IP & Security Engineer – MVNO at Lebara Nigeria

Role Purpose

• The IP & Security Engineer is responsible for designing, implementing, and maintaining the IP network infrastructure and ensuring end-to-end security for MVNO services. This includes core IP transport, interconnectivity with MNO partners, VPNs, firewalls, intrusion prevention, and compliance with regulatory requirements. The role also involves proactive monitoring, troubleshooting, and optimizing IP and security systems to guarantee high availability, low latency, and robust protection against threats.

Key Responsibilities

IP Network Engineering

• Design, configure, and maintain the MVNO’s IP/MPLS backbone, data center networks, and interconnects to MNOs and service partners.
• Manage IP addressing plans, routing protocols (BGP, OSPF, IS-IS), and QoS policies.
• Ensure reliable IP transport for voice, data, and signaling traffic.
• Implement capacity planning and performance optimization for IP links.

Security Engineering

• Design, implement, and manage security policies, firewalls, VPNs, and security appliances.
• Deploy intrusion detection/prevention systems (IDS/IPS) and DDoS mitigation solutions.
• Monitor and respond to network security incidents and vulnerabilities.
• Conduct periodic penetration tests and security audits.

Integration & Interconnectivity

• Support IP and security requirements for integrating with host MNO(s), roaming partners, and third-party platforms.
• Configure secure interconnects for signaling (SIP, Diameter, SS7 over IP) and data services.

Operations & Monitoring

• Utilize NMS/SIEM tools for real-time monitoring of IP and security infrastructure.
• Troubleshoot IP routing, switching, and security incidents within SLA timelines.
• Maintain network and security documentation, topology diagrams, and configuration backups.

Compliance & Governance

• Ensure IP and security designs comply with national telecom regulations and data protection laws.
• Implement ISO 27001, PCI DSS, or other relevant security standards.

Key Skills & Competencies

• Strong knowledge of IP networking (IPv4, IPv6, BGP, OSPF, MPLS, QoS).
• Experience with security technologies (firewalls, IDS/IPS, SIEM, VPN).
• Knowledge of telecom protocols (SIP, Diameter, GTP, SS7 over IP).
• Familiarity with cloud security, virtualization security, and container security.
• Strong analytical and troubleshooting skills.
• Ability to work under pressure and manage multiple priorities.

Qualifications & Experience

• Bachelor’s degree in Telecommunications, Computer Science, or related field.
• 8+ years of experience in IP networking and security within a telecom, ISP, or MVNO environment.
• Vendor certifications (e.g., Cisco CCNP/CCIE, Juniper JNCIP/JNCIE, Fortinet NSE, Palo Alto PCNSE, or equivalent).
• Hands-on experience with multi-vendor IP and security equipment.
• Understanding of telecom regulations and cyber security frameworks.

KPIs (Key Performance Indicators)

• Network uptime and availability.
• Security incident response time.
• Compliance audit results.
• Mean time to resolve (MTTR) for IP/security incidents.
• Successful integration with MNO and partner networks without service disruption.