IT and Signals

The Network Engineer

Available options: Basic Contract. Compare Contracts

Responsibilities

deployment, configuration and support of network equipment: routers, switches, access points — MikroTik, Ubiquiti UniFi, etc.
design and maintenance of network segmentation via VLAN: separate segments for voice, video, workstations, management
setting up static routing, NAT, ACL and firewall rules (mainly on MikroTik, which act as a perimeter firewall)
deployment and support of IP telephony: SIP trunks, registration of SIP clients, interaction with PBX/SBC — mainly FreePBX, there are other solutions
deployment and support of IP video surveillance networks: network stack configuration for hundreds of RTSP streams, interaction with RTSP servers, calculation and provision of bandwidth
deployment and support of Wi-Fi based on Ubiquiti UniFi, MikroTik (CAPsMAN)
traffic analysis and troubleshooting network problems with console tools on Linux (tcpdump, tshark, iftop, mtr, ss/netstat, nmap, etc.)
control of traffic directions: configuration of firewall rules, ACL and isolation of segments so that traffic goes only where it should
work with monitoring systems (Zabbix, Grafana): adding devices, setting up triggers and dashboards, analyzing incidents
maintenance of technical documentation on serviced networks
participation in duty (on-call)

experience as a network engineer or network administrator from 3 years, Middle+ level (Senior is an advantage)
confident work with MikroTik RouterOS: firewall, NAT, VLAN, bridging, routing, scripting
understanding of TCP/IP at the packet level: the ability to read dumps, recognize problems (packet loss, retransmits, MTU/fragmentation, ARP conflicts, broadcast storms)
practical experience with VLAN segmentation, trunk/access ports, STP/RSTP
SIP: understanding the protocol, client registration, NAT passage, reading SIP-tracks (sngrep, tshark, FreePBX logs)
experience with IP video surveillance and RTSP (addressing, routing and bandwidth for hundreds of streams)
confident work in the Linux console: tcpdump/tshark, log analysis, basic administration (systemd, journalctl, iptables/nftables)
Zabbix and Grafana: adding hosts, working with templates, reading dashboards
experience with Ubiquiti UniFi and/or MikroTik CAPsMAN – Wi-Fi deployment and maintenance
ability to quickly navigate an unfamiliar network by configs and topology, often without ready-made documentation

mobilization until the end of martial law or contract service.
the possibility of transferring active military personnel with the consent of the immediate commander
the possibility of service for candidates who, according to the conclusion of the VLC, are suitable for service in military support units, TCC and SP, higher educational institutions, training centers, etc.
possibility of service for candidates with the status of IRF
cash security: from UAH 50,000 depending on the task