VoIP Platform / Infrastructure Engineer - Base

Product Knowledge (Installation, Configuration, Operations, Maintenance)

- Asterisk (deep): Strong operational and development-level understanding of Asterisk internals, especially large and complex dialplans with business logic.

- Dialplan engineering: Ability to design, refactor, and troubleshoot multi-branch call flows, failover paths, and edge-case routing behavior.

- Call encryption: Practical handling of TLS and SRTP in production, including certificate lifecycle and interop troubleshooting.

- SBC stack: Solid Kamailio skills for SIP routing/policy and RTPengine operation for media anchoring, NAT traversal, and media security.

SIP Capture and Troubleshooting

- PCAP and Wireshark: Confident packet-level troubleshooting for SIP, RTP, SRTP, TLS handshake issues, retransmissions, and one-way audio.

- Homer SIP capture: Efficient use of capture/visualization to correlate signaling and media events across distributed components.

- End-to-end call tracing: Ability to correlate identifiers (Call-ID, tags, branch params, dialogs) across Asterisk, Kamailio, and SBC layers.

(- Test strategy depth: SIP integration tests, regression suites for dialplan logic, and synthetic call monitoring in production-like environments.)

Operating System and Automation

- SUSE Linux (LPIC-1 level or higher): Comfortable with package/service management, networking, process control, and system diagnostics.

- Python (basic): Scripting for automation, validation, and lightweight operational tooling.

- Cron and shell scripting: Building and maintaining jobs for log rotation, housekeeping, health checks, and routine maintenance tasks.

- Log and filesystem hygiene: Managing retention, rotation policies, and storage pressure under high call volume.

Network and VoIP Foundations

- TCP/UDP deep understanding: Behavior under packet loss, reordering, retransmissions, and impact on signaling/media quality.

- VoIP protocols (deep): SIP, RTP, SRTP, TLS, mTLS, codec negotiation, DTMF transport, NAT and firewall implications.

- SIP protocol internals (RFC-level): Transaction/dialog state machines, timers, forking, early media, PRACK/100rel, session timers.

- Network services (deep): DNS behavior (including latency/caching/failover effects), NTP sync relevance for logs/traces, and routing basics.

- High availability and disaster recovery: Active-active/active-passive design, failover testing, backup/restore drills, RTO/RPO ownership.

AWS and Infrastructure as Code

- Core AWS: EC2, VPC, Route 53, Security Groups, CloudWatch, and basic Lambda usage.

- Resilience testing: AWS FIS basics for controlled fault injection and validation of failover behavior.

- Secrets and access management: IAM least privilege, secret rotation, certificate/key lifecycle, and auditability.

- Terraform: Versioned, repeatable infrastructure provisioning and safe change workflows (plan/review/apply discipline).

DevOps and Reliability (Mandatory for Dev + DevOps Collaboration)

- CI/CD pipelines: Build, test, security checks, and controlled release promotion.

- Observability operations: Metrics, logs, traces, and alert tuning to reduce noise and improve incident response.

- Incident response: Structured triage, rollback decision-making, and post-incident analysis.

- Release and change governance: Blue-green/canary strategy, maintenance window practices, and backward-compatible migration planning.