About this role
Job description
Job Title: Tier-3 (T3) NOC/TAC IP/MPLS & Security Support Engineer
Job Summary
The Tier-3 NOC/TAC IP/MPLS & Security Support Engineer provides advanced technical support for large-scale service provider or enterprise networks. This role focuses on resolving complex incidents escalated from Tier-1 and Tier-2 teams, ensuring network stability, performing in-depth troubleshooting, and coordinating with vendors for critical issues. The engineer will support IP/MPLS backbone networks, data center connectivity, firewalls, and CGNAT platforms across Nokia, Cisco, Juniper, Fortinet, and Checkpoint devices.
Key Responsibilities
Incident & Escalation Management
- Act as the highest operational escalation point for complex network and security incidents.
- Perform real-time troubleshooting on IP/MPLS backbone, core routers, and security appliances.
- Lead Major Incident (P1/P2) bridges and restore service in minimal time.
- Work closely with Tier-1/2 NOC teams, providing guidance and technical support.
Troubleshooting & Analysis
- Diagnose advanced issues involving:
- MPLS, MPLS-TE, RSVP-TE
- L3VPN, L2VPN (VPLS, VPWS, EVPN)
- Routing protocols: BGP, OSPF, IS-IS
- Analyze packet captures, logs, and control-plane behavior.
- Troubleshoot performance, latency, flaps, routing loops, and service outages.
Firewall & CGNAT Support
- Resolve escalations for:
- Juniper SRX, Fortinet, Checkpoint firewalls
- Nokia and Cisco CGNAT platforms
- Troubleshoot NAT, filtering policies, VPN issues, and security rule conflicts.
- Support customer-impacting security incidents.
Network Stability & Optimization
- Perform proactive audits and health checks on backbone infrastructure.
- Optimize routing policies, MPLS tunnels, and traffic engineering parameters.
- Recommend long-term fixes and preventive measures.
Vendor Coordination
- Collaborate with GTAC (Nokia), JTAC (Juniper), Cisco TAC, Fortinet, and Checkpoint support for unresolved issues.
- Track vendor cases, implement interim workarounds, and validate permanent fixes.
Change Management
- Review and validate change requests (CRs) and methods of procedure (MOPs).
- Support scheduled maintenance on backbone routers, firewalls, or MPLS services.
- Participate in planned upgrades, migrations, and feature enablements.
Documentation & Knowledge Sharing
- Create technical documents, RCA reports, and troubleshooting guides.
- Train and mentor Tier-1 and Tier-2 NOC engineers.
- Maintain accurate system diagrams and configuration archives.
Required Skills & Experience
Networking & MPLS Expertise
- Strong hands-on experience with:
- MPLS, MPLS-TE, RSVP-TE
- MPLS L3VPN / L2VPN / VPLS / EVPN
- Solid understanding of BGP, OSPF, IS-IS, route policies, and traffic engineering.
- Experience with QoS, multicast, redundancy protocols (VRRP/HSRP), and LAG/LACP.
Multi-Vendor Platform Knowledge
- Nokia 7750 SR / SR-OS
- Cisco NCS540, ASR9000 (IOS-XR)
- Juniper MX, QFX, SRX
- Fortinet FortiGate, Checkpoint firewalls
- CGNAT platforms across Nokia, Juniper, and Cisco
Security Knowledge
- Firewall rule management, NAT, IPS/IDS
- VPN troubleshooting (IPSec, IKE, SSL)
- CGNAT/LSN behavior, logging, and capacity issues
Operational Skill Set
- Strong incident management capability
- Familiarity with monitoring tools (NetFlow, SNMP, Telemetry)
- Log analysis, packet capture tools (tcpdump, Wireshark)
- Experience with ITIL-driven processes (Incident, Change, Problem)
- Good documentation and communication skills
Education & Certifications (Preferred)
- Bachelor’s in Engineering, Computer Science, or related field
- Certifications preferred:
- CCNP/CCIE
- JNCIP/JNCIE
- Nokia NRS-II or SRA
- Fortinet NSE4/7
- Checkpoint CCSA/CCSE
Soft Skills
- Strong analytical and problem-solving abilities
- Calm under pressure, especially during outages
- Excellent coordination skills for major incidents
- Ability to guide and mentor junior team members
- Strong ownership and accountability