Network Engineer (MikroTik, BGP, DDoS Mitigation)
Budget: $20 – $30 SGD
We are looking for a highly skilled Network Engineer with deep experience in MikroTik and ISP-level networking. You will be responsible for designing, managing, and optimizing our global network infrastructure, ensuring high availability, low latency, and strong protection against abuse and attacks.
This role is critical to maintaining performance and stability across our VPS and hosting platforms.
Key Responsibilities
Design, deploy, and manage MikroTik-based network infrastructure
Configure and maintain BGP sessions with multiple upstream providers (e.g. HE, IX, transit providers)
Perform traffic engineering (local-pref, MED, communities, route filtering)
Implement and optimize DDoS mitigation strategies (L3/L4 protection, filtering, rate limiting)
Monitor network performance (latency, packet loss, PPS, bandwidth usage)
Analyze and respond to network incidents, attacks, and routing issues
Implement anti-abuse systems (bot detection, scanning prevention, IP reputation handling)
Manage IP allocation, routing policies, and prefix announcements
Work with IX, cross-connects, GRE tunnels, and L2/L3 transport
Optimize routing paths for cost vs performance (premium vs standard routing)
Maintain network documentation and diagrams
Collaborate with infrastructure and server teams
Required Skills & Experience
Strong hands-on experience with MikroTik (RouterOS) in production environments
Proven experience managing BGP in multi-homed networks
Solid understanding of:
Routing protocols (BGP, OSPF)
IP addressing and subnetting
RPKI, ROA validation, IRR filtering
Experience handling DDoS attacks and mitigation techniques
Strong knowledge of network security and abuse handling
Experience with high PPS environments and traffic spikes
Familiar with IX peering, transit providers, and routing optimization
Experience with monitoring tools (LibreNMS, Grafana, Zabbix, etc.)
Ability to troubleshoot complex network issues under pressure
Preferred / Bonus Skills
Experience with Juniper, Arista, or software routers (FRR, VyOS)
Knowledge of Anycast and global routing strategies
Experience in hosting / VPS / cloud provider environments
Familiarity with automation (scripts, API, Ansible, etc.)
Experience working with 10G / 25G / 100G networks
What We Expect
Strong problem-solving mindset
Fast response during incidents
Ability to work independently with minimal supervision
Clear documentation and structured thinking
Focus on stability, performance, and cost efficiency
Scope of Work
Manage live production network across multiple regions
Ensure uptime and routing stability
Continuously optimize network cost vs performance
Build scalable and attack-resilient architecture
How to Apply
Please include:
Summary of your MikroTik + BGP experience
Example of networks you have managed (size, traffic, regions)
Experience handling DDoS incidents
Any relevant certifications or projects
This role is critical to maintaining performance and stability across our VPS and hosting platforms.
Key Responsibilities
Design, deploy, and manage MikroTik-based network infrastructure
Configure and maintain BGP sessions with multiple upstream providers (e.g. HE, IX, transit providers)
Perform traffic engineering (local-pref, MED, communities, route filtering)
Implement and optimize DDoS mitigation strategies (L3/L4 protection, filtering, rate limiting)
Monitor network performance (latency, packet loss, PPS, bandwidth usage)
Analyze and respond to network incidents, attacks, and routing issues
Implement anti-abuse systems (bot detection, scanning prevention, IP reputation handling)
Manage IP allocation, routing policies, and prefix announcements
Work with IX, cross-connects, GRE tunnels, and L2/L3 transport
Optimize routing paths for cost vs performance (premium vs standard routing)
Maintain network documentation and diagrams
Collaborate with infrastructure and server teams
Required Skills & Experience
Strong hands-on experience with MikroTik (RouterOS) in production environments
Proven experience managing BGP in multi-homed networks
Solid understanding of:
Routing protocols (BGP, OSPF)
IP addressing and subnetting
RPKI, ROA validation, IRR filtering
Experience handling DDoS attacks and mitigation techniques
Strong knowledge of network security and abuse handling
Experience with high PPS environments and traffic spikes
Familiar with IX peering, transit providers, and routing optimization
Experience with monitoring tools (LibreNMS, Grafana, Zabbix, etc.)
Ability to troubleshoot complex network issues under pressure
Preferred / Bonus Skills
Experience with Juniper, Arista, or software routers (FRR, VyOS)
Knowledge of Anycast and global routing strategies
Experience in hosting / VPS / cloud provider environments
Familiarity with automation (scripts, API, Ansible, etc.)
Experience working with 10G / 25G / 100G networks
What We Expect
Strong problem-solving mindset
Fast response during incidents
Ability to work independently with minimal supervision
Clear documentation and structured thinking
Focus on stability, performance, and cost efficiency
Scope of Work
Manage live production network across multiple regions
Ensure uptime and routing stability
Continuously optimize network cost vs performance
Build scalable and attack-resilient architecture
How to Apply
Please include:
Summary of your MikroTik + BGP experience
Example of networks you have managed (size, traffic, regions)
Experience handling DDoS incidents
Any relevant certifications or projects