• Troubleshoot and resolve BAU tickets related to network issues, including switching, routing and application-level firewall controls. • Work within secure government environments, adhering to strict access controls, compliance standards, and change management processes. • Manage BGP routing configurations and troubleshoot peering issues to ensure network stability and optimal path selection. • Monitor and maintain IPsec tunnels for secure site-to-site connectivity, addressing encryption, authentication, and tunnel stability concerns. • Respond to incidents escalated by the service desk, conducting detailed analysis and timely resolution to restore service with minimal impact. • Plan and implement network changes and upgrades, including firewall policies, routing updates, wireless access point deployments, and infrastructure enhancements. • Monitor network performance and health using appropriate tools, proactively identifying areas for improvement, patching, or capacity upgrades. • Maintain and regularly update documentation, including network diagrams, configuration standards, and operational procedures. • Ensure wireless network coverage and performance meet required standards, addressing interference, roaming, and security configuration issues. • Collaborate with internal teams and government clients to ensure solutions are secure, scalable, and aligned with business and regulatory requirements.

• Organize network maintenance and system upgrades including service packs, patches, hot fixes, and security configurations • Install, implement, and configure various types of network devices, solutions, and services, including routers, switches, firewalls, load balancers, VPN, QoS • Monitor system performance, ensure it is available and reliable • Monitor system resource utilization, trending, and capacity planning • Ensure compliance with policies and requirements and troubleshoot any issues • Organize the implementation of security tools, policies, and procedures in conjunction with the company’s security team • Work together with vendors and other IT personnel to resolve problems faster

• Design and implement advanced BGP policies (path selection, community strings, filtering). • Design, configure and maintain the MPLS core, including LDP/RSVP-TE and deployment of L3 VPN services (VRFs) and L2VPNs (VPLS/VPWS) for enterprise customers. • Perform Traffic Engineering (TE) using RSVP-TE to ensure deterministic paths and apply QoS policies (DiffServ over MPLS) to prioritize critical services (voice and video). • Implement high-availability and fast-convergence mechanisms such as BFD (Bidirectional Forwarding Detection) and MPLS FRR (Fast Reroute) to meet maximum SLAs (five nines). • Manage edge routers (Provider Edge - PE) and Carrier-Grade NAT (CGN) solutions and plan the transition to IPv6 (Dual Stack or DS-Lite). • Lead resolution of complex incidents involving packet loss, microbursts, high latency and protocol failures (BGP session flapping, OSPF/ISIS adjacency issues).

• Routing Engineering: Design and implement advanced BGP policies (path selection, community strings, filtering) to optimize multihoming and peering traffic across multiple IXPs. • MPLS and VPNs: Design, configure and maintain the MPLS core, including LDP/RSVP-TE and the deployment of L3 VPN services (VRF/M-BGP) and L2VPNs (VPLS/VPWS) for enterprise customers. • Optimization and QoS: Perform Traffic Engineering (TE) using RSVP-TE to ensure deterministic paths and apply QoS policies (DiffServ over MPLS) to prioritize critical services (Voice and Video). • Resilience: Implement high-availability and fast-convergence mechanisms such as BFD (Bidirectional Forwarding Detection) and MPLS FRR (Fast Reroute), targeting maximum SLAs (five nines). • Edge Technologies: Manage edge routers (Provider Edge - PE) and Carrier-Grade NAT (CGN) solutions and design IPv6 transition strategies (Dual Stack or DS-Lite). • Level 3 Troubleshooting: Lead resolution of complex incidents involving packet loss, microbursts, high latency and protocol failures (BGP session flapping, OSPF/IS-IS adjacency issues).