IC Group builds powerful digital engagement solutions that connect brands with people through promotions, live events, mobile messaging, and gamified experiences. We work with leading brands and event operators to create experiences that drive participation, loyalty, and measurable results.
Our teams are responsible for the secure delivery and execution of all client programs and projects. ICG aims to act as a trusted partner and strives to deepen client relationships based on trust, security, integrity, commitment, accountability, and delivery. We are continuously evolving our solutions and are further modernizing our IT practices through various initiatives, inclusive of use AI in strategic ways, and adopting a platform foundation.
We are seeking an experienced Network Engineer to join our team. This role requires deep expertise in AWS cloud networking, enterprise security, dynamic routing, VPN technologies, and telecommunications messaging infrastructure. The successful candidate will design, implement, secure, and optimize highly available multi-region and multi-site network environments with advanced traffic inspection and monitoring capabilities.
You are a team player that thrives in a dynamic work environment. You have at least 3 years’ experience in a full-cycle accounting roll in a computerized environment. You are detail oriented and enjoy working in a fast-paced environment, completing a variety of competing tasks, all the while paying extra attention to the details.
- Administer and maintain Windows servers, Linux servers and cloud resources, ensuring high availability, performance, cost optimization and security.
- Support corporate and custom applications across all environments.
- Monitor infrastructure health, including CPU, memory, storage, and application performance.
- Maintain detailed technical documentation for systems, processes, configurations, and security controls.
- Coordinate operating system and application updates, including scheduled after-hours maintenance.
- Design and deploy cloud workloads to meet both functional and non functional requirements
- Deploy, configure, and manage web-based applications in high-availability environments.
- Troubleshoot production issues and provide operational support.
- Participate in an on-call rotation as a first responder for critical incidents outside business hours.
- Collaborate with internal teams on testing, releases, and infrastructure improvements.
- Maintain secure PCI, ISO, SOC 2, and HIPAA-compliant environments.
- Review system and application logs for operational and security issues.
- Schedule and analyze vulnerability scans and remediation activities.
- Develop and maintain security policies, procedures, and standards.
- Apply security updates and patches in a timely manner.
- AWS Networking
- Design and implement advanced AWS networking solutions using:
- AWS Transit Gateway
- Gateway Load Balancer (GWLB)
- Direct Connect
- Route 53
- Multi-VPC and hybrid-cloud connectivity
- Build resilient multi-region and multi-site architectures with redundancy and failover capabilities.
- Implement centralized routing, segmentation, and traffic inspection solutions.
- High Availability & Disaster Recovery
- Design automated disaster recovery and failover solutions.
- Implement SLA monitoring, alerting, and recovery testing.
- Optimize environments for low RTO/RPO objectives.
- Automate infrastructure deployment and scaling using:
- Terraform
- CloudFormation
- Python
- Bash
- PowerShell
- Implement Auto Scaling and automated network recovery processes
- Firewall & Security Management
- Deploy and manage FortiGate VM firewalls within AWS environments.
- Configure:
- Active-Passive and Active-Active HA clusters
- SD-WAN policies
- Security policies and application controls
- Web filtering and threat prevention
- Integrate FortiManager and FortiAnalyzer for centralized operations.
- Deep Traffic Inspection
- Implement Deep Packet Inspection (DPI) for application visibility and threat detection.
- Configure SSL/TLS inspection for encrypted traffic analysis while maintaining compliance standards.
- Support IDS/IPS and advanced traffic analytics capabilities.
- VPN Architecture
- Design and maintain:
- Site-to-Site VPNs
- Client VPNs
- SSL VPNs
- IPsec VPNs
- Configure dynamic routing across VPN tunnels using BGP and OSPF.
- Optimize VPN performance, availability, and failover mechanisms.
- Advanced VPN Technologies
- Implement:
- DMVPN
- FlexVPN
- AWS Accelerated VPN
- AWS Client VPN
- Configure MFA, certificate authentication, and split/full tunnel deployments.
- SMSC Routing & Infrastructure
- Configure and maintain SMSC routing environments supporting:
- SMPP v3.4/v5.0
- SS7/SIGTRAN
- SCCP, TCAP, and MAP protocols
- Design intelligent routing solutions including:
- HLR/HSS lookups
- MCC/MNC routing
- Least-cost routing (LCR)
- Priority and content-based routing
- Optimize throughput, queue management, retry logic, and failover processes.
- MMSC Routing & Content Management
- Implement MMSC integrations and routing using:
- Manage content adaptation, transcoding, MIME processing, and delivery workflows.
- Support high-volume multimedia messaging environments with geographic routing and delivery tracking.
Other duties as assigned
- Strong English communication (verbal/written/presentation) skills with both business and technical stakeholders.
- Strong knowledge of MS Office suite of products
- Strong organizational skills, excellent communication, effective marketing-related writing skills and the ability to operate in ambiguity and thrive in a fast-paced environment.
- Minimum 5 years of progressively responsible experience in complex networking environments.
- Post Secondary degree in a related environment
- Core Networking
- Expert knowledge of:
- TCP/IP
- Subnetting & VLSM
- Routing & switching
- BGP, OSPF, and EIGRP
- AWS Networking
- Advanced expertise with:
- VPC
- Transit Gateway
- Gateway Load Balancer
- Direct Connect
- Route 53
- Security
- Deep Packet Inspection (DPI)
- SSL/TLS inspection
- IDS/IPS
- Application control and segmentation
- Monitoring & Troubleshooting
- Experience with:
- CloudWatch
- Datadog
- Prometheus
- Grafana
- Wireshark
- tcpdump
- High Availability & Load Balancing
- VRRP, HSRP, and stateful failover
- ALB, NLB, and GWLB configuration and optimization
- Ability to work under tight timelines and competing priorities.
- Critical thinking & thought leadership on project and/or program management.
- AWS Certified Advanced Networking – Specialty (required)
- Fortinet NSE 7 or NSE 8
- Cisco CCNP Enterprise or CCIE
- Expertise with Microsoft Azure workloads and networking
