate with cross-functional teams including product, customer service, and enterprise sales to deliver solutions. Manage vendor relationships, hardware lifecycle, licensing, and service-level agreements (SLAs). Participate in regulatory audits and ensure lawful interception (LI) infrastructure readiness. Lead, mentor, and grow a team of network engineers and support staff. Collaborate with vendors for procurement, support, and escalation of network hardware and software issues. Conduct technical training sessions for junior engineers on network technologies and best practices.

Required Technical Skills:

Technology

Expertise Level

1. BGP (iBGP/eBGP, Peering, Policy Control, route policies, filtering, peering, traffic engineering)

Expert

2. MPLS (LDP, RSVP, TE, VPNv4/v6, Layer 2/3 VPNs)

Expert

3. BNG (Broadband Network Gateway - PPPoE, DHCP, RADIUS) - Subscriber management, IP pool design, PPPoE/DHCP, AAA and QoS enforcement.

Advanced

4. GPON/OLT/ONT Systems : Deployment, provisioning, and troubleshooting

Advanced

5. SD-WAN (Cisco Viptela, Fortinet, Versa, etc.)

Advanced

6. IP Routing/Switching (OSPF, IS-IS, VLANs, STP, VRRP, HSRP)

Advanced

7. Firewall & Security (IPTables, ACLs, DDoS Mitigation)

Intermediate

8. Network Monitoring (Zabbix, Grafana, NetFlow, SNMP)

Proficient

9. Automation (Ansible, Python, Bash, REST APIs)

Proficient

Qualifications & Experience:

Bachelor's/Master's degree in

Telecommunications, Computer Science, Electrical Engineering

or related field Minimum

10+ years of relevant ISP/telecom industry experience

with at least

5 years in a senior leadership role

. Certifications (any of the following highly preferred):

CCIE-SP

,

JNCIE-SP

,

MEF-CECP

HCIE

,

NRS II

,

SD-WAN Specialist (Cisco/Fortinet/VMware)

ITIL, ISO 27001, or PMP (optional but valued)

Soft Skills & Attributes:

Strong leadership, decision-making, and team-building skills. Excellent communication with the ability to present to executive and technical stakeholders. Analytical thinking and problem-solving mindset. Able to manage high-pressure environments and 24x7 operations.

KPIs / Success Metrics:

Core Network Uptime (Target: 99.999%) MTTR (Mean Time to Repair) for Major Outages SLA Fulfilment Rate Network capacity utilization and forecast accuracy

Reduction in Network Incidents / Recurring Issues

Successful On-time Project Deliveries (expansions, upgrades) NOC & Field Team Productivity and Response TimeCustomer Satisfaction Index (CSAT/NPS for service quality)
Job Type: Full-time

Pay: ?100,000.00 - ?150,000.00 per month

Benefits:

Health insurance
Work Location: In person