Senior Network Engineer

Salary: $140,000 – $170,000 per year

Senior Network Engineer / Network Designer

If you know your way around SR OS, are comfortable with BGP policy and want to grow your career on a carrier network, this is your role. You'll help run a live national and international IP/MPLS network day to day, and play a hands-on role in a core refresh that's just getting started.

About Feenix Communications

Feenix is a New Zealand telecommunications company running a high-capacity, carrier-grade national and international IP and fiber network. We deliver wholesale and enterprise connectivity, peering, cloud interconnection and network services, and we use automation to make sophisticated telco services easier for customers to consume and manage.

Our philosophy is simple: create opportunities and solve problems for our customers, backed by long-term relationships and commercially sound solutions.

Feenix is part of Tū Ātea, a Māori-led telecommunications infrastructure and technology group shaping the future of connectivity in Aotearoa. Across the Group, capability spans spectrum and private 4G/5G, RF and transmission, physical infrastructure, IoT and automation, so we can look past a single product and solve the whole problem. The Group's commercial success also strengthens Māori ownership and participation in Aotearoa's digital future.

About the role

We're hiring a Senior Network Engineer. You'll design, operate and continuously improve our Nokia IP/MPLS network, look after routing and peering, help defend the network against DDoS, and work through faults when things go wrong. Senior engineers will act as an escalation point and help shape where the network goes next.

Key responsibilities

• Nokia IP/MPLS networking: Design and operate services on 7750 SR, 7250 IXR and 7210 SAS platforms, including VPRNs, L2 services (Epipe, VPLS), RSVP-TE/LDP LSPs, SDPs and PXCs.

• BGP routing and Internet peering: Manage transit and peering, IX connectivity and bilateral peering. Maintain prefix filtering, communities, import/export policy and route preference.

• IPv4/IPv6 routing: Run dual-stack routing and IPv6 BGP, RPKI ROV, BMP route monitoring, BGP FlowSpec, and inter-VPRN route leaking and peering.

• DDoS protection and defence: Operate the Corero platform and its DDoS policies, and handle mitigation and reporting. Develop and maintain DDoS defence playbooks, and run controlled attack simulation and testing with hping3.

• Network upgrades and migrations: Plan and deliver core platform upgrades and migrations, including SR OS upgrades and customer service migrations with minimal service impact.

• Network auditing, optimisation and configuration management: Continuously review and optimise routing, configurations, LSPs, SDPs and QoS policies against design standards.

• QoS and traffic engineering: Build and maintain Nokia access QoS, SAP ingress/egress and network QoS policies. Optimise traffic paths using MPLS-TE.

• Network troubleshooting and fault resolution: Diagnose and resolve routing, service, BGP session and customer/network faults, act as an escalation point at senior level, and contribute to root cause analysis and post-incident reporting.

• Network design, automation and implementation: Design and build new services and Internet breakouts. Develop configuration templates and automation workflows, and implement changes through the change advisory process.

• Network performance testing: Carry out throughput and performance testing and fault isolation using iperf and related tools.

• Operations: Participate in the after-hours on-call roster. Depending on how many engineers we add, on-call will be once every 4-7 weeks, and for architect-level engineers we aim for once every 7-8 weeks.

What's ahead

There are always projects underway, but over the next few years you'll play a hands-on role in some significant programmes of work, including:

• Core network refresh: A multi-year refresh of our core network. You'll contribute to the target-state design, platform testing and a phased migration of core routing and services with minimal customer impact.

• Firewall cluster consolidation and refresh: Consolidating and refreshing our FortiGate firewall clusters.

• BNG upgrades: Upgrading our BNG/LNS platforms to support subscriber growth, new features and improved resilience. This covers IPoE/PPPoE, L2TP, RADIUS integration and CGNAT.

About you

• Senior hands-on engineering experience in a service provider, carrier or ISP network environment

• Nokia SR OS experience across IP/MPLS services, LSPs and QoS, or equivalent experience on another carrier platform with the drive to get there

• Solid BGP knowledge, including transit, peering, IX connectivity and routing policy

• Comfortable working with dual-stack IPv4/IPv6 networks and modern routing security such as RPKI

• Experience with DDoS mitigation, firewalls and BNG/subscriber platforms is highly valued

• Experience delivering upgrades and migrations on live networks with minimal customer impact

• A calm, methodical approach to troubleshooting, root cause analysis and post-incident reporting

• An interest in automation and templating to make the network more consistent and easier to run

Why Feenix

• Hands-on involvement in a carrier network's core refresh and target-state architecture

• Real breadth: routing, peering, DDoS, QoS, firewalls and BNG on one network

• A sustainable on-call roster

• The wider specialist expertise of the Tū Ātea Group to draw on

• Work that contributes to a broader purpose in Aotearoa's digital future

Apply now

If you're ready to help design and run the next generation of the Feenix network, please apply here. We will be in touch with applicants who have the relevant level of experience.