Network Engineer

Procain Consulting & Services; Bengaluru; On-site; INR 900,000 - 1,300,000; Full time

Job summary

Procain Consulting & Services in Bengaluru seeks a Network and Traffic Engineering Engineer to design, implement, and manage PoP and colocation networks with BGP routing, DDoS mitigation, and traffic steering. The role emphasizes ISP/edge environments and robust automation using Ansible and NetBox.

You will lead from planning to production deployment, establish scalable processes, and collaborate with remote teams across time zones. This is a contract role requiring 40 hours per week in India.

Qualifications

• 7+ years of network engineering experience in service-provider or edge networks.
• Deep hands-on BGP routing, FlowSpec, RTBH, and multihoming.
• DDoS detection/mitigation using sFlow/NetFlow/IPFIX.
• Experience with GeoDNS, anycast, IP-geolocation data.
• Ansible automation and NetBox familiarity; Python scripting.
• Strong English communication and ability to work remotely across time zones.

Responsibilities

• Design, implement, and approve PoP and colocation network topology.
• Finalize BGP FlowSpec and RTBH approaches; prepare costed hardware plan.
• Implement, test, and document end-to-end DDoS mitigation processes.
• Establish traffic-steering monitoring and monthly data refresh automation.
• Maintain NetBox inventory and develop Ansible-based templates.
• Deploy at least one new edge site using the site bring-up checklist.

Skills

BGP routing

DDoS mitigation

Traffic engineering

Ansible automation

NetBox

Python scripting

RTBH/FlowSpec

Geolocation steering

Incident management

English communication

Remote collaboration

Edge/site deployment

Tools

sFlow

NetFlow/IPFIX

NetBox

Prometheus

Redis

Kafka

GitLab CI/CD

Job description

Network and Traffic Engineering Engineer

Employment Type: Contract
Location Preference: India
Working Hours: 40 hours per week

Role Overview

The Network and Traffic Engineering Engineer will be responsible for the design, implementation, and operational management of PoP and colocation networks, including BGP routing, DDoS mitigation, network automation, traffic optimization, and DNS-based traffic steering. The ideal candidate will have strong experience in ISP, telecom, service-provider, hosting, or CDN environments, with the ability to take network designs from planning through production deployment and establish repeatable processes for bringing new edge sites online.

Required Qualifications

• 7+ years of network engineering experience in an ISP, telecom operator, CDN, hosting provider, or large-scale edge network environment.
• Strong hands-on expertise in BGP routing, including routing policies, communities, multihoming, FlowSpec (RFC 8955), and RTBH.
• Proven production experience with DDoS detection and mitigation using sFlow, NetFlow, or IPFIX, including upstream or on-premises traffic scrubbing.
• Experience with global traffic management, GeoDNS, health- and latency-based steering, anycast, and IP-geolocation data.
• Hands-on configuration and troubleshooting experience with enterprise or service-provider routers and switches.
• Experience designing and implementing out-of-band network management.
• Practical experience with Ansible-based network automation and NetBox or an equivalent source-of-truth platform.
• Python scripting experience for network automation, monitoring, or operational tooling.
• Experience with GitLab CI/CD, Git-based configuration management, and peer-reviewed network changes.
• Strong incident management, troubleshooting, and root-cause analysis skills.
• Excellent written and verbal English communication skills.
• Experience working independently in remote teams across multiple time zones.
• Previous production on-call experience and the ability to provide examples of network design documents or operational runbooks.

Preferred Qualifications

• Experience with sFlow-RT and authoritative DNS operations.
• Knowledge of Internet Exchange (IX) peering and interconnection.
• Experience integrating commercial WAF and DDoS protection platforms.
• Experience with network hardware selection, cost analysis, and bill-of-materials preparation.
• Familiarity with Redis or Kafka as data sources.
• Experience with Prometheus monitoring and alerting.
• Familiarity with OpenBao, HashiCorp Vault, or compatible secrets-management platforms.
• Experience working with telecom operators or ISPs in India.

Key Deliverables and Success Metrics

• Complete and obtain approval for the network design document, including site architecture, service placement, and out-of-band management.
• Finalize the BGP FlowSpec and RTBH implementation approach and submit a costed hardware recommendation by February 12, 2027.
• Implement, test, and document the end-to-end DDoS mitigation process.
• Establish traffic-steering monitoring and alerts for anomalies and stale geolocation data, and automate the monthly data refresh.
• Maintain accurate NetBox inventory and implement standardized Ansible-based network configuration templates.
• Successfully use the site bring-up checklist to deploy at least one new edge site.