Senior Network Engineer

At Lunavi, we believe in illuminating the path forward and helping our customers navigate what’s next. We are innovators who combine the power of human ingenuity and technology to deliver an unrivaled customer experience. We’re a trusted partner for companies looking to digitally transform their business, modernize business applications, solve traditional IT challenges, and extract ROI from technology. Our high-performing teams, deep expertise, and proven processes help to propel businesses forward. 

The Lunavi Cloud Platform Senior Network Engineer will design, build, and operate the high-availability, two-layer Spine-and-Leaf network architecture that supports Lunavi managed network, cloud, and colocation services. As a carrier-grade network and managed service provider, Lunavi relies on this role to own the routing core, the multi-homed internet edge, and the multi-tenant customer services that run 24x7 across our data centers and customer sites. 

The candidate will act as the senior escalation point for network incidents, partner with the Cloud Platform and virtualization teams, and lead network architecture and automation initiatives. Must be able to quickly resolve complex customer issues, communicate clearly during outages, and mentor other engineers. 

Role and Responsibilities

• Design and evolve the IP Spine-Leaf network, including; BGP, ECMP, OSPF/IS-IS, and Overlays (VXLAN/EVPN) with carrier-grade reliability. 
• Own internet edge strategy: multi-homed upstream transit from Tier 1/2 providers, settlement-free and paid peering, IXP presence, customer BGP        sessions, route policy, and RPKI/ROV.
• Design and deliver managed customer services, including dedicated internet access, L2/L3VPN, managed firewall, and SD-WAN, with SLA-backed QoS and secure multi-tenant segmentation.
• Must exhibit excellent customer- facing communication, urgency, and passion for successful customer experience.
• Work with the team to maintain 100% network uptime by improving availability, resiliency, quality, and security while leading network technology projects and influencing the direction of Engineering across the organization.
• Experience   in NetOps tooling like Cloud Vision, Ansible, and/or languages including   Python and Perl
• Serve as the senior (L3) escalation point for network and customer-service incidents; lead root cause analysis, post-incident reviews, and implement improvements to eliminate interruptions.
• Plan and execute changes, upgrades, and migrations in a 24x7 environment with minimal customer impact.
• Monitor utilization and growth with NetFlow/IPFIX, SNMP, and streaming telemetry, and drive capacity upgrades before they are needed.
• Keep configurations under source control and move the team toward CI/CD-driven network changes.
• Write and maintain architecture standards, high- and low-level designs, runbooks, and documentation related to department responsibilities.
• Evaluate vendors, platforms, optics, and upstream transit and colocation contracts; contribute to budget and roadmap planning.
• Partner with sales engineering and service delivery on solution design, customer onboarding, and SLA        reporting.
• Ensure compliance with company internal policies and customers’ policies.
• Assist in the development of engineers through mentoring, design reviews, and change reviews.
• Participate in rotating "on call" schedule with other members of the team.

Core Requirements

• Bachelor's degree in computer science, Information Technology, or equivalent field experience.
• 6+ years of network engineering experience, with at least 5 in a Telco, ISP, CLEC, or MSP/CSP environment delivering services to external customers preferred.
• Deep knowledge of BGP: eBGP/iBGP, route reflectors, communities, upstream and customer route policy, multi-homed transit, and peering.
• Deep experience with ECMP, OSPF and/or IS-IS in large designs, including fast-convergence tuning.
• Data center fabric and overlay experience (EVPN-VXLAN, VMware NSX) alongside hypervisor networking.
• Production experience on carrier-class platforms such as Arista EOS (7500R/7800R), Juniper Junos (MX, PTX),        Cisco IOS-XR (ASR 9000, NCS), or Nokia SR OS.
• Strong IPv6 design and dual-stack deployment experience.
• QoS design for multi-service networks (DiffServ, H-QoS, policing and shaping, CoS).
• Internet edge security: route filtering, IRR, RPKI/ROV, MANRS practices, and DDoS mitigation.
• Working knowledge of optical transport (DWDM, coherent 100G/400G optics) and how it maps to the IP layer.
• Knowledge implementing and supporting SNMP, RADIUS, TACACS+, Syslog, ACLs, VRFs, and next-gen firewalls (Palo        Alto, Juniper SRX, Fortinet, Sophos).
• Scripting and automation with Python and Ansible; familiarity with CloudVision.
• Experience with network analysis tools and ability to analyze packet captures.
• Track record of leading major incidents and changes in a 24x7 MSP environment with customer SLAs, using ITIL-style incidents, change, and problem management.
• Expert communication skills, both verbal and written, including designs, runbooks, and incident reports that others can act on.
• Ability to lift 50 lbs.

Preferred Skills

• CCIE Service Provider, JNCIE-SP, Arista, ACE-L5+, or Nokia SRA certification.
• Experience with PCE/PCEP and SDN controllers (Cisco Crosswork, Juniper, Paragon/NorthStar).
• Hands-on MPLS for multi-tenant service delivery: LDP, RSVP-TE, L3VPN (MP-BGP, VPNv4/v6), and L2VPN (VPLS, VPWS).
• Carrier Ethernet OAM (CFM, Y.1731) and MEF service delivery.
• Azure networking: NSG, VPN, Azure Firewall, Web Application Firewall, ExpressRoute, Virtual WAN, and Front Door.
• Virtual network appliances and deployment within hyperscale providers such as Azure, AWS, and GCP.
• Telemetry and analytics tooling such as Kentik, Grafana, Prometheus, or ELK.
• NetDevOps practice: Git workflows, automated testing, and pipeline-driven deployment
• 10+ years’ experience with multiple certifications and proven experience delivering carrier networking services