We are seeking an experienced Carrier Voice Engineer to secure, support, and optimize carrier-grade voice services across wireline, wireless, wholesale, enterprise, and interconnect environments. This role requires deep expertise in VoIP, SIP, TDM, SBC platforms, voice security, fraud mitigation, AI-enabled analytics, software systems, databases, and Tier III operational support.
The ideal candidate has hands-on experience with large-scale telecom voice platforms, SIP trunking, SS7/SIGTRAN, DDoS protection, security monitoring, data analysis, and automation within a highly available carrier network.
Key Responsibilities
-
Design, implement, and maintain security controls for carrier-grade voice platforms, including SIP infrastructure, SBCs, softswitches, media gateways, and interconnect gateways.
-
Configure, harden, and troubleshoot Session Border Controllers supporting carrier interconnects, SIP trunks, wholesale, enterprise, and customer-facing voice services.
-
Protect voice infrastructure against SIP-based attacks, toll fraud, robocalling abuse, traffic pumping, caller ID spoofing, DDoS events, and abnormal call routing behavior.
-
Monitor voice networks for security events, service-impacting issues, fraud indicators, and anomalous traffic patterns using logs, telemetry, SIEM tools, and operational dashboards.
-
Apply AI, machine learning, automation, and advanced analytics to improve fraud detection, threat identification, incident response, and operational efficiency.
-
Analyze telecom data from CDRs, SIP logs, SBC telemetry, routing systems, firewalls, DNS, SIEM platforms, fraud systems, and operational databases.
-
Support and troubleshoot software applications used for voice provisioning, fraud management, CDR processing, reporting, monitoring, service assurance, and network operations.
-
Query and analyze relational or analytics databases to support troubleshooting, reporting, fraud investigations, and security analysis.
-
Provide Tier III support for voice security incidents, SIP/SBC issues, fraud events, DDoS attacks, and complex service-impacting problems.
-
Support secure migration and ongoing protection of legacy and hybrid voice environments, including TDM, SS7, SIGTRAN, PSTN gateways, and IP-based voice platforms.
-
Maintain high availability and resiliency through secure design, geographic redundancy, failover validation, disaster recovery planning, and capacity management.
-
Maintain documentation, standards, diagrams, playbooks, and procedures; support audits, risk reviews, regulatory requirements, and security governance activities.
Required Qualifications
-
7+ years of experience in telecom network engineering, voice engineering, network security, or carrier operations.
-
5+ years of hands-on experience with carrier-grade VoIP, SIP, SBC, softswitch, or voice platform environments.
-
Strong knowledge of telecom voice technologies and protocols, including SIP, RTP/SRTP, TLS, SDP, DNS, SS7, SIGTRAN, ISUP, and SIP trunking.
-
Experience with carrier voice platforms such as Cisco, Metaswitch, Genband/Ribbon, NetSapiens, or comparable SBC/softswitch platforms.
-
Experience securing SIP trunks, carrier interconnects, wholesale voice, enterprise voice, and customer-facing voice services.
-
Knowledge of voice fraud patterns, telecom abuse scenarios, and mitigation techniques.
-
Experience with AI/ML, automation, scripting, or analytics used for fraud detection, anomaly detection, reporting, or network/security operations.
-
Experience working with software applications and databases used in telecom, security, fraud, provisioning, reporting, or operations environments.
-
Familiarity with tools such as SIEM platforms, firewalls, DDoS platforms, packet capture tools, CDR repositories, fraud systems, dashboards, and log analysis platforms.
-
Strong troubleshooting skills using Wireshark, tcpdump, SIP traces, SBC logs, CDR analysis, SQL queries, and platform diagnostic tools.
Preferred Qualifications
-
Experience supporting Tier 1, Tier 2, or large regional carrier voice networks.
-
Experience with STIR/SHAKEN, robocall mitigation, call authentication, or voice reputation platforms.
-
Experience with scripting, automation, data analysis, or reporting tools such as Python, SQL, Bash, PowerShell, REST APIs, Power BI, or Grafana.
-
Experience with relational or analytics databases such as Oracle, SQL Server, PostgreSQL, MySQL, Snowflake, Databricks, Elasticsearch, or OpenSearch.
-
Familiarity with OSS/BSS, provisioning systems, service assurance platforms, fraud management systems, network inventory systems, SIEM/SOAR, or ticketing platforms.
-
Relevant certifications such as CISSP, CISM, or CCNP Security
About FirstLight:
FirstLight, headquartered in Albany, New York, provides fiber-optic data, Internet, data center, cloud and voice services to enterprise and carrier customers throughout the Northeast connecting more than 13,000 locations in service with more than 125,000 locations serviceable by our more than 25,000-route mile network. FirstLight offers a robust suite of advanced telecommunications products featuring a comprehensive portfolio of high bandwidth connectivity solutions including Ethernet, wavelength, and dark fiber services as well as dedicated Internet access solutions, data center, cloud and voice services. FirstLight’s clientele includes national cellular providers and wireline carriers and many leading enterprises, spanning high tech manufacturing and research, hospitals and healthcare, banking and financial, secondary education, colleges and universities, and local and state governments.
FirstLight Fiber is an equal opportunity employer. In accordance with state and federal laws, FirstLight’s equal opportunity policy is that all applicants and employees are treated equally by the company with respect to employment opportunities, regardless of race, color, religion, sex, sexual orientation, disability, or veteran status or veteran disability.
