IP Network; Backhaul

Overview

6-month contract - Inside IR35 - Rate TBC

Clearance:
Must hold or be eligible for SC security clearance

You will design and maintain the Tactical Wide Area Network (WAN). You will transform a collection of disparate commercial technologies—specifically Starlink/Starshield, MANET radios, and IP LAN technologies into a single, unified, and encrypted "pipe." Responsible for the IP logic that ensures mission-critical voice traffic always takes priority over bulk data, even when the backhaul is degraded or under attack.

Focus:
Tactical WAN, Multi-Bearer Integration, Network Security, and SATCOM

• Multi-Transport Backhaul Engineering
• Bearer Management:
  Design the logic for "Load Balancing" and "Auto-Failover" across multiple bearers (Starlink, 4G/5G, and MANET).
• SATCOM Optimisation:
  Configure Starlink/Starshield terminals and integrate them
• MANET Integration:
  Architect the Layer 2/3 mesh integration
• Classified Architecture (CSfC):
  Implement the NCSC (and NSA) frameworks.
• Network Segmentation:
  Utilise VRFs (Virtual Routing and Forwarding)
• Hardened Security:
  Configure and maintain Next-Generation Firewalls (NGFW)
• Technical Documentation & Build Leadership
• Configuration Generation:
  Produce standardised, repeatable configuration files for all
• The "Build Book":
  Author detailed build instructions
• Design Artifacts:
  Maintain the High-Level Design (HLD) and Low-Level Design (LLD)
• Operational Readiness & Support
• Monitoring Integration:
  Define the SNMP, Syslog, and Net Flow parameters
• Tier-3 Troubleshooting:
  Act as the final point of escalation for complex network faults.

• Protocols:
  Mastery of BGP, OSPF, EIGRP, and advanced Multicast (PIM/IGMP) for TETRA voice.
• Tunneling:
  Expert knowledge of IPSec, GRE, DMVPN, and MACsec.
• Optimisation:
  Proficiency in Quality of Service (QoS), Differentiated Services (Diff Serv), and Traffic Shaping to manage bandwidth-constrained links.
• Standardisation:
  Familiarity with 3
  
  GPP network interfaces (S1, X2) and how they behave over high-latency WANs.

• Demonstrable experience is acceptable (and preferred) in the absence of formal qualifications
• Experience:
  
  IP networking, with specific experience in "Disconnected, Intermittent, and Limited" (DIL) bandwidth environments.
• Certifications:
  
  CCNP/CCIE (Enterprise or Security) or Juniper equivalent (JNCIP/JNCIE)