Senior Network Architect/Engineer

Job Description: Senior Network Architect/Engineer (Secure SD-WAN & IP/MPLS)Role SummaryWe are seeking a highly skilled and experiencedSenior Network Architect/Engineerto lead the design, implementation, and operation of our next-generation secure Wide Area Network (WAN). This critical role requires deep, hands-on expertise inFortiGate Secure SD-WANfor distributed enterprise connectivity, coupled with an expert-level understanding ofNokia Service Router (SR)platforms and associated IP/MPLS routing technologies for our backbone or core network infrastructure. The role requires deep operational expertise in routing, traffic steering, SD-WAN overlay/underlay connectivity, and proactive fault detection in a24x7 network operations environment . The engineer will ensure network stability, performance, and security through structured incident handling, service management, and coordination with OEM and internal engineering teams. Key Responsibilities Network Design & Architecture:Design, plan, and optimize complex network topologies integrating FortiGate SD-WAN solutions with the core Nokia IP/MPLS network for seamless, secure, and high-performance connectivity. FortiGate SD-WAN Implementation:Lead the deployment, configuration, and management of FortiGate devices for SD-WAN, includingZero-Touch Provisioning (ZTP) , advanced security policies (NGFW, UTM), dynamic path selection, and application steering. Nokia Routing Operations:Configure, maintain, and troubleshoot mission-critical Nokia Service Routers (e.g., 7750 SR, 7210 SAS), focusing on core routing protocols ( BGP, OSPF, IS-IS ) and advanced MPLS services ( VPLS, VPRN, Segment Routing ). Security Integration:Ensure a cohesive security posture by integrating FortiGate's security features with the wider network infrastructure, establishing secure VPNs (IPsec/SSL), and defining network segmentation. Troubleshooting & Resolution (Tier 3/4):Serve as the highest escalation point for complex, multi-vendor network and security incidents, diagnosing issues across both the FortiGate overlay and Nokia underlay networks. Documentation & Standards:Create and maintain high-quality documentation (HLD/LLD), operational runbooks, and configuration templates to ensure standardization and compliance. Core IP Network Operations:Administer and troubleshootNokia Routerplatforms (e.g., Service Routers) and related protocols ( BGP, OSPF, MPLS, RSVP, LDP ) essential for core Telco service delivery.Key Skills & Proficiencies Fortinet SD-WAN & Security Deep Expertise in FortiOS:Mastery of FortiGate firewall and security features (NGFW, UTM, IPS, Web Filtering, Application Control). SD-WAN Fabric:Comprehensive knowledge of FortiGate SD-WAN architecture, including SD-WAN Rules, performance SLAs, and centralized management usingFortiManager . Automation:Experience with Fortinet Fabric Connectors, automation stitches, and scripting for large-scale SD-WAN deployments. Analytics:Proficiency in utilizingFortiAnalyzerfor log analysis, reporting, and proactive monitoring of security and network performance. Nokia IP Routing & MPLS Service Router OS (SR OS):Expert-level configuration and troubleshooting on Nokia Service Router platforms. Core Routing:In-depth knowledge ofBGP(IBGP/EBGP, Route Reflectors),OSPF/IS-IS , and routing policy/manipulation (route-maps, prefix-lists). MPLS & Services:Strong understanding and experience withMPLS, LDP, RSVP-TE , and Layer 2/Layer 3 VPN services ( VPLS, VPRN ). QoS (Quality of Service):Designing and implementing complex QoS policies for differentiated traffic handling across the Nokia core. General Network & Soft Skills Protocols:Expert knowledge of TCP/IP, Ethernet, L2/L3 technologies, IPsec, and network virtualization concepts. Problem-Solving:Exceptional analytical and structured troubleshooting skills in a multi-vendor environment. Communication:Ability to clearly articulate complex technical issues and solutions to both technical and non-technical audiences.Recommended Certifications Certifications from both Original Equipment Manufacturers (OEMs) are crucial to validate the dual expertise required for this role. Vendor Certification Level FocusFortinet FCSS - Network Security (SD-WAN) Fortinet Certified Solution Specialist . Validates expertise in complex FortiGate SD-WAN and advanced security. FCP - Network Security (NSE 4/5) Fortinet Certified Professional . Validates hands-on daily configuration and management. Nokia NRS II(Nokia Routing Specialist II) Focus on IP/MPLS and advanced router configuration.Highly recommended minimum. SRA(Service Routing Architect) The highest-level Nokia certification.Demonstrates expertise in designing, building, and supporting service provider networks and services.Highly desirable.NOC Management & Operations Requirements The candidate will be a key resource for the Network Operations Center (NOC), defining tools and processes for managing the combined environment. Centralized Management Tools: FortiManager/FortiAnalyzer:Must be able to leverage these tools for centralized configuration, policy rollout, and security event correlation across the SD-WAN estate. Nokia Network Management:Experience with Nokia's management tools (e.g.,Network Services Platform - NSP ) or similar carrier-grade platforms for fault, configuration, accounting, performance, and security (FCAPS). Proactive Monitoring & Alerting: Define and implement monitoring strategies for both SD-WAN overlay quality (latency, jitter, loss) and Nokia underlay health (interface status, CPU, memory, routing protocol peering). Integrate FortiGate/FortiAnalyzer and Nokia platform alarms with the centralized NOC ticketing and monitoring systems (e.g., Nagios, Zabbix, Splunk, ServiceNow). Incident & Change Management: Adhere to strict ITIL-based processes for managing high-risk changes on core Nokia routers and mass deployments/changes on the FortiGate SD-WAN fabric. Develop and manageStandard Operating Procedures (SOPs)for common Level 1/2/3 NOC tasks, enabling efficient first-line support. Automation Focus: Advocate for and implement automation solutions (e.g., Ansible, Python scripting) to reduce manual configuration errors and accelerate deployment/troubleshooting on both the Fortinet and Nokia platforms. Performance Reporting:Responsible for generating operational reports, tracking key performance indicators (KPIs) like availability and incident resolution times (MTTR), and presenting findings to management