SME Resources for Ericsson

For Ericsson, we are looking for:

SME (subject matter expert) for Networks,SME for Firewall,SME for DDI & NTP,Technical Coordinator,

Scope of assignment:

Configure routers, switches, and firewalls according to design


Configure NTP devices according to design


Configure DDI devices according to design


Coordinate with hardware installation teams during configuration and testing


Update CMDB systems


Coordinate and perform testing of the installed infrastructure and tools


Hand over installed and tested infrastructure to the Operations program


To prepare the configuration of the solution/service following the low-level design provided by customer.

To apply configuration for the solution/service readiness including integration work according to the low-level design.


To verify the solution/service and prepare handover of the solution to customer.


To rectify any reported snag by customer team during acceptance test.


To set up Internal Production network.


To set up Internal Production & Management Firewall Cluster.


To set up Internal DDI.


To set up Internal Time Services.

The following competencies are required:


Technical competence

Knowledge and experiences to deliver the solution scope (see below)


Can handle customer propriety equipment and equipment from other vendors.


Understanding the principles for customer R&D software and application (feature) development.


Understanding the principles of the way that customer R&D uses methods and tools


Understanding different SW operating systems, both customer propriety and common commercial operating systems


Behavioral competence


Delivering result and meeting customer expectations


Applying expertise and technology


Persuading and influencing


Following instructions and procedures


Creating and innovating


Working with people


Applicable Process


Agile/Lean process


Service Delivery Process


ITIL process


Qualifications and Experience


Academic degree, minimum on bachelor level, in engineering (ICT) or equivalent.


Deep and broad knowledge and experience across IT service portfolio.


Competence to operate and support customer and other vendors’ products within a customer system solution


Detailed technical competencies:To setup Internal Production network

Production Core PE (Provider Edge) routers (Also used for internal management network)


Production P (Provider) Router

Production TS (Technical space = LAB) PE routers

The connections and interworking between the equipment in this module are as follows:

- Core or Technical Space PE router to P router connections use at minimum 1 x 40G links in an LACP group.

- P router to P router connections use at minimum 2 x 40G links in an LACP group.

- Routing protocols that are used are MPLS/BGP and ISIS.

- Junos OS is the Juniper network operating system for routing, switching, and security used in Juniper Networks hardware routers.

- Each firewall will have northbound connections to the WAN L2 switches and southbound connections directly to Core PE devices if 10G interfaces are used. Should firewalls with only 1G interfaces be used, this connection should be via additional switching layer (e.g. Common Infra switches) to conserve high bandwidth Core PE interfaces.

- Each firewall will have northbound connections to the Common Infra switches and WAN L2 switches. Southbound connections include:

- To Management Infra switches for connectivity to ICT center Management Backbone and related Management Infrastructure zones
- To Management NW OOB switches for connectivity to the networks used for managing the critical network equipment.

- Domain Name System (DNS): DNS is a distributed directory service that enables end systems and services to communicate with each other over IP networks.

- Dynamic Host Configuration Protocol (DHCP): DHCP automates the delivery of IP and other host configuration parameters to end systems.

- Internet Protocol Address Management (IPAM): IPAM ensures the exact and efficient tracking, planning, and management of IP address space.

- Infoblox appliances (1420 or higher) configured in a grid.

- One pair of appliances configured as the grid's HA (high availability) Grid Master.

- Two pairs of appliances configured as HA Grid Members. In the External or Internet environment, single appliances may be configured individually as Grid Members rather than pairing appliances in HA.

- At least one grid member who also holds the Grid Master Candidate role.

- The DHCP service provided by at least two Grid Members configured in a DHCP failover association.

- The DNS service provided by at least two Grid Members.

- Time Services delivers the following three different types of time signals within ICT center:
- Network Time Protocol (NTP)

- Precision Time Protocol (PTP)

- GPS Delivery


- Devices used for Time services:
- Meinberg Lantime M-series

To setup Internal Production & Management Firewall Cluster


Production Firewall


Management Firewall


Generally, SRX series devices are used for all Production Network Infrastructure Firewall requirements.


Firewalls are purchased and configured in highly available pairs. Active-Passive is the standard configuration.


Junos revision level on all firewalls should be the latest recommended by Juniper or aligned with standard deployment for such firewalls used by the managing organization. “Threat Prevention” licenses should be acquired for all firewalls deployed within ICT center.




To setup Internal DDI


DDI (DNS DHCP, IP Address Management) is a part of the Management Infrastructure service. DDI provides the customer community with a standardized, stable, and secure DNS/DHCP service IP-Planning tool. It is built on several platforms based on standard and non-proprietary components.


DDI consists of the three elements:


Deployed as a unified DDI service, this is one of the core functions of a managed network environment, for both supporting and business-facing services.


The core DDI deployment in each lab location consists of the following:


To setup Internal Time Services


Time Services provide stable, accurate, and widely deployed time-of-day services to support service delivery in ICT center. While primarily a supporting service for other business-facing services, it also provides user facing components.