ایرانسل لبز
ایرانسل لبز

Network Security Engineer

Tehran/Pasdaran
Full Time
Saturday to Tuesday 8:00 - 17:15 , Wednesday 8:00-15:00
-
Transportation -Loan -Health insurance

این فرصت شغلی چقدر برای من مناسب است؟

51 - 200 employees
Telecom
Iranian company dealing only with Iranian entities
1398
Privately held
توضیحات بیشتر

key Requirements

6 years experience in similar position
Wireshark - Intermediate
Linux - Intermediate
PowerBI - Basic
Docker - Basic
Kubernetes - Basic
Prometheus - Basic

Job Description

Ensure the reliability, security, performance, and high availability of the organization’s network infrastructure across Huawei networking, general enterprise networking, Kubernetes clusters, and private cloud environments based on OpenStack/FusionSphere.
Key Responsibilities
1. Multi‑Vendor Network Operations (General Networking + Huawei)
  • Design, deploy, and operate multi‑vendor enterprise and datacenter networks (Huawei, Cisco, Juniper, etc.).
  • Manage Layer 2/3 networking: VLANs, trunking, STP, LACP, routing (OSPF, BGP).
  • Develop and optimize core, distribution, and access network topologies.
  • Configure and maintain NAT, load balancing, link redundancy, and HA network components.
  • Perform network capacity planning and proactive performance optimization.
2. Huawei Network Management
  • Configure and operate Huawei CloudEngine switches, AR/SR routers, wireless components, and datacenter platforms.
  • Manage VLANs, VXLAN (if applicable), VRF, routing policies, ACLs, and security domains.
  • Troubleshoot complex Huawei network issues and lead Root Cause Analysis.
3. Cloud Networking (OpenStack / FusionSphere)
  • Manage OpenStack Neutron networking including Provider/Tenant Networks, VLANs, trunks, and overlays.
  • Configure Floating IPs, Security Groups, Neutron FWaaS, and LBaaS.
  • Troubleshoot connectivity issues between VMs, Kubernetes services, and enterprise networks.
4. Kubernetes Networking
  • Operate and troubleshoot Kubernetes networking including CNI plugins (Calico, Cilium, etc.).
  • Service networking (ClusterIP, NodePort, LoadBalancer).
  • Ingress controllers.
  • Network policies.
  • Optimize pod‑to‑pod, pod‑to‑service, and east‑west traffic paths.
  • Collaborate with Platform/DevOps teams to define cloud‑native network architecture.
5. Security Operations
  • Implement and manage firewalls, ACLs, traffic filtering, segmentation, and Zero‑Trust policies.
  • Ensure secure ingress/egress traffic flows in Kubernetes.
  • Conduct periodic security assessments and remediate vulnerabilities.
  • Analyze network and security logs through ELK/Loki to detect anomalies.
6. Monitoring & Troubleshooting
  • Use Wireshark, tcpdump, and NetFlow/sFlow for traffic analysis.
  • Develop network monitoring dashboards in Grafana and Prometheus.
  • Provide detailed RCA for major network or security incidents.
7. Documentation & Collaboration
  • Create and maintain detailed network architecture diagrams, standards, and operational procedures.
  • Work closely with CloudOps, DevOps Platform, Virtualization, and Security teams.
  • Participate in designing network and security architecture for new cloud‑native services.
Required Skills
General Networking
  • Strong understanding of L2/L3 networking: VLAN, STP, LACP, dynamic routing protocols.
  • Knowledge of L4/L7 load balancing, NAT, DNAT/SNAT, ACLs, and firewalls.
  • Datacenter network design fundamentals.
Vendor‑Specific
  • Hands‑on experience with Huawei datacenter networking.
  • Familiarity with Cisco IOS/NX‑OS or Juniper JunOS.
Cloud Networking
  • OpenStack Neutron networking concepts.
  • Kubernetes networking fundamentals: CNI, Ingress, NetworkPolicy, service mesh basics.
Tools
  • Wireshark, tcpdump, nmap.
  • ELK, Loki, Prometheus, Grafana.
  • Basic Git for configuration versioning or lightweight IaC.
Preferred Qualifications
  • Experience with SDN, VXLAN, EVPN.
  • Virtual networking in cloud and container platforms.
  • Experience with enterprise load balancers (F5, HAProxy, NGINX Plus).
  • HCIA/HCIP, CCNA/CCNP, or JNCIA/JNCIS certifications.
  • Strong incident management capability.
  • Analytical and structured problem‑solving.
  • Clear and professional documentation.
  • Effective cross‑team collaboration.

Job Requirements

Gender
Men / Women
Education
Bachelor| Computer and IT
Software
Wireshark| Intermediate Linux| Intermediate Docker| Basic Kubernetes| Basic Prometheus| Basic PowerBI| Basic

ثبت مشکل و تخلف آگهی

ارسال رزومه برای ایرانسل لبز