Subject Matter Expert - Internet Systems Senior Engineer - Internet Platforms

Riyadh, Saudi Arabia

Permanent

Company Description

NETS is a leading global Solutions Provider and Systems Integrator dedicated empowering the future through our integrated approach and commitment to delivering Innovative, Intelligent, and Integrated Solutions (NETS 3 I’s) Effectively, Efficiently, and Economically (NETS 3 E’s). Our service portfolio covers 3 verticals namely Infrastructure, Digital, and Managed Solutions, and NETS Services include Access Networks (Fixed and Wireless), Enterprise Data Networks, Cloud Solutions, Cyber Security, Automation, Resource Outsourcing, and Managed Services. NETS brings over 4 decades of proven domain expertise, service specialization, and industry leadership, delivering over 3,000+ successful projects. Our 1,000+ highly skilled & professional staff, collaboration with over 50 leading global technology partners, 100+ NETS OEM Partners, and NETS Reach, with offices in the UK, UAE, USA, Saudi Arabia, and Pakistan, has allowed us to be the preferred trusted partner to over 200 long-standing satisfied customers including fortune 500 companies across 25+ countries.

Job Description

This senior-level role is responsible for technical leadership, design, implementation, optimization, and highest-level operational support for critical Internet-facing systems within a large-scale Service Provider network. As the Subject Matter Expert, you will possess deep technical knowledge across key platforms including Carrier-Scale DNS (Recursive & Authoritative), Web Filtering, Deep Packet Inspection (DPI), Content Delivery Network (CDN) integration points, DDoS Mitigation (Arbor), Carrier-Grade NAT (CG-NAT), and the underlying Linux infrastructure. Your expertise will ensure the reliability, performance, security, and scalability of these essential internet services. Hands-on experience with key vendors like Akamai, Infoblox, WireFilter/Symantec, Arbor, and F5 is highly desirable.

Key Responsibilities

• Technical Leadership & Architecture: Lead the design, architecture, and evolution strategy for carrier-scale DNS, Web Filtering, CG-NAT, DDoS mitigation, and related internet service platforms. Evaluate and recommend new technologies and solutions.
• Platform Management & Optimization: Oversee the day-to-day health, performance tuning, and capacity management of critical internet systems. Ensure high availability and resilience of DNS (Recursive/Authoritative), Web Filters, CG-NAT, Arbor DDoS platforms, and associated load balancers. Optimize CG-NAT resource utilization and performance.
• Advanced Troubleshooting (L3/L4 Support): Serve as the final escalation point for complex and chronic incidents impacting internet systems. Conduct in-depth root cause analysis (RCA) and implement permanent solutions.
• System Administration & Security: Perform advanced Linux system administration, including performance tuning, security hardening, and patching for servers hosting internet applications. Implement and maintain robust security postures for all managed platforms (e.g., DNSSEC deployment/management, DDoS mitigation policies, Web Filter rule optimization).
• Vendor & Technology Management: Act as the primary technical liaison with key vendors (e.g., Akamai, Infoblox, WireFilter/Symantec, Arbor, F5, CDN Providers). Stay abreast of vendor roadmaps and industry best practices. Manage CDN relationships and caching strategies.
• Change & Problem Management: Define, review, approve, and oversee the execution of complex changes on critical internet systems. Proactively identify and drive the resolution of underlying problems affecting service stability or performance.
  
  

Requirements

• Automation & Scripting: Identify opportunities and potentially develop/implement automation scripts (e.g., using Python, Bash) for system deployment, configuration management, monitoring, and reporting tasks related to internet platforms.
• Mentorship & Documentation: Provide technical guidance and mentorship to back-office and engineers. Develop and maintain high-level design documents, configuration standards, operational procedures, and best practice guidelines.
  
  

Required Qualifications & Experience

• University Degree: Bachelor's or Master's degree in Computer Science, Information Technology, Telecommunications Engineering, or a related field.
• Experience: Minimum 7-8 years of progressive, hands-on experience working within a large-scale Service Provider (ISP/Telecom) or equivalent environment, with a primary focus on managing and engineering critical internet systems.
• Core Technical Expertise:
• DNS: In-depth, expert-level knowledge of DNS protocols (Recursive & Authoritative), architecture, operations, and security (DNSSEC concepts essential) at carrier scale.
• Linux/Unix: In-depth, expert-level Linux system administration skills (e.g., RHEL, CentOS, Debian), including performance tuning, troubleshooting, security hardening, and scripting.
• CG-NAT: In-depth understanding of Carrier-Grade NAT principles, technologies (e.g., NAT444, NAT64, DS-Lite), pooling, logging requirements, and performance optimization.
• Web Filtering: Strong understanding of web filtering concepts, deployment models (proxy, transparent), policy creation, and security implications.
• DDoS Mitigation: Strong understanding of various DDoS attack vectors (volumetric, application layer) and mitigation techniques/platforms.
• Networking: Strong knowledge of TCP/IP fundamentals, routing protocols (especially BGP), and general network architecture within an SP context.
• Internet Services: Solid understanding of DPI concepts/use-cases, CDN architectures, peering, and caching principles.
• Language: Fluency in English (written and verbal).
  
  

Desired Skills & Experience (Highly Valued)

• Specific Vendor Hands-on Experience:
• DNS: Akamai DNSi (formerly Nominum - e.g., CacheServe, AuthServe), Infoblox NIOS (Grid Master, DNS/DHCP/IPAM).
• Web Filtering: WireFilter, Symantec Secure Web Gateway / WebFilter (Broadcom).
• DDoS Mitigation: Arbor Networks TMS / Arbor Edge Defense (AED).
• Load Balancing: F5 BIG-IP (LTM, GTM, DNS/GSLB).
• CG-NAT Platforms: Experience with specific CG-NAT vendor solutions (e.g., Juniper, Cisco, F5, A10).
• BNG Management: Operational experience or strong understanding of Broadband Network Gateways (e.g., Juniper MX, Cisco ASR) is a plus.
• Scripting: Proficiency in scripting languages like Python, or Bash for automation and system integration.
• Certifications: Relevant industry or vendor certifications such as Infoblox CICA/CICE, F5 Certified Professional/Specialist (F5-CTS), Arbor certifications, Linux certifications (e.g., RHCE), advanced networking certs (JNCIE-SP, CCIE-SP).
• ITIL: Familiarity or certification with ITIL framework.
• Analytical Skills: Strong analytical and problem-solving capabilities, able to handle complex, ambiguous situations.