Full time      Erbil

Title: Senior Network Engineer

Location: Erbil

Available Until: 11/30/2026

Duties & Responsibilities:

• Design, implement, configure, and maintain enterprise and Data Center networks.
• Manage and troubleshoot BGP routing and VXLAN EVPN environments.
• Support and maintain Spine-Leaf Data Center Fabric architectures.
• Deploy, manage, and troubleshoot SD-WAN infrastructure.
• Monitor network performance, availability, and security.
• Perform network upgrades, migrations, and optimization.
• Conduct Root Cause Analysis and resolve complex network incidents.
• Maintain network documentation and topology diagrams.
• Collaborate with IT, infrastructure, and security teams on network projects.

Technical Requirements
1. Routing & Networking

• Strong knowledge of IPv4/IPv6, subnetting, CIDR, and IP planning.
• Advanced routing concepts, including BGP (eBGP/iBGP), peering, route filtering, route maps, prefix lists, BGP attributes, and path selection.
• OSPF, route redistribution, static and dynamic routing.
• HSRP/VRRP, ECMP, NAT, ARP, DHCP, and DNS.

2. Data Center Networking & Fabrics

• Strong understanding of Data Center Fabric architecture and Spine-Leaf topology.
• VXLAN and VXLAN EVPN architecture.
• BGP EVPN control plane and Underlay/Overlay networking.
• Anycast Gateway, Distributed Gateway, and multi-tenancy.
• Layer 2/Layer 3 connectivity, ECMP, redundancy, and high availability.
• Troubleshooting VXLAN and Data Center Fabric environments.
• Experience with Cisco Nexus, Cisco ACI, Arista, or equivalent platforms.

3. Switching & Layer 2 Technologies

• VLANs, 802.1Q trunking, STP/RSTP/MSTP.
• LACP, Port Channels, and Multi-Chassis Link Aggregation.
• Inter-VLAN routing, network segmentation, and loop prevention.
• Layer 2/Layer 3 troubleshooting and high-availability designs.

4. SD-WAN Technologies

• Strong understanding of SD-WAN architecture and deployment models.
• Overlay/Underlay connectivity and centralized orchestration.
• Application-aware routing, dynamic path selection, and failover.
• QoS, traffic engineering, and IPsec tunnels.
• Branch connectivity, monitoring, and troubleshooting.
• Experience with Cisco Viptela, Fortinet SD-WAN, VMware VeloCloud, or equivalent solutions.

5. Network Security & Firewalls

• Firewall configuration, security policies, and access control.
• SNAT, DNAT, and network segmentation.
• Site-to-site and remote-access VPNs.
• IPsec and SSL VPN technologies.
• Experience with Fortinet, Palo Alto, Cisco, or equivalent platforms.

6. Monitoring & Troubleshooting

• Network monitoring tools (Zabbix, PRTG, SolarWinds, etc.).
• Packet analysis using Wireshark.
• SNMP, Syslog, and network telemetry fundamentals.
• Performance monitoring, latency, packet loss, and bandwidth analysis.
• Root Cause Analysis (RCA), incident resolution, and network documentation.

7. Wireless Networking

• Enterprise wireless architecture, access points, and controllers.
• SSID configuration, WPA2/WPA3 security, and basic RF concepts.

Core Requirements

• Experience: Minimum 3 years of professional Network Engineering experience.
• Education: Bachelor's degree in IT, Computer Engineering, Telecommunications, or a related field.
• Certification: CCNP certification is mandatory (CCNP Enterprise or CCNP Data Center preferred).
• Language: Fluency in Kurdish, English is required, spoken and written.
• Strong hands-on knowledge of BGP, VXLAN, Data Center Fabrics, and SD-WAN.
• Experience with enterprise-grade routers, switches, and firewalls.
• Strong troubleshooting, analytical, communication, and problem-solving skills.
• Ability to work independently and collaborate with infrastructure and security teams.

Preferred Qualifications:

• Experience with Cisco Nexus, ACI, Catalyst, or Arista platforms.
• Practical VXLAN EVPN deployment and troubleshooting experience.
• Experience with enterprise or service provider BGP environments.
• Network automation knowledge (Python, Ansible).
• Experience with network migrations, disaster recovery, and high-availability architecture.