Note: The job is a remote job and is open to candidates in USA. Apex Systems is looking for a NAT Network Engineer who excels in their role and is committed to delivering an exceptional experience for clients. The role involves designing and optimizing NAT infrastructure for broadband services, collaborating with security teams, and mentoring junior engineers.
Responsibilities
- Design, implement, maintain, and optimize Carrier Grade NAT infrastructure supporting large-scale broadband subscriber services
- Engineer highly available CGNAT platforms using active/active or active/standby architectures across multiple data centers
- Configure and optimize dynamic NAT, Port Block Allocation, Endpoint Independent Mapping, static NAT, deterministic NAT, logging, and compliance requirements
- Perform capacity planning for NAT sessions, translations, ports, CPU, memory, throughput, and subscriber growth
- Analyze subscriber traffic patterns and optimize NAT resource utilization and session distribution
- Engineer resilient failover, disaster recovery, and traffic migration solutions
- Lead software upgrades, hardware refreshes, maintenance activities, and service migrations
- Collaborate with Security Engineering on DDoS mitigation, ACLs, routing policy, and network hardening
- Support internet transit, peering, subscriber edge routing, DNS, DHCP, and related broadband services
- Develop standards, implementation plans, test procedures, runbooks, diagrams, and troubleshooting documentation
- Mentor engineers and NOC personnel; participate in the on-call rotation; lead root-cause analysis and vendor escalations
Skills
- Candidates without NAT will not be considered
- Must be able to work directly on Apex W2 without sponsorship
- Design, implement, maintain, and optimize Carrier Grade NAT infrastructure supporting large-scale broadband subscriber services
- Engineer highly available CGNAT platforms using active/active or active/standby architectures across multiple data centers
- Configure and optimize dynamic NAT, Port Block Allocation, Endpoint Independent Mapping, static NAT, deterministic NAT, logging, and compliance requirements
- Perform capacity planning for NAT sessions, translations, ports, CPU, memory, throughput, and subscriber growth
- Analyze subscriber traffic patterns and optimize NAT resource utilization and session distribution
- Engineer resilient failover, disaster recovery, and traffic migration solutions
- Lead software upgrades, hardware refreshes, maintenance activities, and service migrations
- Collaborate with Security Engineering on DDoS mitigation, ACLs, routing policy, and network hardening
- Support internet transit, peering, subscriber edge routing, DNS, DHCP, and related broadband services
- Develop standards, implementation plans, test procedures, runbooks, diagrams, and troubleshooting documentation
- Mentor engineers and NOC personnel; participate in the on-call rotation; lead root-cause analysis and vendor escalations
Benefits
- Comprehensive benefits package
- Medical, dental, vision, life, disability, and other insurance plans
- Optional layer of financial protection (insurance plans)
- ESPP (employee stock purchase program)
- 401K program (allows you to contribute typically within 30 days of starting, with a company match after 12 months of tenure)
- HSA (Health Savings Account on the HDHP plan)
- SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions
- Corporate discount savings program and other discounts
- On-demand training program
- Access to certification prep and a library of technical and leadership courses/books/seminars once you have 6+ months of tenure
- Certification discounts and other perks to associations that include CompTIA and IIBA
- Dedicated customer service team for consultants to address questions around benefits and other resources
- Certified Career Coach
- Access to a full list of benefits, programs, support teams and resources within the 'Welcome Packet'
Company Overview