Internet Storm Center

Job Description

Senior Network Design Engineer
Hybrid Role (Kingston, NY)
No Visas
$120,000 - $150,000
Travel 10%
CCNP (certificated preferred)

At Archtop Fiber, our mission is to be the true fiber of your community.
We believe in the power of local connectivity and dedication to bridging the digital divide in rural and suburban cities across the Hudson Valley and beyond. We have seen how larger cities often receive priority for broadband infrastructure upgrades, leaving smaller communities underserved. That’s why we prioritize serving “Main Street” communities by investing up to $350 million in private funding to build over 2,500 miles of fiber-optic infrastructure.

Our commitment extends beyond providing reliable Internet and Phone services – We’re not just living and working in Kingston, NY we are fully committed to our awesome community. From our fantastic community programs to fueling economic growth with improved connectivity and an abundance of tech-driven jobs, we’re all about bringing fun and excitement to our neck of the woods!

Archtop Fiber is seeking a Network Design Engineer in a role will support a variety of design needs for our network infrastructure and will provide guidance to keep secure our service provider environment. This position will work closely with the Director Network Engineering and others to support our advanced 100% fiber optic communications network.

What you will do:
• Lead and oversee the development and implementation of multi-layered network security policies, standards, guidelines, and generally accepted industry practices which ensure compliance and support 99.999% uptime.
• Identify risk factors, develop response plans to address these risks, and recommend processes and procedures to assess vulnerability and audit security integrity.
• Perform tasks of high complexity related to the design, maintenance, and problem analysis of IP network access and IP transport equipment.
• Monitor, create reports, and provide analysis based on customer traffic patterns and overall internet traffic flows by utilizing our carrier-class traffic monitoring and threat mitigation tools – provide recommendations for network augments, peering additions, etc. based upon findings.
• Support process development, documentation and support as needed to other teams for implementation, troubleshooting, and repair of network connections and customer deployments.
• Develop customer service configurations that can be deployed via network automation and lowtouch provisioning. Work collectively with Network Operations to ensure that configurations align with and meet the needs of provision platforms.
• Assist Network Operations team objectives such as network management/element management, performance measurement, fault management, access security, and others.
• Create and maintain Best Practice documentation to capture our design, and deployment methodologies, network device configuration templates, and customer service configuration with dedicated focus and cybersecurity.

What you will bring:
• 4+ years of progressive experience in network engineering or network architecture roles in a large network environment. Experience in a Service Provider (ISP/CSP) environment is strongly desired.
• Strongly working knowledge of all aspects of OSI layers 1-4 is required.
• Firewall and various VPN technology experience required.
• Experience with application security standards, cloud security standards, vulnerability management, data loss prevention, risk assessment, investigating security incidents, and developing security action plans.
• Demonstrated deployment of eBGP, iBGP, ISIS, OSPF, MPLS, and Segment Routing is preferred.
• Knowledge of FTTx design and PON access technology GPON, XGSPON, OLT, and ONU is a plus.
• Detailed knowledge of End-to-End QOS, including Layer 2 and Layer 3 approaches, MPLS EXP,
classifying, packet marking, and queueing.
• Knowledge of network tools and protocols including SNMP, TACACs+, radius, syslog, DHCP, VLANs, Spanning Tree, EVPN, VPLS, IPsec, Pseudowire, VRFs, MC-LAG, EV-LAG, DNS, NAT, CGN, TCP, UDP, FQDN, SIP, MGCP, RTP, NTP, PTP, and others.
• Thorough knowledge and experience with network access control and authentication methodologies including Access Control Lists (ACLs), RPKI, RADIUS, TACACS+, 802.1X, MAC and certificate authentication.

What we offer:
• Competitive salary 120-150K
• Heavily subsidized medical, dental, and vision
• Holidays, PTO, and Flexible work schedules
• 401(k)
• Employee Assistance Program (EAP)
• Life insurance, short & long term disability insurance
• Employee Referral Program
• Employee discount programs

Archtop Fiber is proud to be an Equal Opportunity Employer. We celebrate diversity and are committed to creating a welcoming and inclusive environment for all.

Please send your resume to Careers@Archtopfiber.com or CFraiman@Archtopfiber.com