Senior Design Specialist – Firewall, Wireless Packet Core

Jobtailor; Deutschland; Vor Ort; EUR 120.000 - 180.000; Vollzeit

Zusammenfassung

TELUS is seeking a senior security network architect to lead the design, deployment and scaling of carrier-grade firewall solutions across 4G/5G core interfaces. You will ensure compliance with 3GPP/GSMA standards, perform threat modeling, and drive high-availability architectures in containerized environments such as RedHat OpenShift.

You will also own CI/CD pipelines for firewall config, collaborate with multiple cross-functional teams, and mentor engineers on VPNs, protocols and security

Qualifikationen

• 10+ years of core network security experience in telecom environments.
• Expert-level skills with Juniper SRX and Palo Alto firewalls (bare metal & VM).
• Strong knowledge of 3G/4G/5G core topology, SBA, CUPS.
• Deep understanding of mobile core protocols: GTPv1/2, HTTP/2, Diameter, SCTP.
• Familiar with 3GPP TS 33.501 and GSMA FS.36/FS.37.
• Proficient in Wireshark, PCAP, protocol analyzers.
• Experience deploying security in Docker, Kubernetes, OpenShift.
• Experience with CI/CD (GitLab) and software lifecycles.
• Bachelor's or Master's in relevant STEM field.

Aufgaben

• Lead architectural design for security infrastructure in carrier-grade networks.
• Architect, deploy, and scale high-availability firewall solutions across interfaces.
• Ensure firewall architectures adhere to 3GPP/GSMA standards; perform threat modeling.
• Lead capacity planning, vendor roadmaps, and security investments.
• Collaborate with RAN, Transport, Policy, and other teams to align firewall policies.
• Develop CI/CD pipelines for firewall configuration deployment and MoP docs.
• Analyze network performance and remediate security issues using protocol tools.

Kenntnisse

Security architecture

Network security

Threat modeling

CI/CD automation

Containerization awareness

Ausbildung

Bachelor's or Master's in CS/IT/EE

Tools

Juniper SRX

Palo Alto firewalls

RedHat OpenShift

GitLab

Wireshark

PCAP

Jobbeschreibung

• Lead architectural design for security infrastructure protecting TELUS' Wireless Core Network, with focus on carrier‑grade firewalls (Juniper SRX, Palo Alto Networks) across 4G EPC and 5G Service‑Based Architecture (SBA) boundaries
• Architect, deploy, and scale high‑availability firewall solutions protecting critical core interfaces (Gi/SGi, N6, roaming, inter‑carrier) and control/user plane functions in containerized environments (RedHat OpenShift)
• Ensure firewall architectures adhere to 3GPP and GSMA standards; conduct proactive threat modeling and risk assessments for new 5G functions; support security audits and vulnerability remediation
• Lead capacity planning, growth forecasting, and technology lifecycle management; develop vendor roadmaps and business cases for future security investments; manage technical relationships with firewall and core vendors
• Partner with RAN, Transport, Policy, Signaling, IMS/Voice, and Virtualized Infrastructure teams to align firewall architectures, policies, and configurations with Wireless Core network functions (AMF/MME, SMF/SPGW‑C, UPF/SPGW‑U)
• Develop CI/CD pipelines for firewall configuration deployment; create detailed Methods of Procedure (MoP) documents; develop KPI dashboards for performance monitoring and optimization
• Analyze network performance, resolve complex security issues, and optimize architecture using protocol validation tools (Wireshark, PCAP) and vendor logging mechanisms

Requirements

• 10+ years of progressive experience in core network security and telecom engineering in carrier‑grade environments
• Expert‑level experience designing, implementing, and troubleshooting Juniper SRX and Palo Alto Networks firewalls (bare metal and virtual)
• Strong technical knowledge of 3G/4G/5G Packet Core network topology, control/user plane separation (CUPS), and Service‑Based Architecture (SBA)
• Deep understanding of mobile core protocol behavior (GTPv1/GTPv2, HTTP/2, Diameter, SCTP, Service‑Based Interfaces)
• Deep knowledge of telecom security standards: 3GPP security architecture (TS 33.501) and GSMA guidelines (FS.36/FS.37)
• Master‑level troubleshooting skills with network analysis tools (Wireshark, PCAP, protocol analyzers)
• Proficiency deploying network security in containerization ecosystems (Docker, Kubernetes, RedHat OpenShift)
• Experience with CI/CD automation pipelines and modern software development lifecycles (GitLab)
• Bachelor's or Master's degree in Computer Science, Information Technology, Electrical Engineering, or related technical STEM field

Core Competencies

Demonstrates expertise in designing and implementing security architectures for carrier‑grade networks, with a focus on Juniper SRX and Palo Alto Networks firewalls. Proficient in network security standards, containerization, and CI/CD automation to optimize performance and ensure compliance.

Tools & Technologies

• RedHat OpenShift
• GitLab
• Protocol Analyzers