Carrier Voice Engineer

FIRSTLIGHT•Brunswick, ME

2d•$75,000 - $95,000

About The Position

We are seeking an experienced Carrier Voice Engineer to secure, support, and optimize carrier-grade voice services across wireline, wireless, wholesale, enterprise, and interconnect environments. This role requires deep expertise in VoIP, SIP, TDM, SBC platforms, voice security, fraud mitigation, AI-enabled analytics, software systems, databases, and Tier III operational support. The ideal candidate has hands-on experience with large-scale telecom voice platforms, SIP trunking, SS7/SIGTRAN, DDoS protection, security monitoring, data analysis, and automation within a highly available carrier network.

Requirements

7+ years of experience in telecom network engineering, voice engineering, network security, or carrier operations.
5+ years of hands-on experience with carrier-grade VoIP, SIP, SBC, softswitch, or voice platform environments.
Strong knowledge of telecom voice technologies and protocols, including SIP, RTP/SRTP, TLS, SDP, DNS, SS7, SIGTRAN, ISUP, and SIP trunking.
Experience with carrier voice platforms such as Cisco, Metaswitch, Genband/Ribbon, NetSapiens, or comparable SBC/softswitch platforms.
Experience securing SIP trunks, carrier interconnects, wholesale voice, enterprise voice, and customer-facing voice services.
Knowledge of voice fraud patterns, telecom abuse scenarios, and mitigation techniques.
Experience with AI/ML, automation, scripting, or analytics used for fraud detection, anomaly detection, reporting, or network/security operations.
Experience working with software applications and databases used in telecom, security, fraud, provisioning, reporting, or operations environments.
Familiarity with tools such as SIEM platforms, firewalls, DDoS platforms, packet capture tools, CDR repositories, fraud systems, dashboards, and log analysis platforms.
Strong troubleshooting skills using Wireshark, tcpdump, SIP traces, SBC logs, CDR analysis, SQL queries, and platform diagnostic tools.

Nice To Haves

Experience supporting Tier 1, Tier 2, or large regional carrier voice networks.
Experience with STIR/SHAKEN, robocall mitigation, call authentication, or voice reputation platforms.
Experience with scripting, automation, data analysis, or reporting tools such as Python, SQL, Bash, PowerShell, REST APIs, Power BI, or Grafana.
Experience with relational or analytics databases such as Oracle, SQL Server, PostgreSQL, MySQL, Snowflake, Databricks, Elasticsearch, or OpenSearch.
Familiarity with OSS/BSS, provisioning systems, service assurance platforms, fraud management systems, network inventory systems, SIEM/SOAR, or ticketing platforms.
Relevant certifications such as CISSP, CISM, or CCNP Security

Responsibilities

Design, implement, and maintain security controls for carrier-grade voice platforms, including SIP infrastructure, SBCs, softswitches, media gateways, and interconnect gateways.
Configure, harden, and troubleshoot Session Border Controllers supporting carrier interconnects, SIP trunks, wholesale, enterprise, and customer-facing voice services.
Protect voice infrastructure against SIP-based attacks, toll fraud, robocalling abuse, traffic pumping, caller ID spoofing, DDoS events, and abnormal call routing behavior.
Monitor voice networks for security events, service-impacting issues, fraud indicators, and anomalous traffic patterns using logs, telemetry, SIEM tools, and operational dashboards.
Apply AI, machine learning, automation, and advanced analytics to improve fraud detection, threat identification, incident response, and operational efficiency.
Analyze telecom data from CDRs, SIP logs, SBC telemetry, routing systems, firewalls, DNS, SIEM platforms, fraud systems, and operational databases.
Support and troubleshoot software applications used for voice provisioning, fraud management, CDR processing, reporting, monitoring, service assurance, and network operations.
Query and analyze relational or analytics databases to support troubleshooting, reporting, fraud investigations, and security analysis.
Provide Tier III support for voice security incidents, SIP/SBC issues, fraud events, DDoS attacks, and complex service-impacting problems.
Support secure migration and ongoing protection of legacy and hybrid voice environments, including TDM, SS7, SIGTRAN, PSTN gateways, and IP-based voice platforms.
Maintain high availability and resiliency through secure design, geographic redundancy, failover validation, disaster recovery planning, and capacity management.
Maintain documentation, standards, diagrams, playbooks, and procedures; support audits, risk reviews, regulatory requirements, and security governance activities.