Network Operations Engineer
1. About the role
Share is the global marketplace for bandwidth. We aggregate telco infrastructure into a single layer and give ISPs, hyperscalers, and AI companies a clean path to deliver connectivity into every home and business across Kenya and the continent. Behind that marketplace is a real network: a BGP edge peering with Tier 1 transit, hyperscalers, and local exchanges, an MPLS backbone, aggregation and access gear, and the systems that watch all of it.
For the partners who run on us, the network is the product, and the NOC is where they feel it. A clean shift is a partner who never knew anything happened. That is the bar.
We are early and the team is small, so we cannot afford a pair of hands that only knows how to escalate. We need a capable network engineer who can stand a shift, resolve real faults without waking anyone, and then keep building the network while East Africa sleeps: propagation and peering checks, health passes across the estate, config changes through to merge, tickets off the board, automation that takes the next repetitive job off everyone's plate. The watching is the floor of this role, not the ceiling.
The NOC you would be joining is not a legacy one. We are building it as an AI assisted operations environment from the ground up. The forwarding plane runs on open source routing and forwarding software, every device configuration lives in Git, and an LLM layer sits on top of the live network state. When something moves, that layer reads the telemetry, correlates it against the topology and the config history, and puts a probable cause and a candidate fix in front of the engineer on shift. The point is not to replace your judgment. It is to collapse the time between an alert firing and you knowing where to look, so mean time to repair is measured in minutes.
You sit inside that system. You use it, you push back on it when it is wrong, and what you catch that it misses is part of how it gets smarter. As we build automation out across the NOC, you are not just a consumer of the tooling. You help write it.
2. What you'll do
Watch, and know what you're looking at. Sit on our monitoring stack (Zabbix and Grafana dashboards, flow telemetry, alerting) and actually read it. Learn what normal looks like so abnormal jumps out at you: a BGP session that dropped, a link that went down, latency climbing on a path, a capacity threshold breached, a partner suddenly pushing or pulling nothing.
Troubleshoot and resolve. This is where you earn your seat. Confirm the alert is real, gather the facts, and localise the fault: one peer or many, us or upstream, a real outage or a monitoring blip. The assistive layer surfaces a likely diagnosis and a suggested fix, the config history is right there in Git, and the runbooks are live. Your job is to read all of it critically, decide what is actually true, and close out what you can on your own. Every ticket you resolve yourself is one our senior people did not get pulled out of deep work, or out of bed, to deal with.
Keep the network healthy, not just alive. A quiet shift is not an idle one. Run the proactive passes: check that routes are propagating the way they should, that RPKI and filter chains are doing their job, that peering and transit sessions are clean across the edge, that no PoP is drifting toward a capacity wall. Catch the slow degradations that never trip an alert. The day team should inherit a network in a known good state.
Build and automate. The repetitive parts of this job should not stay repetitive. Write the scripts that turn a manual check into a scheduled one. Push our config automation forward (Jinja driven generation, NAPALM or NETCONF/gNMI against the devices) so changes ship from data, not from memory. When the assistive layer keeps missing the same thing, that is a candidate for automation, and you are well placed to build it during the hours nobody else is online.
Move the work forward. You are part of the network team, working the same board they do. Pick up tickets from the Linear queue, take config changes through review to merge, and keep our source of truth (Nautobot) accurate as the estate changes. Real work lands while East Africa is offline, so the team wakes up further ahead than they went to bed.
Report exactly what is happening. For everything you cannot or should not fix alone, the handoff has to be clean: what is wrong, where, since when, what is affected, whether it is getting worse, and what you have already tried. No guessing dressed up as fact. No "the internet is down." A clear, written incident note a senior engineer can act on the moment they open it, and a tidy handover to the East Africa team at the end of your shift.
Escalate well. Know the ladder cold: what you are cleared to touch, what you must not touch alone, and who to bring in for what. Escalating early on a genuine outage is good judgment. Sitting silently on a problem because you were unsure is the one thing that gets people out of bed angry. Handle what you can, raise the rest fast and clearly, and do not turn either dial too far.
3. Who we're looking for
A network engineer who can stand on their own through a shift, and who treats the quiet hours as time to build rather than time to wait. You will not be the most senior engineer on this team, and you do not need to be. The people you escalate to are CCIE level. What we need from you is independence and range: work a problem properly, resolve a fair share of it yourself, and use what is left of the shift to actually move the network forward. Pair that with clear reporting, sound judgment about when to bring in help, and the instinct to question a machine's suggestion rather than follow it blindly, and you are who we are looking for.
Must-have
Strong networking competence, held in your hands rather than on paper. CCNA and well beyond it. You understand TCP/IP, routing and switching, IP addressing and subnetting, DNS, DHCP, NAT, and how they behave when they go wrong.
Real troubleshooting instinct. Given a degraded link or a dropped session, you know where to look and what to rule out. You can read BGP session state, follow a path with ping and traceroute, and tell a local fault from an upstream one without waiting to be told.
Working BGP knowledge. Reading communities and route policy, spotting a flap or a leaky origin, understanding how transit, peering, and RPKI behave at the edge.
Comfortable on the gear and the CLI. Linux, network device CLIs, and dashboards are familiar ground. We run MikroTik (RouterOS) across the network and so do many partners, so RouterOS experience is a real plus.
Comfortable working with config in Git. Configuration lives in repos, not on devices. Reading a diff, understanding why a config changed, and proposing one yourself should not be foreign to you.
Some scripting, and the appetite to do more. Bash or Python, enough to automate the repetitive parts away and to grow into our config and automation pipelines. We are not hiring a button pusher.
Clear written English. You can describe a technical situation accurately and briefly so someone picking it up cold understands it instantly.
Calm under pressure and dependable. When the graphs go red you get more precise, not more panicked. You show up for every shift, alert and on time.
Located in New Zealand or a nearby time zone where covering our deep overnight maps onto your normal working day.
Nice-to-have
CCNP, or MikroTik MTCNA / MTCRE.
Prior NOC, ISP, or carrier operations experience.
Hands on with MPLS (L3VPN, EVPN) and the multi-tenant isolation a shared backbone needs.
Exposure to open source and white box routing or forwarding stacks (SONiC, IP Infusion OcNOS, FRR, or similar).
Network source of truth and automation tooling (Nautobot, NAPALM, Jinja config generation, NETCONF or gNMI).
Familiarity with a monitoring stack such as Zabbix, Grafana, Loki, or Prometheus, and with flow telemetry.
Working familiarity with FreeRADIUS, CoA and Disconnect flows, and how session control and accounting hook into the network.
Exposure to applying ML or AI in network operations: anomaly detection, predictive failure analysis, automated triage or remediation.
IPv6 and dual stack exposure, and internet exchange operations (looking glass and route server behaviour, IRR and RPKI hygiene).
4. What we offer
A seat inside a serious, very senior network team, with people who have deep service provider backgrounds and will sharpen you fast. You will see how a real carrier network behaves under live conditions.
A front row seat to how a network actually gets run in 2026. Open source forwarding, config as code, and an LLM layer doing real operational work. Not a slide about the future of network operations, but the environment you would work in every shift, and help build.
Real engineering, not just monitoring. The role is built so the quiet hours go into automation, propagation and health work, and tickets off the board. The path into deeper network engineering and automation work is the plan, not a vague someday.
Competitive salary and private health and wellness benefits, fully remote, in a mission driven, investor backed company building the backbone of Africa's next generation internet.
A team that writes things down, runs on runbooks and post mortems rather than blame, and treats operational discipline as the job, not the paperwork around it.
