Network Engineer (MikroTik, BGP, DDoS Mitigation)

@tangramua

Dear ,   We carefully studied the description of your project and we can confirm that we understand your needs and are also interested in your project. Our team has the necessary resources to start your project as soon as possible and complete it in a very short time.   We are 25 years in this business and our technical specialists have strong experience in Linux, Wireless, Cisco, Network Administration, Network Security, Network Engineering, Automation, Ansible, Network Monitoring, Juniper and other technologies relevant to your project.   Please, review our profile https://www.freelancer.com/u/tangramua where you can find detailed information about our company, our portfolio, and the client's recent reviews.   Please contact us via Freelancer Chat to discuss your project in details.    Best regards, Sales department Tangram Canada Inc.     

@touhidecevw

Having spent over a decade honing my skills in network and system administration and holding certifications like CCNP, CCNA, RHCE, and Certified Ethical Hacker (CEH), I believe I am an exceptional fit for your project. My expertise covers a wide range of tools and technologies ranging from dealing with Cisco routers to working with firewalls like WatchGuard, Palo Alto, CheckPoint, SonicWall etc. Especially notable is my deep knowledge of MikroTik Routers and configuring BGP sessions in multi-homed networks. As an experienced network engineer, I understand the importance of continuous monitoring - whether it is for detecting DDoS attacks, analyzing network incidents or maintaining traffic engineering optimization - which means you can rely on me to keep your infrastructure running seamlessly. Apart from this project-specific skillset, I have also lent my expertise to projects related to Azure, AMAZON AWS , Google GCP, OVH Cloud and Digital Ocean. This speaks to my ability to broadly learn new technologies as needed. With my strong problem-solving mindset and proficiency in using monitoring tools like LibreNMS, and Zabbix, you can rest assured that I attend to every issue promptly and thoroughly. If you are looking for not just someone with technical skills but someone who values stability, performance and cost-efficiency like you do then I'm your person!

@manojmalviya93

Hello, I've read your project post on needing a Network Engineer skilled in MikroTik, BGP, and DDoS Mitigation. The information aligns well with my expertise in Network Engineering and administering MikroTik devices. I have the knowledge and experience to provide ISP-level network administration and mitigate DDoS attacks. I would be delighted to offer my services and work with you to ensure the integrity, reliability, and security of your network infrastructure. Please feel free to contact me with any questions or further discussion relating to project scope, I'm here to help. Looking forward to working with you.

@ExpertNetworkEng

Hello, I’m a Senior Network & Security Engineer with 10+ years of hands-on experience designing, implementing, and migrating enterprise and service-provider networks. I specialize in Network Security, SD-WAN, routing & switching, enterprise wireless, and secure network architecture, helping companies modernize legacy networks, improve reliability, and reduce WAN costs. Core expertise: - Firewalls & Security: FortiGate, Palo Alto, Cisco ASA / Firepower IPsec & SSL VPN, site-to-site, remote access, policy design - Routing & Switching: Cisco ASR/ISR, Catalyst, Nexus, Juniper Routers (M10, MX 960) and SRX 500 (BGP, OSPF, EIGRP, IS-IS, MPLS, VLANs, STP, HSRP/VRRP) Enterprise LAN & campus design - LAN Switching (Multi-Vendor): Cisco, Juniper, Meraki, HP, Aruba, FortiSwitch Access/core design, redundancy, QoS, segmentation - Enterprise Wireless: Cisco WLC & APs, Cisco Meraki Wi-Fi, Ubiquiti, Aruba Wi-Fi, FortiAP Coverage design, roaming, security, troubleshooting - SD-WAN: Fortinet SD-WAN, Cisco SD-WAN (Viptela), Cisco Meraki (hub-and-spoke, MPLS + Internet, segmentation, HA, traffic steering) - Cloud & Hybrid Networking: AWS / Azure / GCP Site-to-site VPN, routing integration - Network Automation: Python Certifications: CCIE Enterprise Cisco Certified Specialist – Enterprise SD-WAN Implementation CCNP Data Center CCNP Security Juniper JNCIA-Junos, JNCIA-Cloud If you share your current setup and goal, I can propose a clear and practical solution. Best regards,

@lawrence37

Hi, As well as being CCNP and CCNA certified - I have years of experience managing AS numbers, with multiple tier 1 transit providers and peering on the london internet exchange, proximity and lonap. I have experience in mitigated high packet per second ddos attacks / filtering. Lawrence

@nolk

Hi there, I've been working with Mikrotik more than 10 years, have CCNP certification. Was part of mobile carrier national data network team taking care of routing protocols (EIGRP, OSPF, BGP) with presence points across multiple regions.

@abdf2010

Hey, your project, Network Engineer (MikroTik, BGP, DDoS Mitigation) looks like a great fit for my skills. I've worked on similar Linux projects and can deliver solid results. Let me know if you'd like to chat about the approach.

@Sochi4real

With over 15 years as a System Administrator focused on network infrastructure, I have an extensive skill set that aligns perfectly with your requirements. MikroTik routerOS has been my preferred choice in production environments for years now. I have effectively managed BGP in multi-homed networks and possess solid understanding of routing protocols, IP addressing and subnetting, RPKI, ROA validation and IRR filtering. My ability to handle DDoS attacks and implement effective mitigation techniques have saved precious downtime for prior organizations. Additionally, my expertise extends to areas such as IX peering, transit providers, and routing optimization, all of which will prove invaluable in maintaining low latency and high availability across your global network infrastructure. As a experienced Network Engineer, I understand the importance of ensuring stability in operations especially during incidents. I'm quick to respond during critical times, including being able to troubleshoot complex issues efficiently under pressure. Even more, my data science background ensures that I approach networking challenges from a thorough, analytical standpoint - allowing me to quickly identify and resolve any potential vulnerabilities or bottlenecks in the VPS and hosting platforms.

@jordanrafael7

Hi, I’m a Network Engineer with extensive hands-on experience in MikroTik (RouterOS) and ISP-grade network architecture, including multi-homed BGP environments, traffic engineering, and DDoS mitigation for hosting/VPS infrastructures. ✅ What I Can Deliver Stable, scalable MikroTik-based infrastructure Optimized BGP routing with full control over traffic flows Strong DDoS resilience and abuse prevention systems Continuous performance tuning (latency, cost, reliability) ? Rate: Within your budget ($20–30 SGD/hr) ⏱️ Availability: Ready to start immediately, including incident response support Best regards, Jordan

@OBRY8246

Dear Hiring Team, I am excited to express my interest in the Network Engineer position focused on MikroTik, BGP, and DDoS Mitigation. With extensive hands-on experience in managing MikroTik RouterOS in demanding environments, I offer a solid track record in optimizing ISP-level networks. My expertise extends to configuring BGP sessions across multiple upstream providers, employing advanced traffic engineering techniques, and implementing robust DDoS mitigation strategies tailored to ensure high availability and low latency. I am adept at monitoring network performance, swiftly analyzing and resolving incidents, and managing IP allocations effectively. My proactive approach also includes the implementation of anti-abuse systems to enhance network security and overall performance. I am confident that my problem-solving mindset and ability to thrive under pressure align with the dynamic requirements of your global network infrastructure. Could you share specific challenges you've faced in your network infrastructure that I could help address? Thanks,

@josephc597

Hello, To optimize your network infrastructure, mitigate attacks, and ensure high availability and low latency, I offer over a decade of hands-on experience and expert-level knowledge in MikroTik and ISP-level networking. My work spans complex projects where I have managed BGP in multi-homed networks, designed robust routing strategies for cost vs performance optimization, handled DDoS attacks, and implemented successful mitigation techniques that kept networks stable even under high traffic spikes. I understand the crucial elements of your project such as anti-abuse systems, IP allocation, and the importance of maintaining clear documentation - all of which I have worked diligently with during my career. I am not only familiar with tools like Grafana or Zabbix but also adept at utilizing them to monitor network performance and troubleshoot complex issues swiftly under pressure. My approach as a freelancer aligns with your requirements as well: fast response during incidents, independent troubleshooting capability, structured thinking, and an unwavering focus on stability, performance, and cost-efficiency. Let's scale your network skillfully together! (Skills sections I don't cover are not included to accommodation) Thanks!

@luisn61

Hello, As an engineer who has been working with Linux for years, I can confidently articulate my expertise in network design and management. Not only do I have a strong background in the technical aspects, including strong knowledge of MikroTik, BGP, DDoS Mitigation and ISP-level networking, but I also possess the necessary soft skills vital for this position. These skills include my ability to troubleshoot issues under pressure, document effectively ensuring clear communication, and maintaining the high level of performance and availability required across VPS and hosting platforms. Additionally, being familiar with monitoring tools like (LibreNMS, Grafana, Zabbix) has further honed my skills in analyzing network performance, network security management, attack mitigation techniques, traffic engineering measures and IP reputation handling. Having managed live production networks of variable scales across several regions deftly has fortified my ability to work independently yet diligently? So far as being fast-responsive is concerned? Well! My record speaks for itself as I’ve always ensured continuous uptime and routing stability. Lastly, what sets me apart from others is that I not only focus on stability but also on cost efficiency which makes me a valuable asset that always weighs performances against costs. With multiple reliable strategies such as regular routing paths optimization and implementing anti-abuse systems among oth Thanks!

@Lazarone1

Hi, that’s great to hear! Your project closely aligns with one I recently worked. In that project, I built robust ISP-grade network architectures using MikroTik RouterOS, BGP multi-homing, and automated routing policies with GRE tunnels, RPKI validation, and advanced DDoS filtering to keep high‑traffic platforms stable under heavy load. Your focus on global routing performance, IX peering, and resilient mitigation strategies strongly matches my experience with multi-region VPS/hosting infrastructures. I’d be glad to connect and share my experience in more detail over chat. Thank you. Best regards, Lazar

@Alesha1018

Hi, I'm excited to apply for this Network Engineer role, leveraging my 15 years of software engineering experience in Australia. While my expertise lies in web applications, automation, and AI-generated code, I'm confident that my problem-solving skills and practical approach will translate well to this network engineering challenge. As a seasoned freelancer, I've a knack for understanding complex problems, suggesting effective solutions, and delivering clean, dependable work. My experience in automation and workflow optimization can be applied to designing and managing network infrastructure. I'd love to discuss how my skills can be adapted to this role, and provide an example of how I handled a similar challenge in the past. I've successfully improved AI-generated code, making it reliable and maintainable; I'm confident that I can bring a similar level of expertise to this network engineering position.

@alizain721

You need a MikroTik-first network design that keeps a multi-homed VPS/hosting platform running through high-PPS spikes and targeted L3/L4 abuse. Scope: build and operate RouterOS BGP speakers, traffic engineering (communities, local-pref, MED), RPKI/IRR route filtering, on-box mitigations plus upstream RTBH/scrubbing, monitoring and an incident runbook. Out of scope unless requested: application-level changes or hardware procurement. Key risk: relying only on RouterBOARD-based filtering for high-PPS attacks — without upstream RTBH or a scrubbing path, control-plane and forwarding-plane collapse is the usual failure mode. Proof: current role as Super Admin operating MikroTik/BGP for a hosting platform — responsible for multi-homed BGP, route filtering, traffic engineering and incident response for production services. Planned approach (brief): - 1–2 day audit of ASNs, peering, and RouterOS configs - implement RPKI+IRR, standardized route-maps/communities, and automated RTBH workflows - on-box ACLs + rate-limits for immediate relief; integrate LibreNMS/Grafana for PPS/latency alerts - deliver diagrams, runbook, and short test plan Quick answers: - MikroTik+BGP: hands-on RouterOS BGP multi-homing and TE. - Networks managed: production hosting/VPS footprint across multiple regions (details available under NDA). - DDoS: operational experience with RTBH, on-box filtering, and coordinated upstream mitigation. - Certifications/details: can share on request. How many public ASNs and upstream scrubbing/RTBH options are currently in place?

@mubeenm5026

With my solid 10-year background in networks and automation, I'm confident that my team at Web Crest can deliver on every single aspect of your project requirements. Our expertise runs the gamut of your requirements - from handling MikroTik RouterOS to managing ISP-level networking and configuring BGP sessions. We've designed, deployed and managed wide-ranging MikroTik-based networks successfully, while efficiently managing multiple upstream providers with technologies such as HE and IX - just some of the areas where I can make a significant impact. What sets me apart is my capability to adapt, anticipate and adequately address network issues even in high-pressure situations. My understanding and experience managing DDoS mitigation, network security, cost-effective routing and IP allocation makes me confident that your network will enjoy robust protection against abuse or attacks. Moreover, we know all about optimizing traffic paths for better performance at minimum costs and ensuring efficient documentation along the way - essential for smooth operations. My proficiency extends to working with latest monitoring tools (LibreNMS, Grafana, Zabbix), cross-connects, GRE tunnels and L2/L3 transports - so even out-of-scope challenges won't be a problem for us.

@ttobio69

Dear Client, I have read all your requirements carefully, and I understand that you need a highly skilled Network Engineer to manage and optimize a MikroTik-based, ISP-level production network with strong BGP control, routing stability, traffic engineering, DDoS mitigation, and abuse prevention across multiple regions. I have already worked on several similar infrastructure and network-focused projects before, including MikroTik routing, BGP session management, upstream/provider coordination, route filtering, traffic optimization, network monitoring, and incident response. With 8+ years of experience in this field, I am confident I can support a live hosting/VPS environment professionally. My relevant experience includes: -MikroTik RouterOS in production environments -Multi-homed BGP setup and routing policy control -Traffic engineering using local-pref, filtering, and route tuning -DDoS mitigation, rate limiting, and attack response -Monitoring, troubleshooting, and performance optimization -Documentation and structured network operations I understand the importance of uptime, fast incident handling, low latency, and balancing cost vs performance in real production networks. I can work independently, document clearly, and help build a stable and scalable architecture. I can work within your required timeline, and I would be happy to discuss the cost in detail. Best regards, Oluwatobi Okedairo

@iAmiteshKr

Hi there, With 15+ years of experience in Router/OpenWRT system software and firmware development, I offer a unique perspective on MikroTik/ISP networking. I don't just configure routers; I understand the underlying C code and driver logic that governs packet flow. Key highlights I bring to your infrastructure: Advanced Automation: I use C, Rust, Go, and Nushell to build custom tools and automate complex routing policies, ensuring your BGP announcements and prefix filters are always accurate. High-Performance Tuning: My background in driver porting (Ethernet/VPN) allows me to optimize MikroTik hardware offloading (L3HW) to ensure low latency and high throughput under heavy VPS loads. Incident Response: I’ve mitigated large-scale DDoS attacks by using CLI-level analysis to apply surgical filtering rules, protecting the CPU from exhaustion during high PPS spikes. Global Routing: Experienced in multi-homed BGP, IX peering, and RPKI/IRR filtering with providers like HE and Cogent. I prioritize network stability and high availability. I'm ready to dive into your current topology and help optimize your routing costs versus performance. Best, Amitesh

@haseebsidd07

Hey , I just went through the project description, and I see you are looking for someone experienced in Network Administration, Network Monitoring, Wireless, Automation, Ansible, Cisco, Network Security, Juniper, Linux and Network Engineering. It instantly reminded me of a client who faced similar challenges, and I knew I had a tailor-made solution for it. Please review my profile to confirm that I have great experience working with these tech stacks. While I have few questions: • Is there anything else you’d like to add to the project details? • What’s the top hurdle you’re facing with this project? • What is the timeline to get this done? Why Choose Me? 250+ Projects. 5 Years. Zero Misses. My reputation is built on a single metric: Flawless Execution. While others promise quality, my last 100+ consecutive 5-star reviews prove it. I don’t just finish the job; I set the standard. Timings: 9am - 9pm Eastern Time (I work as a full time freelancer) The portfolio here is just the tip of the iceberg. To respect client confidentiality, my recent heavy-hitters aren't public, but I can share them 1-on-1. Click the 'CHAT' button, and I’ll send over the relevant samples immediately for your review. Regards, Abdul Haseeb Siddiqui.