ایرانسل لبز | Irancell Labs

مخابرات و ارتباطات (تلکام) ۵۱ تا ۲۰۰ نفر www.labs.irancell.ir

فرصت‌های شغلی ۱۰

استخدام Network Security Engineer

دسته‌بندی شغلی

IT / DevOps / Server
موقعیت مکانی

تهران ، تهران
نوع همکاری

تمام وقت
حداقل سابقه کار

سه تا شش سال
حقوق

توافقی

شرح موقعیت شغلی

Ensure the reliability, security, performance, and high availability of the organization’s network infrastructure across Huawei networking, general enterprise networking, Kubernetes clusters, and private cloud environments based on OpenStack/FusionSphere.

Key Responsibilities

1. Multi‑Vendor Network Operations (General Networking + Huawei)

Design, deploy, and operate multi‑vendor enterprise and datacenter networks (Huawei, Cisco, Juniper, etc.).
Manage Layer 2/3 networking: VLANs, Trunking, STP, LACP, Routing (OSPF, BGP).
Develop and optimize core, distribution, and access network topologies.
Configure and maintain NAT, load balancing, link redundancy, and HA network components.
Perform network capacity planning and proactive performance optimization.

2. Huawei Network Management

Configure and operate Huawei CloudEngine switches, AR/SR routers, wireless components, and datacenter platforms.
Manage VLANs, VXLAN (if applicable), VRF, routing policies, ACLs, and security domains.
Troubleshoot complex Huawei network issues and lead Root Cause Analysis.

3. Cloud Networking (OpenStack / FusionSphere)

Manage OpenStack Neutron networking including Provider/Tenant Networks, VLANs, Trunks, and overlays.
Configure Floating IPs, Security Groups, Neutron FWaaS, LBaaS.
Troubleshoot connectivity issues between VMs, Kubernetes services, and enterprise networks.

4. Kubernetes Networking

Operate and troubleshoot Kubernetes networking including:
- CNI plugins (Calico, Cilium, etc.)
- Service Networking (ClusterIP, NodePort, LoadBalancer)
- Ingress Controllers
- Network Policies
Optimize pod‑to‑pod, pod‑to‑service, and east‑west traffic paths.
Collaborate with Platform/DevOps teams to define cloud‑native network architecture.

5. Security Operations

Implement and manage firewalls, ACLs, Traffic Filtering, Segmentation, and Zero‑Trust policies.
Ensure secure Ingress/Egress traffic flows in Kubernetes.
Conduct periodic security assessments and remediate vulnerabilities.
Analyze network and security logs through ELK/Loki to detect anomalies.

6. Monitoring & Troubleshooting

Use Wireshark, tcpdump, NetFlow/sFlow for traffic analysis.
Develop network monitoring dashboards in Grafana and Prometheus.
Provide detailed RCA for major network or security incidents.

7. Documentation & Collaboration

Create and maintain detailed network architecture diagrams, standards, and operational procedures.
Work closely with CloudOps, DevOps Platform, Virtualization, and Security teams.
Participate in designing network and security architecture for new cloud‑native services.

Required Skills:

General Networking

Strong understanding of L2/L3 networking: VLAN, STP, LACP, dynamic routing protocols.
Knowledge of L4/L7 load balancing, NAT, DNAT/SNAT, ACLs, firewalls.
Datacenter network design fundamentals.

Vendor‑Specific

Hands‑on experience with Huawei datacenter networking.
Familiarity with Cisco IOS/NX‑OS or Juniper JunOS.

Cloud Networking

OpenStack Neutron networking concepts.
Kubernetes networking fundamentals: CNI, Ingress, NetworkPolicy, service mesh basics.

Tools

Wireshark, tcpdump, nmap.
ELK, Loki, Prometheus, Grafana.
Basic Git for configuration versioning or lightweight IaC.

Preferred Qualifications

Experience with SDN, VXLAN, EVPN.
Virtual networking in cloud and container platforms.
Experience with enterprise load balancers (F5, HAProxy, NGINX Plus).
HCIA/HCIP, CCNA/CCNP, or JNCIA/JNCIS certifications.
Strong incident management capability
Analytical and structured problem‑solving
Clear and professional documentation
Effective cross‑team collaboration

ثبت آگهی استخدام در جابینجا

معرفی شرکت

مجموعۀ ایرانسل لبز، از سال 1398، با مأموریت انجام فعالیت های تحقیق و توسعه، نوآوری و تجاری سازی در زمینۀ شبکۀ ارتباطات و فناوری اطلاعات و کسب وکارهای پیرامونی با کمک مراکز علمی و پژوهشی داخل و خارج از کشور، اعم از دانشگاه ها، شرکت های دانش بنیان، استارتاپ ها و شرکت های فناور، با هدف تأمین نیازمندی های بازار ICT تأسیس شده است.
چشم انداز این مجموعه، پیشگام بودن در توسعۀ منابع انسانی و زیرساخت های تحقیقاتی اقتصاد دانش بنیان در حوزۀ ارتباطات و فناوری اطلاعات و دستیابی به جایگاه برترین شرکت ملی در زمینۀ خلق محصولات و خدمات این حوزه است و «بخش تحقیق و توسعه»، «مرکز نوآوری ایرانسل» و «آکادمی ایرانسل»، از جمله بخش های اصلی آن هستند.