← Back to history

Pipeline run

bdbc9288-f20a-423d-a1fc-389a1cc5eebf

Pipeline LLM cost (USD)
API 1: $0.0042 API 2: $0.0010 API 3: $0.0000 Total: $0.0052

Client output enrichment

v2 Skill cluster · Nature of work · AI index · Tech stack maturity · Evidence · KRA description
Nature of work · Network Administration
Runs enterprise network operations: configures LAN/WAN/WLAN/SD-WAN, maintains BGP/OSPF routing and switching, and manages NGFW/VPN/NAC. Also leads outage escalation/RCA, change requests, SOPs, and network documentation.
"Configure and manage enterprise LAN, WAN, WLAN, and SD-WAN (Fortinet) solutions."
Tech stack maturity
Mainstream Modern
The skills listed—DNS, SOPS, and VPN—are widely used, current infrastructure/security technologies that fit a mainstream modern stack rather than legacy or bleeding-edge environments.
AI index (0 = no AI use, 5 = totally AI-dependent · v2.1)
0.00 / 5
· Title match
· Has AI skill
· AI skill (primary)
· AI skill (secondary)
· On AI team
· Builds AI products
vocab breakdown (legacy)
Assistants (×1):
Frameworks (×2):
Models / concepts (×3):
Evidence — skills matched in JD (24)
LAN WAN WLAN SD-WAN Fortinet BGP OSPF NGFW VPN NAC RCA SOPs Cisco BGP4 OSI model TCP/IP NAT/PAT DNS DHCP TACACS Wireshark Network Management Systems ITIL Change Management
Skill cluster (2 dimension groups, role-scoped)
Network Security Controls
VPN
Cross-cutting / unaligned
LAN WAN WLAN SD-WAN Fortinet BGP OSPF NGFW NAC RCA SOPs Cisco BGP4 OSI model TCP/IP NAT/PAT DNS DHCP TACACS Wireshark Network Management Systems ITIL Change Management
Show KRA description ↓
• Network Administration: Configure and manage enterprise LAN, WAN, WLAN, and SD-WAN (Fortinet) solutions. • Routing & Switching: Implement and maintain robust routing and switching environments using BGP and OSPF protocols. • Security & Access: Manage next-generation firewalls (NGFW), VPNs, and Network Access Control (NAC) systems. Lead security hardening and firewall rule optimization. • Incident Management: Act as the technical escalation point for network incidents. Lead the resolution of critical outages and perform thorough Root Cause Analysis (RCA). • Optimization: Proactively tune network bandwidth, redundancy, and failover mechanisms to ensure 99.9% uptime. • Operational Excellence: Develop Standard Operating Procedures (SOPs) for L1/L2 teams and lead the review/execution of Network Change Requests (CRs). • Documentation: Maintain high-quality network diagrams, configuration backups, and knowledge base articles. Core Networking • Multi-Vendor Expertise: Hands-on experience with Cisco and Fortinet devices is essential. • Protocols: Deep understanding of BGP4, OSPF, and enterprise switching. • Infrastructure: Solid grasp of the OSI model, TCP/IP, NAT/PAT, DNS, DHCP, and TACACS. • SD-WAN: Proven experience in deploying and managing SD-WAN (specifically Fortinet). Troubleshooting & Tools • Diagnostic Skills: Proficiency in packet analysis (Wireshark), log interpretation, and fault management. • Monitoring: Experience with Network Management Systems (NMS) to track health and performance. Operational Requirements • Shift Work: Ability to work flexibly in a 24x7 shift environment. • Process Oriented: Familiarity with ITIL practices, specifically Change Management and Risk Mitigation during maintenance windows. Soft Skills • Leadership: Ability to lead critical incident response teams under pressure. • Communication: Strong documentation skills for creating technical diagrams and incident reports. • Mentorship: Willingness to train and provide remediation steps for junior technical staff.

Signals

Skill devops-engineer
0.09
Alias cybersecurity-engineer
1.00
KRA cybersecurity-engineer
0.59

Post-classification

Centroidupdated · n=5
Alias collision log
New-role queue
New skills captured21
New KRA captured

Captured for admin review

LAN primary Cybersecurity Engineer pending
WAN primary Cybersecurity Engineer pending
WLAN primary Cybersecurity Engineer pending
SD-WAN primary Cybersecurity Engineer pending
Fortinet primary Cybersecurity Engineer pending
BGP primary Cybersecurity Engineer pending
OSPF primary Cybersecurity Engineer pending
NGFW primary Cybersecurity Engineer pending
NAC primary Cybersecurity Engineer pending
RCA primary Cybersecurity Engineer pending
Cisco primary Cybersecurity Engineer pending
BGP4 primary Cybersecurity Engineer pending
OSI model primary Cybersecurity Engineer pending
TCP/IP primary Cybersecurity Engineer pending
NAT/PAT primary Cybersecurity Engineer pending
DHCP primary Cybersecurity Engineer pending
TACACS primary Cybersecurity Engineer pending
Wireshark primary Cybersecurity Engineer pending
Network Management Systems primary Cybersecurity Engineer pending
ITIL primary Cybersecurity Engineer pending
Change Management Cybersecurity Engineer pending
Status: completed Created: 2026-05-22T00:02:43.898348Z Updated: 2026-05-22T00:03:15.279153Z API 3 duration: 2343 ms
Flow Current 3-step pipeline

1 POST /skills/extract-from-jd

2 POST /skills/extract-details

3 POST /skills/final-role-output

Role Chosen role & resolution

Cybersecurity Engineer

CASE B

slug: cybersecurity-engineer · id: 5 · source: db

This role covers critical skills such as VPN, LAN, and network security necessary for the position.

Resolution: in_db — role exists in library; skill↔dim and role↔dim links saved when applicable.

0
New skills
0
Skill↔dim saved
0
Role↔dim saved
0
Skipped

Job description

Job Title: L2 Network Security Engineer

We are seeking a highly skilled L2 Network Security Engineer to manage, optimize, and secure our enterprise-level network infrastructure. In this role, you will be responsible for the end-to-end administration of LAN/WAN, SD-WAN, and security frameworks. You will serve as a critical technical escalation point, ensuring high availability through proactive monitoring, root cause analysis (RCA), and precise execution of network changes.


Key Responsibilities
• Network Administration: Configure and manage enterprise LAN, WAN, WLAN, and SD-WAN (Fortinet) solutions.
• Routing & Switching: Implement and maintain robust routing and switching environments using BGP and OSPF protocols.
• Security & Access: Manage next-generation firewalls (NGFW), VPNs, and Network Access Control (NAC) systems. Lead security hardening and firewall rule optimization.
• Incident Management: Act as the technical escalation point for network incidents. Lead the resolution of critical outages and perform thorough Root Cause Analysis (RCA).
• Optimization: Proactively tune network bandwidth, redundancy, and failover mechanisms to ensure 99.9% uptime.
• Operational Excellence: Develop Standard Operating Procedures (SOPs) for L1/L2 teams and lead the review/execution of Network Change Requests (CRs).
• Documentation: Maintain high-quality network diagrams, configuration backups, and knowledge base articles.


Technical Skills & Qualifications


Core Networking
• Multi-Vendor Expertise: Hands-on experience with Cisco and Fortinet devices is essential.
• Protocols: Deep understanding of BGP4, OSPF, and enterprise switching.
• Infrastructure: Solid grasp of the OSI model, TCP/IP, NAT/PAT, DNS, DHCP, and TACACS.
• SD-WAN: Proven experience in deploying and managing SD-WAN (specifically Fortinet).


Troubleshooting & Tools
• Diagnostic Skills: Proficiency in packet analysis (Wireshark), log interpretation, and fault management.
• Monitoring: Experience with Network Management Systems (NMS) to track health and performance.


Operational Requirements
• Shift Work: Ability to work flexibly in a 24x7 shift environment.
• Process Oriented: Familiarity with ITIL practices, specifically Change Management and Risk Mitigation during maintenance windows.


Soft Skills
• Leadership: Ability to lead critical incident response teams under pressure.
• Communication: Strong documentation skills for creating technical diagrams and incident reports.
• Mentorship: Willingness to train and provide remediation steps for junior technical staff.


Preferred Certifications
• CCNA/CCNP (Routing & Switching/Security)
• Fortinet NSE 4 or higher
• ITIL Foundation


Email: Raspl.hr@raspl.com

Skills from this JD

Each row merges API 1 extraction, API 2 library match / v3 orchestration (dimensions + locked dims), and API 3 persistence tags.

LAN Primary New / orchestrated API 3: new canonical path (new) New / unmatched skill (orchestrated in API 2)

Skill enrichment (orchestrator / LLM)

No Stage 7 enrichment blob on this skill (orchestrator skipped enrichment).

Derived legacy fields
Category
Networking
Sub-category
general
Skill nature
CONCEPT
Volatility
STABLE
Typical lifespan
EVERGREEN
Version strategy
UNVERSIONED
WAN Primary New / orchestrated API 3: new canonical path (new) New / unmatched skill (orchestrated in API 2)

Skill enrichment (orchestrator / LLM)

No Stage 7 enrichment blob on this skill (orchestrator skipped enrichment).

Derived legacy fields
Category
Networking
Sub-category
general
Skill nature
CONCEPT
Volatility
STABLE
Typical lifespan
EVERGREEN
Version strategy
UNVERSIONED
WLAN Primary New / orchestrated API 3: new canonical path (new) New / unmatched skill (orchestrated in API 2)

Skill enrichment (orchestrator / LLM)

No Stage 7 enrichment blob on this skill (orchestrator skipped enrichment).

Derived legacy fields
Category
Networking
Sub-category
general
Skill nature
CONCEPT
Volatility
STABLE
Typical lifespan
EVERGREEN
Version strategy
UNVERSIONED
SD-WAN Primary New / orchestrated API 3: new canonical path (new) New / unmatched skill (orchestrated in API 2)

Skill enrichment (orchestrator / LLM)

No Stage 7 enrichment blob on this skill (orchestrator skipped enrichment).

Derived legacy fields
Category
Networking
Sub-category
general
Skill nature
CONCEPT
Volatility
MEDIUM
Typical lifespan
MULTI_YEAR
Version strategy
UNVERSIONED
Fortinet Primary New / orchestrated API 3: new canonical path (new) New / unmatched skill (orchestrated in API 2)

Skill enrichment (orchestrator / LLM)

No Stage 7 enrichment blob on this skill (orchestrator skipped enrichment).

Derived legacy fields
Category
Security Tools
Sub-category
general
Skill nature
TOOL
Volatility
MEDIUM
Typical lifespan
MULTI_YEAR
Version strategy
UNVERSIONED
BGP Primary New / orchestrated API 3: new canonical path (new) New / unmatched skill (orchestrated in API 2)

Skill enrichment (orchestrator / LLM)

No Stage 7 enrichment blob on this skill (orchestrator skipped enrichment).

Derived legacy fields
Category
Networking
Sub-category
general
Skill nature
CONCEPT
Volatility
STABLE
Typical lifespan
EVERGREEN
Version strategy
UNVERSIONED
OSPF Primary New / orchestrated API 3: new canonical path (new) New / unmatched skill (orchestrated in API 2)

Skill enrichment (orchestrator / LLM)

No Stage 7 enrichment blob on this skill (orchestrator skipped enrichment).

Derived legacy fields
Category
Networking
Sub-category
general
Skill nature
CONCEPT
Volatility
STABLE
Typical lifespan
EVERGREEN
Version strategy
UNVERSIONED
NGFW Primary New / orchestrated API 3: new canonical path (new) New / unmatched skill (orchestrated in API 2)

Skill enrichment (orchestrator / LLM)

No Stage 7 enrichment blob on this skill (orchestrator skipped enrichment).

Derived legacy fields
Category
Security Tools
Sub-category
general
Skill nature
CONCEPT
Volatility
MEDIUM
Typical lifespan
MULTI_YEAR
Version strategy
UNVERSIONED
VPN Primary Library skill API 3: existing canonical (in_db) Existing skill (matched library)
Canonical: VPN id=304 · vpn

Aliases — catalog

  • VPN (CANONICAL) primary

Context tags (catalog)

Authentication Encryption Firewall IKEv2 IPSec IPsec L2TP NAT traversal Network Security OpenVPN PPTP RADIUS Remote Access SSL VPN SSL/TLS Split Tunneling Tunneling VPN Gateway WireGuard authentication encryption firewall gateway remote access site-to-site split tunneling tunnel

Stored enrichment (catalog DB)

Category
Protocol
Sub-category
Network Tunneling Protocol
Confidence
0.90
Version strategy
NOT_APPLICABLE

Maturity reasoning: VPN is broadly used in enterprise networking and remote access; it appears frequently in job descriptions for network/security roles and is supported by major vendors like Cisco, Palo Alto, and AWS.

Skill profile (library / DB)

Skill nature
PROTOCOL
Volatility
STABLE
Typical lifespan
EVERGREEN
Category id
10
Sub-category id
1373
Extractable
True
Also category
False

Dimensions (API 2 worklist)

  • Cloud Network Security Controls Catalog dimension db id 242

    Library dimension (catalog)

    Roles linked in library: Cloud Security Engineer

  • Network Security Controls Catalog dimension db id 60

    Library dimension (catalog)

    Roles linked in library: Cybersecurity Engineer

API 3 link attempts (this skill)

Dimension Skill↔dim Role↔dim Outcome
Cloud Network Security Controls
cloud-network-security-controls
Existing dimension (library) · Role↔dimension skipped (dimension not under chosen role)
Network Security Controls
network-security-controls
Existing dimension (library) · Role↔dimension saved
NAC Primary New / orchestrated API 3: new canonical path (new) New / unmatched skill (orchestrated in API 2)

Skill enrichment (orchestrator / LLM)

No Stage 7 enrichment blob on this skill (orchestrator skipped enrichment).

Derived legacy fields
Category
Security Tools
Sub-category
general
Skill nature
CONCEPT
Volatility
MEDIUM
Typical lifespan
MULTI_YEAR
Version strategy
UNVERSIONED
RCA Primary New / orchestrated API 3: new canonical path (new) New / unmatched skill (orchestrated in API 2)

Skill enrichment (orchestrator / LLM)

No Stage 7 enrichment blob on this skill (orchestrator skipped enrichment).

Derived legacy fields
Category
Soft Skills
Sub-category
general
Skill nature
PRACTICE
Volatility
STABLE
Typical lifespan
EVERGREEN
Version strategy
UNVERSIONED
SOPs Primary Library skill API 3: existing canonical (in_db) Existing skill (matched library)
Canonical: SOPs id=897 · sops

Aliases — catalog

  • SOPs (CANONICAL) primary

Context tags (catalog)

SOP templates audit trail audit trails best practices compliance continuous improvement documentation implementation guidelines operational efficiency performance metrics process improvement process mapping process optimization quality assurance regulatory requirements risk management standardization training manuals training materials workflow

Stored enrichment (catalog DB)

Category
Methodology
Sub-category
Standard Operating Procedure
Confidence
0.95
Version strategy
NOT_APPLICABLE

Maturity reasoning: Standard operating procedures are a common requirement in ops, QA, and regulated-industry job descriptions; they’re broadly used for process consistency and compliance rather than a niche tool.

Skill profile (library / DB)

Skill nature
METHODOLOGY
Volatility
STABLE
Typical lifespan
EVERGREEN
Category id
8
Sub-category id
629
Extractable
True
Also category
False

Dimensions (API 2 worklist)

  • Operational Automation and Runbooks Catalog dimension db id 222

    Library dimension (catalog)

    Roles linked in library: ML Ops Engineer

  • Release Documentation and Runbooks Catalog dimension db id 158

    Library dimension (catalog)

    Roles linked in library: DevOps Engineer

API 3 link attempts (this skill)

Dimension Skill↔dim Role↔dim Outcome
Operational Automation and Runbooks
operational-automation-and-runbooks
Existing dimension (library) · Role↔dimension skipped (dimension not under chosen role)
Release Documentation and Runbooks
release-documentation-and-runbooks
Existing dimension (library) · Role↔dimension skipped (dimension not under chosen role)
Cisco Primary New / orchestrated API 3: new canonical path (new) New / unmatched skill (orchestrated in API 2)

Skill enrichment (orchestrator / LLM)

No Stage 7 enrichment blob on this skill (orchestrator skipped enrichment).

Derived legacy fields
Category
Networking
Sub-category
general
Skill nature
TOOL
Volatility
MEDIUM
Typical lifespan
MULTI_YEAR
Version strategy
UNVERSIONED
BGP4 Primary New / orchestrated API 3: new canonical path (new) New / unmatched skill (orchestrated in API 2)

Skill enrichment (orchestrator / LLM)

No Stage 7 enrichment blob on this skill (orchestrator skipped enrichment).

Derived legacy fields
Category
Networking
Sub-category
general
Skill nature
CONCEPT
Volatility
STABLE
Typical lifespan
EVERGREEN
Version strategy
UNVERSIONED
OSI model Primary New / orchestrated API 3: new canonical path (new) New / unmatched skill (orchestrated in API 2)

Skill enrichment (orchestrator / LLM)

No Stage 7 enrichment blob on this skill (orchestrator skipped enrichment).

Derived legacy fields
Category
Networking
Sub-category
general
Skill nature
CONCEPT
Volatility
STABLE
Typical lifespan
EVERGREEN
Version strategy
UNVERSIONED
TCP/IP Primary New / orchestrated API 3: new canonical path (new) New / unmatched skill (orchestrated in API 2)

Skill enrichment (orchestrator / LLM)

No Stage 7 enrichment blob on this skill (orchestrator skipped enrichment).

Derived legacy fields
Category
Networking
Sub-category
general
Skill nature
CONCEPT
Volatility
STABLE
Typical lifespan
EVERGREEN
Version strategy
UNVERSIONED
NAT/PAT Primary New / orchestrated API 3: new canonical path (new) New / unmatched skill (orchestrated in API 2)

Skill enrichment (orchestrator / LLM)

No Stage 7 enrichment blob on this skill (orchestrator skipped enrichment).

Derived legacy fields
Category
Networking
Sub-category
general
Skill nature
CONCEPT
Volatility
STABLE
Typical lifespan
EVERGREEN
Version strategy
UNVERSIONED
DNS Primary Library skill API 3: existing canonical (in_db) Existing skill (matched library)
Canonical: DNS id=740 · dns

Aliases — catalog

  • DNS (CANONICAL) primary

Context tags (catalog)

A record BIND CNAME DNS caching DNS over HTTPS DNS query DNS server DNSSEC MX record NS record PTR record SOA TTL authoritative server dynamic DNS forward lookup forwarding recursive resolver reverse lookup root nameserver split-horizon DNS zone file

Stored enrichment (catalog DB)

Category
Protocol
Sub-category
Name Resolution Protocol
Vendor
IETF
License
other_open
Year introduced
1983
Confidence
0.90
Version strategy
NOT_APPLICABLE

Maturity reasoning: DNS is a foundational internet protocol and appears routinely in SRE, network, and cloud job descriptions; major vendors still document and support it as core infrastructure.

Skill profile (library / DB)

Skill nature
PROTOCOL
Volatility
STABLE
Typical lifespan
EVERGREEN
Category id
10
Sub-category id
561
Extractable
True
Also category
False

Dimensions (API 2 worklist)

  • Cloud Networking and Connectivity Catalog dimension db id 153

    Library dimension (catalog)

    Roles linked in library: DevOps Engineer

  • Cloud Networking and Edge Connectivity Catalog dimension db id 136

    Library dimension (catalog)

    Roles linked in library: Cloud Architect

API 3 link attempts (this skill)

Dimension Skill↔dim Role↔dim Outcome
Cloud Networking and Connectivity
cloud-networking-and-connectivity
Existing dimension (library) · Role↔dimension skipped (dimension not under chosen role)
Cloud Networking and Edge Connectivity
cloud-networking-and-edge-connectivity
Existing dimension (library) · Role↔dimension skipped (dimension not under chosen role)
DHCP Primary New / orchestrated API 3: new canonical path (new) New / unmatched skill (orchestrated in API 2)

Skill enrichment (orchestrator / LLM)

No Stage 7 enrichment blob on this skill (orchestrator skipped enrichment).

Derived legacy fields
Category
Networking
Sub-category
general
Skill nature
CONCEPT
Volatility
STABLE
Typical lifespan
EVERGREEN
Version strategy
UNVERSIONED
TACACS Primary New / orchestrated API 3: new canonical path (new) New / unmatched skill (orchestrated in API 2)

Skill enrichment (orchestrator / LLM)

No Stage 7 enrichment blob on this skill (orchestrator skipped enrichment).

Derived legacy fields
Category
Networking
Sub-category
general
Skill nature
CONCEPT
Volatility
MEDIUM
Typical lifespan
MULTI_YEAR
Version strategy
UNVERSIONED
Wireshark Primary New / orchestrated API 3: new canonical path (new) New / unmatched skill (orchestrated in API 2)

Skill enrichment (orchestrator / LLM)

No Stage 7 enrichment blob on this skill (orchestrator skipped enrichment).

Derived legacy fields
Category
Network Management Systems
Sub-category
general
Skill nature
TOOL
Volatility
MEDIUM
Typical lifespan
MULTI_YEAR
Version strategy
UNVERSIONED
Network Management Systems Primary New / orchestrated API 3: new canonical path (new) New / unmatched skill (orchestrated in API 2)

Skill enrichment (orchestrator / LLM)

No Stage 7 enrichment blob on this skill (orchestrator skipped enrichment).

Derived legacy fields
Category
Networking
Sub-category
general
Skill nature
CONCEPT
Volatility
MEDIUM
Typical lifespan
MULTI_YEAR
Version strategy
UNVERSIONED
ITIL Primary New / orchestrated API 3: new canonical path (new) New / unmatched skill (orchestrated in API 2)

Skill enrichment (orchestrator / LLM)

No Stage 7 enrichment blob on this skill (orchestrator skipped enrichment).

Derived legacy fields
Category
Soft Skills
Sub-category
general
Skill nature
PRACTICE
Volatility
MEDIUM
Typical lifespan
MULTI_YEAR
Version strategy
UNVERSIONED
Change Management Secondary New / orchestrated API 3: new canonical path (new) New / unmatched skill (orchestrated in API 2)

Skill enrichment (orchestrator / LLM)

No Stage 7 enrichment blob on this skill (orchestrator skipped enrichment).

Derived legacy fields
Category
Soft Skills
Sub-category
general
Skill nature
PRACTICE
Volatility
MEDIUM
Typical lifespan
MULTI_YEAR
Version strategy
UNVERSIONED

All API 3 persistence rows

Same grid as the skill-extractor “Persistence items” table: one row per (skill × dimension) work item.

Skill Tag Dimension Skill↔dim Role↔dim Outcome Notes
VPN in_db
Cloud Network Security Controls
cloud-network-security-controls
Existing dimension (library) · Role↔dimension skipped (dimension not under chosen role)
VPN in_db
Network Security Controls
network-security-controls
Existing dimension (library) · Role↔dimension saved
SOPs in_db
Operational Automation and Runbooks
operational-automation-and-runbooks
Existing dimension (library) · Role↔dimension skipped (dimension not under chosen role)
SOPs in_db
Release Documentation and Runbooks
release-documentation-and-runbooks
Existing dimension (library) · Role↔dimension skipped (dimension not under chosen role)
DNS in_db
Cloud Networking and Connectivity
cloud-networking-and-connectivity
Existing dimension (library) · Role↔dimension skipped (dimension not under chosen role)
DNS in_db
Cloud Networking and Edge Connectivity
cloud-networking-and-edge-connectivity
Existing dimension (library) · Role↔dimension skipped (dimension not under chosen role)

Library artifacts (this run)

Kind Detail DB id
canonical_skill_proposed LAN | type=Networking subtype=general nature=CONCEPT lifespan=EVERGREEN
canonical_skill_proposed WAN | type=Networking subtype=general nature=CONCEPT lifespan=EVERGREEN
canonical_skill_proposed WLAN | type=Networking subtype=general nature=CONCEPT lifespan=EVERGREEN
canonical_skill_proposed SD-WAN | type=Networking subtype=general nature=CONCEPT lifespan=MULTI_YEAR
canonical_skill_proposed Fortinet | type=Security Tools subtype=general nature=TOOL lifespan=MULTI_YEAR
canonical_skill_proposed BGP | type=Networking subtype=general nature=CONCEPT lifespan=EVERGREEN
canonical_skill_proposed OSPF | type=Networking subtype=general nature=CONCEPT lifespan=EVERGREEN
canonical_skill_proposed NGFW | type=Security Tools subtype=general nature=CONCEPT lifespan=MULTI_YEAR
canonical_skill_proposed NAC | type=Security Tools subtype=general nature=CONCEPT lifespan=MULTI_YEAR
canonical_skill_proposed RCA | type=Soft Skills subtype=general nature=PRACTICE lifespan=EVERGREEN
canonical_skill_proposed Cisco | type=Networking subtype=general nature=TOOL lifespan=MULTI_YEAR
canonical_skill_proposed BGP4 | type=Networking subtype=general nature=CONCEPT lifespan=EVERGREEN
canonical_skill_proposed OSI model | type=Networking subtype=general nature=CONCEPT lifespan=EVERGREEN
canonical_skill_proposed TCP/IP | type=Networking subtype=general nature=CONCEPT lifespan=EVERGREEN
canonical_skill_proposed NAT/PAT | type=Networking subtype=general nature=CONCEPT lifespan=EVERGREEN
canonical_skill_proposed DHCP | type=Networking subtype=general nature=CONCEPT lifespan=EVERGREEN
canonical_skill_proposed TACACS | type=Networking subtype=general nature=CONCEPT lifespan=MULTI_YEAR
canonical_skill_proposed Wireshark | type=Network Management Systems subtype=general nature=TOOL lifespan=MULTI_YEAR
canonical_skill_proposed Network Management Systems | type=Networking subtype=general nature=CONCEPT lifespan=MULTI_YEAR
canonical_skill_proposed ITIL | type=Soft Skills subtype=general nature=PRACTICE lifespan=MULTI_YEAR
canonical_skill_proposed Change Management | type=Soft Skills subtype=general nature=PRACTICE lifespan=MULTI_YEAR
nano JD Parser — gpt-4.1-nano click to toggle
RoleL2 Network Security Engineer
DomainIT Services & Consulting
JD type pass

Certifications

CCNA/CCNP (Routing & Switching/Security) Fortinet NSE 4 or higher ITIL Foundation
Show raw JSON
{
  "JD_type": "pass",
  "about_company": null,
  "certifications": [
    "CCNA/CCNP (Routing \u0026 Switching/Security)",
    "Fortinet NSE 4 or higher",
    "ITIL Foundation"
  ],
  "company_name": null,
  "ctc": null,
  "domain": {
    "primary": {
      "aliases": [],
      "domain": "IT Services \u0026 Consulting"
    },
    "secondary": null
  },
  "education": [],
  "experience": null,
  "job_locations": [],
  "role": "L2 Network Security Engineer",
  "role_aliases": [
    "Network Security Engineer",
    "L2 Network Engineer",
    "Network Engineer"
  ],
  "role_archetype": "Engineering",
  "roles_and_responsibilities": [
    {
      "bullet_count": 7,
      "heading": "Key Responsibilities",
      "heading_was_present": true,
      "source_marker": {
        "first_5_words": "\u2022 Network Administration: Configure and",
        "last_5_words": "configuration backups, and knowledge base articles."
      },
      "text": "\u2022 Network Administration: Configure and manage enterprise LAN, WAN, WLAN, and SD-WAN (Fortinet) solutions.\n\u2022 Routing \u0026 Switching: Implement and maintain robust routing and switching environments using BGP and OSPF protocols.\n\u2022 Security \u0026 Access: Manage next-generation firewalls (NGFW), VPNs, and Network Access Control (NAC) systems. Lead security hardening and firewall rule optimization.\n\u2022 Incident Management: Act as the technical escalation point for network incidents. Lead the resolution of critical outages and perform thorough Root Cause Analysis (RCA).\n\u2022 Optimization: Proactively tune network bandwidth, redundancy, and failover mechanisms to ensure 99.9% uptime.\n\u2022 Operational Excellence: Develop Standard Operating Procedures (SOPs) for L1/L2 teams and lead the review/execution of Network Change Requests (CRs).\n\u2022 Documentation: Maintain high-quality network diagrams, configuration backups, and knowledge base articles.",
      "word_count": 134
    },
    {
      "bullet_count": 12,
      "heading": "Technical Skills \u0026 Qualifications",
      "heading_was_present": true,
      "source_marker": {
        "first_5_words": "Core Networking\n\u2022 Multi-Vendor Expertise: Hands-on",
        "last_5_words": "provide remediation steps for junior technical staff."
      },
      "text": "Core Networking\n\u2022 Multi-Vendor Expertise: Hands-on experience with Cisco and Fortinet devices is essential.\n\u2022 Protocols: Deep understanding of BGP4, OSPF, and enterprise switching.\n\u2022 Infrastructure: Solid grasp of the OSI model, TCP/IP, NAT/PAT, DNS, DHCP, and TACACS.\n\u2022 SD-WAN: Proven experience in deploying and managing SD-WAN (specifically Fortinet).\n\nTroubleshooting \u0026 Tools\n\u2022 Diagnostic Skills: Proficiency in packet analysis (Wireshark), log interpretation, and fault management.\n\u2022 Monitoring: Experience with Network Management Systems (NMS) to track health and performance.\n\nOperational Requirements\n\u2022 Shift Work: Ability to work flexibly in a 24x7 shift environment.\n\u2022 Process Oriented: Familiarity with ITIL practices, specifically Change Management and Risk Mitigation during maintenance windows.\n\nSoft Skills\n\u2022 Leadership: Ability to lead critical incident response teams under pressure.\n\u2022 Communication: Strong documentation skills for creating technical diagrams and incident reports.\n\u2022 Mentorship: Willingness to train and provide remediation steps for junior technical staff.",
      "word_count": 263
    }
  ],
  "urls": []
}
API 1 — extract-from-jd click to toggle
{
  "final_skills": [
    {
      "is_primary": true,
      "skill_name": "LAN"
    },
    {
      "is_primary": true,
      "skill_name": "WAN"
    },
    {
      "is_primary": true,
      "skill_name": "WLAN"
    },
    {
      "is_primary": true,
      "skill_name": "SD-WAN"
    },
    {
      "is_primary": true,
      "skill_name": "Fortinet"
    },
    {
      "is_primary": true,
      "skill_name": "BGP"
    },
    {
      "is_primary": true,
      "skill_name": "OSPF"
    },
    {
      "is_primary": true,
      "skill_name": "NGFW"
    },
    {
      "is_primary": true,
      "skill_name": "VPN"
    },
    {
      "is_primary": true,
      "skill_name": "NAC"
    },
    {
      "is_primary": true,
      "skill_name": "RCA"
    },
    {
      "is_primary": true,
      "skill_name": "SOPs"
    },
    {
      "is_primary": true,
      "skill_name": "Cisco"
    },
    {
      "is_primary": true,
      "skill_name": "BGP4"
    },
    {
      "is_primary": true,
      "skill_name": "OSI model"
    },
    {
      "is_primary": true,
      "skill_name": "TCP/IP"
    },
    {
      "is_primary": true,
      "skill_name": "NAT/PAT"
    },
    {
      "is_primary": true,
      "skill_name": "DNS"
    },
    {
      "is_primary": true,
      "skill_name": "DHCP"
    },
    {
      "is_primary": true,
      "skill_name": "TACACS"
    },
    {
      "is_primary": true,
      "skill_name": "Wireshark"
    },
    {
      "is_primary": true,
      "skill_name": "Network Management Systems"
    },
    {
      "is_primary": true,
      "skill_name": "ITIL"
    },
    {
      "is_primary": false,
      "skill_name": "Change Management"
    }
  ],
  "jd_role": {
    "display_name": "L2 Network Security Engineer",
    "rationale": null,
    "role_aliases": [
      "Network Security Engineer",
      "L2 Network Engineer",
      "Network Engineer"
    ],
    "role_archetype": "Engineering",
    "slug": ""
  },
  "nano_parsed": {
    "JD_type": "pass",
    "about_company": null,
    "certifications": [
      "CCNA/CCNP (Routing \u0026 Switching/Security)",
      "Fortinet NSE 4 or higher",
      "ITIL Foundation"
    ],
    "company_name": null,
    "ctc": null,
    "domain": {
      "primary": {
        "aliases": [],
        "domain": "IT Services \u0026 Consulting"
      },
      "secondary": null
    },
    "education": [],
    "experience": null,
    "job_locations": [],
    "role": "L2 Network Security Engineer",
    "role_aliases": [
      "Network Security Engineer",
      "L2 Network Engineer",
      "Network Engineer"
    ],
    "role_archetype": "Engineering",
    "roles_and_responsibilities": [
      {
        "bullet_count": 7,
        "heading": "Key Responsibilities",
        "heading_was_present": true,
        "source_marker": {
          "first_5_words": "\u2022 Network Administration: Configure and",
          "last_5_words": "configuration backups, and knowledge base articles."
        },
        "text": "\u2022 Network Administration: Configure and manage enterprise LAN, WAN, WLAN, and SD-WAN (Fortinet) solutions.\n\u2022 Routing \u0026 Switching: Implement and maintain robust routing and switching environments using BGP and OSPF protocols.\n\u2022 Security \u0026 Access: Manage next-generation firewalls (NGFW), VPNs, and Network Access Control (NAC) systems. Lead security hardening and firewall rule optimization.\n\u2022 Incident Management: Act as the technical escalation point for network incidents. Lead the resolution of critical outages and perform thorough Root Cause Analysis (RCA).\n\u2022 Optimization: Proactively tune network bandwidth, redundancy, and failover mechanisms to ensure 99.9% uptime.\n\u2022 Operational Excellence: Develop Standard Operating Procedures (SOPs) for L1/L2 teams and lead the review/execution of Network Change Requests (CRs).\n\u2022 Documentation: Maintain high-quality network diagrams, configuration backups, and knowledge base articles.",
        "word_count": 134
      },
      {
        "bullet_count": 12,
        "heading": "Technical Skills \u0026 Qualifications",
        "heading_was_present": true,
        "source_marker": {
          "first_5_words": "Core Networking\n\u2022 Multi-Vendor Expertise: Hands-on",
          "last_5_words": "provide remediation steps for junior technical staff."
        },
        "text": "Core Networking\n\u2022 Multi-Vendor Expertise: Hands-on experience with Cisco and Fortinet devices is essential.\n\u2022 Protocols: Deep understanding of BGP4, OSPF, and enterprise switching.\n\u2022 Infrastructure: Solid grasp of the OSI model, TCP/IP, NAT/PAT, DNS, DHCP, and TACACS.\n\u2022 SD-WAN: Proven experience in deploying and managing SD-WAN (specifically Fortinet).\n\nTroubleshooting \u0026 Tools\n\u2022 Diagnostic Skills: Proficiency in packet analysis (Wireshark), log interpretation, and fault management.\n\u2022 Monitoring: Experience with Network Management Systems (NMS) to track health and performance.\n\nOperational Requirements\n\u2022 Shift Work: Ability to work flexibly in a 24x7 shift environment.\n\u2022 Process Oriented: Familiarity with ITIL practices, specifically Change Management and Risk Mitigation during maintenance windows.\n\nSoft Skills\n\u2022 Leadership: Ability to lead critical incident response teams under pressure.\n\u2022 Communication: Strong documentation skills for creating technical diagrams and incident reports.\n\u2022 Mentorship: Willingness to train and provide remediation steps for junior technical staff.",
        "word_count": 263
      }
    ],
    "urls": []
  },
  "rejected": false,
  "rejection_reason": null,
  "run_id": "bdbc9288-f20a-423d-a1fc-389a1cc5eebf",
  "stage3_signals": {
    "alias_found": true,
    "alias_match_roles": [
      {
        "display_name": "Cybersecurity Engineer",
        "kra_matches": null,
        "matched_count": null,
        "matched_skills": null,
        "role_id": 5,
        "score": 1.0,
        "slug": "cybersecurity-engineer",
        "total_count": null
      }
    ],
    "kra_match_roles": [
      {
        "display_name": "Cybersecurity Engineer",
        "kra_matches": [
          {
            "kra_text": "Designs and implements security controls including SIEM integration, endpoint detection and response, identity management, and firewall rule management.",
            "sentence": "Security \u0026 Access: Manage next-generation firewalls (NGFW), VPNs, and Network Access Control (NAC) systems.",
            "similarity": 0.6154
          },
          {
            "kra_text": "Leads security incident response investigations including forensic analysis, malware triage, containment actions, and post-incident remediation coordination.",
            "sentence": "Incident Management: Act as the technical escalation point for network incidents.",
            "similarity": 0.5886
          },
          {
            "kra_text": "Hardens system and service configurations, applies security baselines, removes unnecessary services, and reduces attack surface across infrastructure.",
            "sentence": "Lead security hardening and firewall rule optimization.",
            "similarity": 0.5774
          }
        ],
        "matched_count": null,
        "matched_skills": null,
        "role_id": 5,
        "score": 0.5938,
        "slug": "cybersecurity-engineer",
        "total_count": null
      },
      {
        "display_name": "Backend Developer",
        "kra_matches": [
          {
            "kra_text": "Investigates and resolves production incidents, API bugs, and service degradation through root cause analysis, hotfixes, and post-mortems.",
            "sentence": "Lead the resolution of critical outages and perform thorough Root Cause Analysis (RCA).",
            "similarity": 0.6269
          },
          {
            "kra_text": "Investigates and resolves production incidents, API bugs, and service degradation through root cause analysis, hotfixes, and post-mortems.",
            "sentence": "Incident Management: Act as the technical escalation point for network incidents.",
            "similarity": 0.5112
          },
          {
            "kra_text": "Identifies and resolves backend performance bottlenecks through query optimization, indexing strategies, connection pooling, and distributed caching with Redis.",
            "sentence": "Optimization: Proactively tune network bandwidth, redundancy, and failover mechanisms to ensure 99.9% uptime.",
            "similarity": 0.4808
          }
        ],
        "matched_count": null,
        "matched_skills": null,
        "role_id": 1,
        "score": 0.5396,
        "slug": "backend-engineer",
        "total_count": null
      },
      {
        "display_name": "DevOps Engineer",
        "kra_matches": [
          {
            "kra_text": "Responds to deployment failures, infrastructure incidents, and environment misconfiguration issues to restore service availability and prevent recurrence.",
            "sentence": "Lead the resolution of critical outages and perform thorough Root Cause Analysis (RCA).",
            "similarity": 0.5521
          },
          {
            "kra_text": "Responds to deployment failures, infrastructure incidents, and environment misconfiguration issues to restore service availability and prevent recurrence.",
            "sentence": "Incident Management: Act as the technical escalation point for network incidents.",
            "similarity": 0.5467
          },
          {
            "kra_text": "Writes runbooks, deployment guides, incident playbooks, and infrastructure documentation to support operations and knowledge sharing.",
            "sentence": "Documentation: Maintain high-quality network diagrams, configuration backups, and knowledge base articles.",
            "similarity": 0.5142
          }
        ],
        "matched_count": null,
        "matched_skills": null,
        "role_id": 10,
        "score": 0.5377,
        "slug": "devops-engineer",
        "total_count": null
      },
      {
        "display_name": "Cloud Security Engineer",
        "kra_matches": [
          {
            "kra_text": "Implements cloud network security controls including security groups, NACLs, VPC service controls, WAF rules, and private service endpoints.",
            "sentence": "Security \u0026 Access: Manage next-generation firewalls (NGFW), VPNs, and Network Access Control (NAC) systems.",
            "similarity": 0.6037
          },
          {
            "kra_text": "Supports cloud security incident response including forensic log analysis, containment procedures, and post-incident remediation for cloud-based breaches.",
            "sentence": "Incident Management: Act as the technical escalation point for network incidents.",
            "similarity": 0.4905
          },
          {
            "kra_text": "Reviews cloud infrastructure-as-code configurations for security misconfigurations and implements CIS Benchmark hardening baselines using CSPM tools.",
            "sentence": "Lead security hardening and firewall rule optimization.",
            "similarity": 0.4825
          }
        ],
        "matched_count": null,
        "matched_skills": null,
        "role_id": 23,
        "score": 0.5256,
        "slug": "cloud-security-engineer",
        "total_count": null
      },
      {
        "display_name": "Cloud Architect",
        "kra_matches": [
          {
            "kra_text": "Designs multi-region and multi-availability-zone cloud infrastructure architectures for high availability, fault tolerance, and horizontal scalability.",
            "sentence": "Optimization: Proactively tune network bandwidth, redundancy, and failover mechanisms to ensure 99.9% uptime.",
            "similarity": 0.5195
          },
          {
            "kra_text": "Designs IAM policies, service control policies, VPC segmentation, private endpoints, and zero-trust network access boundaries for cloud environments.",
            "sentence": "Security \u0026 Access: Manage next-generation firewalls (NGFW), VPNs, and Network Access Control (NAC) systems.",
            "similarity": 0.518
          },
          {
            "kra_text": "Conducts architecture reviews, approves technical design documents, and guides engineering teams through cloud migration and modernization projects.",
            "sentence": "Operational Excellence: Develop Standard Operating Procedures (SOPs) for L1/L2 teams and lead the review/execution of Network Change Requests (CRs).",
            "similarity": 0.446
          }
        ],
        "matched_count": null,
        "matched_skills": null,
        "role_id": 9,
        "score": 0.4945,
        "slug": "cloud-architect",
        "total_count": null
      }
    ],
    "skill_match_roles": [
      {
        "display_name": "DevOps Engineer",
        "kra_matches": null,
        "matched_count": 2,
        "matched_skills": [
          "DNS",
          "SOPs"
        ],
        "role_id": 10,
        "score": 0.087,
        "slug": "devops-engineer",
        "total_count": 23
      },
      {
        "display_name": "Cybersecurity Engineer",
        "kra_matches": null,
        "matched_count": 1,
        "matched_skills": [
          "VPN"
        ],
        "role_id": 5,
        "score": 0.0435,
        "slug": "cybersecurity-engineer",
        "total_count": 23
      },
      {
        "display_name": "Cloud Architect",
        "kra_matches": null,
        "matched_count": 1,
        "matched_skills": [
          "DNS"
        ],
        "role_id": 9,
        "score": 0.0435,
        "slug": "cloud-architect",
        "total_count": 23
      },
      {
        "display_name": "ML Ops Engineer",
        "kra_matches": null,
        "matched_count": 1,
        "matched_skills": [
          "SOPs"
        ],
        "role_id": 16,
        "score": 0.0435,
        "slug": "ml-ops-engineer",
        "total_count": 23
      },
      {
        "display_name": "Cloud Security Engineer",
        "kra_matches": null,
        "matched_count": 1,
        "matched_skills": [
          "VPN"
        ],
        "role_id": 23,
        "score": 0.0435,
        "slug": "cloud-security-engineer",
        "total_count": 23
      }
    ]
  },
  "stage4_decision": {
    "alias_collision_detected": false,
    "case": "B",
    "chosen_role": {
      "display_name": "Cybersecurity Engineer",
      "kra_matches": null,
      "matched_count": null,
      "matched_skills": null,
      "role_id": 5,
      "score": 0.5938,
      "slug": "cybersecurity-engineer",
      "total_count": null
    },
    "confidence": 0.5938,
    "is_new_role": false,
    "llm2_fired": false,
    "llm2_reasoning": null,
    "new_role_display_name": null,
    "new_role_slug": null,
    "queued": false,
    "reasoning": "KRA-led classification on cybersecurity-engineer (skill weak, KRA 0.59)"
  },
  "stage5_updates": {
    "centroid_n_after": 5,
    "centroid_updated": true,
    "collision_log_id": null,
    "new_kra_attached": null,
    "new_skills_attached": [
      {
        "is_primary": true,
        "queue_id": 2670,
        "role_display_name": "Cybersecurity Engineer",
        "role_slug": "cybersecurity-engineer",
        "skill_name": "LAN",
        "status": "pending"
      },
      {
        "is_primary": true,
        "queue_id": 2671,
        "role_display_name": "Cybersecurity Engineer",
        "role_slug": "cybersecurity-engineer",
        "skill_name": "WAN",
        "status": "pending"
      },
      {
        "is_primary": true,
        "queue_id": 2672,
        "role_display_name": "Cybersecurity Engineer",
        "role_slug": "cybersecurity-engineer",
        "skill_name": "WLAN",
        "status": "pending"
      },
      {
        "is_primary": true,
        "queue_id": 2673,
        "role_display_name": "Cybersecurity Engineer",
        "role_slug": "cybersecurity-engineer",
        "skill_name": "SD-WAN",
        "status": "pending"
      },
      {
        "is_primary": true,
        "queue_id": 2674,
        "role_display_name": "Cybersecurity Engineer",
        "role_slug": "cybersecurity-engineer",
        "skill_name": "Fortinet",
        "status": "pending"
      },
      {
        "is_primary": true,
        "queue_id": 2675,
        "role_display_name": "Cybersecurity Engineer",
        "role_slug": "cybersecurity-engineer",
        "skill_name": "BGP",
        "status": "pending"
      },
      {
        "is_primary": true,
        "queue_id": 2676,
        "role_display_name": "Cybersecurity Engineer",
        "role_slug": "cybersecurity-engineer",
        "skill_name": "OSPF",
        "status": "pending"
      },
      {
        "is_primary": true,
        "queue_id": 2677,
        "role_display_name": "Cybersecurity Engineer",
        "role_slug": "cybersecurity-engineer",
        "skill_name": "NGFW",
        "status": "pending"
      },
      {
        "is_primary": true,
        "queue_id": 2678,
        "role_display_name": "Cybersecurity Engineer",
        "role_slug": "cybersecurity-engineer",
        "skill_name": "NAC",
        "status": "pending"
      },
      {
        "is_primary": true,
        "queue_id": 2679,
        "role_display_name": "Cybersecurity Engineer",
        "role_slug": "cybersecurity-engineer",
        "skill_name": "RCA",
        "status": "pending"
      },
      {
        "is_primary": true,
        "queue_id": 2680,
        "role_display_name": "Cybersecurity Engineer",
        "role_slug": "cybersecurity-engineer",
        "skill_name": "Cisco",
        "status": "pending"
      },
      {
        "is_primary": true,
        "queue_id": 2681,
        "role_display_name": "Cybersecurity Engineer",
        "role_slug": "cybersecurity-engineer",
        "skill_name": "BGP4",
        "status": "pending"
      },
      {
        "is_primary": true,
        "queue_id": 2682,
        "role_display_name": "Cybersecurity Engineer",
        "role_slug": "cybersecurity-engineer",
        "skill_name": "OSI model",
        "status": "pending"
      },
      {
        "is_primary": true,
        "queue_id": 2683,
        "role_display_name": "Cybersecurity Engineer",
        "role_slug": "cybersecurity-engineer",
        "skill_name": "TCP/IP",
        "status": "pending"
      },
      {
        "is_primary": true,
        "queue_id": 2684,
        "role_display_name": "Cybersecurity Engineer",
        "role_slug": "cybersecurity-engineer",
        "skill_name": "NAT/PAT",
        "status": "pending"
      },
      {
        "is_primary": true,
        "queue_id": 2685,
        "role_display_name": "Cybersecurity Engineer",
        "role_slug": "cybersecurity-engineer",
        "skill_name": "DHCP",
        "status": "pending"
      },
      {
        "is_primary": true,
        "queue_id": 2686,
        "role_display_name": "Cybersecurity Engineer",
        "role_slug": "cybersecurity-engineer",
        "skill_name": "TACACS",
        "status": "pending"
      },
      {
        "is_primary": true,
        "queue_id": 2687,
        "role_display_name": "Cybersecurity Engineer",
        "role_slug": "cybersecurity-engineer",
        "skill_name": "Wireshark",
        "status": "pending"
      },
      {
        "is_primary": true,
        "queue_id": 2688,
        "role_display_name": "Cybersecurity Engineer",
        "role_slug": "cybersecurity-engineer",
        "skill_name": "Network Management Systems",
        "status": "pending"
      },
      {
        "is_primary": true,
        "queue_id": 2689,
        "role_display_name": "Cybersecurity Engineer",
        "role_slug": "cybersecurity-engineer",
        "skill_name": "ITIL",
        "status": "pending"
      },
      {
        "is_primary": false,
        "queue_id": 2690,
        "role_display_name": "Cybersecurity Engineer",
        "role_slug": "cybersecurity-engineer",
        "skill_name": "Change Management",
        "status": "pending"
      }
    ],
    "queue_entry_id": null,
    "v3_pipeline_triggered": false,
    "v3_role_slug": null,
    "v3_run_id": null
  }
}
API 2 — extract-details
{
  "alias_matches": [
    {
      "alias_persist_skipped_reason": "alias_text already exists for this canonical skill",
      "alias_persisted": false,
      "existing_alias_id": 620,
      "existing_alias_text": "VPN",
      "input_term": "VPN",
      "matched_canonical": {
        "category_id": 10,
        "display_name": "VPN",
        "id": 304,
        "is_also_category": false,
        "is_extractable": true,
        "skill_nature": "PROTOCOL",
        "slug": "vpn",
        "sub_category_id": 1373,
        "typical_lifespan": "EVERGREEN",
        "volatility": "STABLE"
      },
      "matched_via": "alias"
    },
    {
      "alias_persist_skipped_reason": "alias_text already exists for this canonical skill",
      "alias_persisted": false,
      "existing_alias_id": 1459,
      "existing_alias_text": "SOPs",
      "input_term": "SOPs",
      "matched_canonical": {
        "category_id": 8,
        "display_name": "SOPs",
        "id": 897,
        "is_also_category": false,
        "is_extractable": true,
        "skill_nature": "METHODOLOGY",
        "slug": "sops",
        "sub_category_id": 629,
        "typical_lifespan": "EVERGREEN",
        "volatility": "STABLE"
      },
      "matched_via": "alias"
    },
    {
      "alias_persist_skipped_reason": "alias_text already exists for this canonical skill",
      "alias_persisted": false,
      "existing_alias_id": 1285,
      "existing_alias_text": "DNS",
      "input_term": "DNS",
      "matched_canonical": {
        "category_id": 10,
        "display_name": "DNS",
        "id": 740,
        "is_also_category": false,
        "is_extractable": true,
        "skill_nature": "PROTOCOL",
        "slug": "dns",
        "sub_category_id": 561,
        "typical_lifespan": "EVERGREEN",
        "volatility": "STABLE"
      },
      "matched_via": "alias"
    }
  ],
  "candidate_roles": [
    {
      "display_name": "Cloud Security Engineer",
      "id": 23,
      "rationale": null,
      "role_archetype": null,
      "slug": "cloud-security-engineer",
      "source": "db"
    },
    {
      "display_name": "Cybersecurity Engineer",
      "id": 5,
      "rationale": null,
      "role_archetype": null,
      "slug": "cybersecurity-engineer",
      "source": "db"
    },
    {
      "display_name": "ML Ops Engineer",
      "id": 16,
      "rationale": null,
      "role_archetype": null,
      "slug": "ml-ops-engineer",
      "source": "db"
    },
    {
      "display_name": "DevOps Engineer",
      "id": 10,
      "rationale": null,
      "role_archetype": null,
      "slug": "devops-engineer",
      "source": "db"
    },
    {
      "display_name": "Cloud Architect",
      "id": 9,
      "rationale": null,
      "role_archetype": null,
      "slug": "cloud-architect",
      "source": "db"
    }
  ],
  "chosen_role": {
    "display_name": "Cybersecurity Engineer",
    "id": 5,
    "rationale": "This role covers critical skills such as VPN, LAN, and network security necessary for the position.",
    "role_archetype": null,
    "slug": "cybersecurity-engineer",
    "source": "db"
  },
  "dimensions": [
    {
      "dimension": {
        "difficulty_hint": "well_known",
        "display_name": "Cloud Network Security Controls",
        "id": 242,
        "rationale": "Controls and techniques for protecting cloud traffic, remote access, and boundary exposure. This includes segmentation, firewalling, private connectivity, and cloud-native network inspection patterns.",
        "slug": "cloud-network-security-controls",
        "source": "db"
      },
      "input_skill": "VPN",
      "llm_role": null,
      "roles_from_db": [
        {
          "display_name": "Cloud Security Engineer",
          "id": 23,
          "rationale": null,
          "role_archetype": null,
          "slug": "cloud-security-engineer",
          "source": "db"
        }
      ]
    },
    {
      "dimension": {
        "difficulty_hint": "well_known",
        "display_name": "Network Security Controls",
        "id": 60,
        "rationale": "Controls and techniques for protecting network traffic, remote access, and perimeter exposure. This cluster is coherent because it covers the protocols and enforcement points used to reduce lateral movement and unauthorized access.",
        "slug": "network-security-controls",
        "source": "db"
      },
      "input_skill": "VPN",
      "llm_role": null,
      "roles_from_db": [
        {
          "display_name": "Cybersecurity Engineer",
          "id": 5,
          "rationale": null,
          "role_archetype": null,
          "slug": "cybersecurity-engineer",
          "source": "db"
        }
      ]
    },
    {
      "dimension": {
        "difficulty_hint": "well_known",
        "display_name": "Operational Automation and Runbooks",
        "id": 222,
        "rationale": "Automation patterns, runbooks, and procedures used to keep model operations repeatable and recoverable. This cluster covers the day-to-day operational glue that turns release policy into executable steps.",
        "slug": "operational-automation-and-runbooks",
        "source": "db"
      },
      "input_skill": "SOPs",
      "llm_role": null,
      "roles_from_db": [
        {
          "display_name": "ML Ops Engineer",
          "id": 16,
          "rationale": null,
          "role_archetype": null,
          "slug": "ml-ops-engineer",
          "source": "db"
        }
      ]
    },
    {
      "dimension": {
        "difficulty_hint": "well_known",
        "display_name": "Release Documentation and Runbooks",
        "id": 158,
        "rationale": "Operational documents that explain how to deploy, recover, and hand off systems safely. This is a coherent dimension because DevOps work depends on repeatable procedures and clear escalation paths.",
        "slug": "release-documentation-and-runbooks",
        "source": "db"
      },
      "input_skill": "SOPs",
      "llm_role": null,
      "roles_from_db": [
        {
          "display_name": "DevOps Engineer",
          "id": 10,
          "rationale": null,
          "role_archetype": null,
          "slug": "devops-engineer",
          "source": "db"
        }
      ]
    },
    {
      "dimension": {
        "difficulty_hint": "well_known",
        "display_name": "Cloud Networking and Connectivity",
        "id": 153,
        "rationale": "Network primitives and connectivity patterns used to expose services and connect environments. DevOps engineers need this to troubleshoot deployment reachability, ingress, DNS, and environment-to-environment communication.",
        "slug": "cloud-networking-and-connectivity",
        "source": "db"
      },
      "input_skill": "DNS",
      "llm_role": null,
      "roles_from_db": [
        {
          "display_name": "DevOps Engineer",
          "id": 10,
          "rationale": null,
          "role_archetype": null,
          "slug": "devops-engineer",
          "source": "db"
        }
      ]
    },
    {
      "dimension": {
        "difficulty_hint": "well_known",
        "display_name": "Cloud Networking and Edge Connectivity",
        "id": 136,
        "rationale": "Network architecture for cloud environments, including segmentation, connectivity, and ingress/egress patterns. Cloud Architects use this to define trust boundaries and workload placement standards.",
        "slug": "cloud-networking-and-edge-connectivity",
        "source": "db"
      },
      "input_skill": "DNS",
      "llm_role": null,
      "roles_from_db": [
        {
          "display_name": "Cloud Architect",
          "id": 9,
          "rationale": null,
          "role_archetype": null,
          "slug": "cloud-architect",
          "source": "db"
        }
      ]
    }
  ],
  "input_final_skills": [
    "LAN",
    "WAN",
    "WLAN",
    "SD-WAN",
    "Fortinet",
    "BGP",
    "OSPF",
    "NGFW",
    "VPN",
    "NAC",
    "RCA",
    "SOPs",
    "Cisco",
    "BGP4",
    "OSI model",
    "TCP/IP",
    "NAT/PAT",
    "DNS",
    "DHCP",
    "TACACS",
    "Wireshark",
    "Network Management Systems",
    "ITIL",
    "Change Management"
  ],
  "input_llm_skills": [
    "LAN",
    "WAN",
    "WLAN",
    "SD-WAN",
    "Fortinet",
    "BGP",
    "OSPF",
    "NGFW",
    "VPN",
    "NAC",
    "RCA",
    "SOPs",
    "Cisco",
    "BGP4",
    "OSI model",
    "TCP/IP",
    "NAT/PAT",
    "DNS",
    "DHCP",
    "TACACS",
    "Wireshark",
    "Network Management Systems",
    "ITIL",
    "Change Management"
  ],
  "new_aliases_persisted": 0,
  "run_id": "bdbc9288-f20a-423d-a1fc-389a1cc5eebf",
  "skills_detail": [
    {
      "aliases_in_db": [],
      "canonical": null,
      "dimensions": [],
      "input_skill": "LAN",
      "matched_via": null,
      "new_alias_persisted": false,
      "new_alias_text": null,
      "new_skill_meta": {
        "derived": {
          "category": "Networking",
          "skill_nature": "CONCEPT",
          "sub_category": "general",
          "typical_lifespan": "EVERGREEN",
          "version_strategy": "UNVERSIONED",
          "volatility": "STABLE"
        },
        "enrichment": null,
        "keep_log": [],
        "locked_dimensions": [],
        "merge_log": [],
        "placed": null,
        "relationships": null,
        "skill_id": "lan",
        "split_log": [],
        "typed": null,
        "warnings": []
      },
      "source_tag": "llm",
      "was_in_llm_skills": true
    },
    {
      "aliases_in_db": [],
      "canonical": null,
      "dimensions": [],
      "input_skill": "WAN",
      "matched_via": null,
      "new_alias_persisted": false,
      "new_alias_text": null,
      "new_skill_meta": {
        "derived": {
          "category": "Networking",
          "skill_nature": "CONCEPT",
          "sub_category": "general",
          "typical_lifespan": "EVERGREEN",
          "version_strategy": "UNVERSIONED",
          "volatility": "STABLE"
        },
        "enrichment": null,
        "keep_log": [],
        "locked_dimensions": [],
        "merge_log": [],
        "placed": null,
        "relationships": null,
        "skill_id": "wan",
        "split_log": [],
        "typed": null,
        "warnings": []
      },
      "source_tag": "llm",
      "was_in_llm_skills": true
    },
    {
      "aliases_in_db": [],
      "canonical": null,
      "dimensions": [],
      "input_skill": "WLAN",
      "matched_via": null,
      "new_alias_persisted": false,
      "new_alias_text": null,
      "new_skill_meta": {
        "derived": {
          "category": "Networking",
          "skill_nature": "CONCEPT",
          "sub_category": "general",
          "typical_lifespan": "EVERGREEN",
          "version_strategy": "UNVERSIONED",
          "volatility": "STABLE"
        },
        "enrichment": null,
        "keep_log": [],
        "locked_dimensions": [],
        "merge_log": [],
        "placed": null,
        "relationships": null,
        "skill_id": "wlan",
        "split_log": [],
        "typed": null,
        "warnings": []
      },
      "source_tag": "llm",
      "was_in_llm_skills": true
    },
    {
      "aliases_in_db": [],
      "canonical": null,
      "dimensions": [],
      "input_skill": "SD-WAN",
      "matched_via": null,
      "new_alias_persisted": false,
      "new_alias_text": null,
      "new_skill_meta": {
        "derived": {
          "category": "Networking",
          "skill_nature": "CONCEPT",
          "sub_category": "general",
          "typical_lifespan": "MULTI_YEAR",
          "version_strategy": "UNVERSIONED",
          "volatility": "MEDIUM"
        },
        "enrichment": null,
        "keep_log": [],
        "locked_dimensions": [],
        "merge_log": [],
        "placed": null,
        "relationships": null,
        "skill_id": "sd-wan",
        "split_log": [],
        "typed": null,
        "warnings": []
      },
      "source_tag": "llm",
      "was_in_llm_skills": true
    },
    {
      "aliases_in_db": [],
      "canonical": null,
      "dimensions": [],
      "input_skill": "Fortinet",
      "matched_via": null,
      "new_alias_persisted": false,
      "new_alias_text": null,
      "new_skill_meta": {
        "derived": {
          "category": "Security Tools",
          "skill_nature": "TOOL",
          "sub_category": "general",
          "typical_lifespan": "MULTI_YEAR",
          "version_strategy": "UNVERSIONED",
          "volatility": "MEDIUM"
        },
        "enrichment": null,
        "keep_log": [],
        "locked_dimensions": [],
        "merge_log": [],
        "placed": null,
        "relationships": null,
        "skill_id": "fortinet",
        "split_log": [],
        "typed": null,
        "warnings": []
      },
      "source_tag": "llm",
      "was_in_llm_skills": true
    },
    {
      "aliases_in_db": [],
      "canonical": null,
      "dimensions": [],
      "input_skill": "BGP",
      "matched_via": null,
      "new_alias_persisted": false,
      "new_alias_text": null,
      "new_skill_meta": {
        "derived": {
          "category": "Networking",
          "skill_nature": "CONCEPT",
          "sub_category": "general",
          "typical_lifespan": "EVERGREEN",
          "version_strategy": "UNVERSIONED",
          "volatility": "STABLE"
        },
        "enrichment": null,
        "keep_log": [],
        "locked_dimensions": [],
        "merge_log": [],
        "placed": null,
        "relationships": null,
        "skill_id": "bgp",
        "split_log": [],
        "typed": null,
        "warnings": []
      },
      "source_tag": "llm",
      "was_in_llm_skills": true
    },
    {
      "aliases_in_db": [],
      "canonical": null,
      "dimensions": [],
      "input_skill": "OSPF",
      "matched_via": null,
      "new_alias_persisted": false,
      "new_alias_text": null,
      "new_skill_meta": {
        "derived": {
          "category": "Networking",
          "skill_nature": "CONCEPT",
          "sub_category": "general",
          "typical_lifespan": "EVERGREEN",
          "version_strategy": "UNVERSIONED",
          "volatility": "STABLE"
        },
        "enrichment": null,
        "keep_log": [],
        "locked_dimensions": [],
        "merge_log": [],
        "placed": null,
        "relationships": null,
        "skill_id": "ospf",
        "split_log": [],
        "typed": null,
        "warnings": []
      },
      "source_tag": "llm",
      "was_in_llm_skills": true
    },
    {
      "aliases_in_db": [],
      "canonical": null,
      "dimensions": [],
      "input_skill": "NGFW",
      "matched_via": null,
      "new_alias_persisted": false,
      "new_alias_text": null,
      "new_skill_meta": {
        "derived": {
          "category": "Security Tools",
          "skill_nature": "CONCEPT",
          "sub_category": "general",
          "typical_lifespan": "MULTI_YEAR",
          "version_strategy": "UNVERSIONED",
          "volatility": "MEDIUM"
        },
        "enrichment": null,
        "keep_log": [],
        "locked_dimensions": [],
        "merge_log": [],
        "placed": null,
        "relationships": null,
        "skill_id": "ngfw",
        "split_log": [],
        "typed": null,
        "warnings": []
      },
      "source_tag": "llm",
      "was_in_llm_skills": true
    },
    {
      "aliases_in_db": [
        {
          "alias_text": "VPN",
          "alias_type": "CANONICAL",
          "id": 620,
          "is_primary": true,
          "match_strategy": "CASE_INSENSITIVE"
        }
      ],
      "canonical": {
        "category_id": 10,
        "display_name": "VPN",
        "id": 304,
        "is_also_category": false,
        "is_extractable": true,
        "skill_nature": "PROTOCOL",
        "slug": "vpn",
        "sub_category_id": 1373,
        "typical_lifespan": "EVERGREEN",
        "volatility": "STABLE"
      },
      "dimensions": [
        {
          "dimension": {
            "difficulty_hint": "well_known",
            "display_name": "Cloud Network Security Controls",
            "id": 242,
            "rationale": "Controls and techniques for protecting cloud traffic, remote access, and boundary exposure. This includes segmentation, firewalling, private connectivity, and cloud-native network inspection patterns.",
            "slug": "cloud-network-security-controls",
            "source": "db"
          },
          "input_skill": "VPN",
          "llm_role": null,
          "roles_from_db": [
            {
              "display_name": "Cloud Security Engineer",
              "id": 23,
              "rationale": null,
              "role_archetype": null,
              "slug": "cloud-security-engineer",
              "source": "db"
            }
          ]
        },
        {
          "dimension": {
            "difficulty_hint": "well_known",
            "display_name": "Network Security Controls",
            "id": 60,
            "rationale": "Controls and techniques for protecting network traffic, remote access, and perimeter exposure. This cluster is coherent because it covers the protocols and enforcement points used to reduce lateral movement and unauthorized access.",
            "slug": "network-security-controls",
            "source": "db"
          },
          "input_skill": "VPN",
          "llm_role": null,
          "roles_from_db": [
            {
              "display_name": "Cybersecurity Engineer",
              "id": 5,
              "rationale": null,
              "role_archetype": null,
              "slug": "cybersecurity-engineer",
              "source": "db"
            }
          ]
        }
      ],
      "input_skill": "VPN",
      "matched_via": "alias",
      "new_alias_persisted": false,
      "new_alias_text": null,
      "new_skill_meta": null,
      "source_tag": "db",
      "was_in_llm_skills": true
    },
    {
      "aliases_in_db": [],
      "canonical": null,
      "dimensions": [],
      "input_skill": "NAC",
      "matched_via": null,
      "new_alias_persisted": false,
      "new_alias_text": null,
      "new_skill_meta": {
        "derived": {
          "category": "Security Tools",
          "skill_nature": "CONCEPT",
          "sub_category": "general",
          "typical_lifespan": "MULTI_YEAR",
          "version_strategy": "UNVERSIONED",
          "volatility": "MEDIUM"
        },
        "enrichment": null,
        "keep_log": [],
        "locked_dimensions": [],
        "merge_log": [],
        "placed": null,
        "relationships": null,
        "skill_id": "nac",
        "split_log": [],
        "typed": null,
        "warnings": []
      },
      "source_tag": "llm",
      "was_in_llm_skills": true
    },
    {
      "aliases_in_db": [],
      "canonical": null,
      "dimensions": [],
      "input_skill": "RCA",
      "matched_via": null,
      "new_alias_persisted": false,
      "new_alias_text": null,
      "new_skill_meta": {
        "derived": {
          "category": "Soft Skills",
          "skill_nature": "PRACTICE",
          "sub_category": "general",
          "typical_lifespan": "EVERGREEN",
          "version_strategy": "UNVERSIONED",
          "volatility": "STABLE"
        },
        "enrichment": null,
        "keep_log": [],
        "locked_dimensions": [],
        "merge_log": [],
        "placed": null,
        "relationships": null,
        "skill_id": "rca",
        "split_log": [],
        "typed": null,
        "warnings": []
      },
      "source_tag": "llm",
      "was_in_llm_skills": true
    },
    {
      "aliases_in_db": [
        {
          "alias_text": "SOPs",
          "alias_type": "CANONICAL",
          "id": 1459,
          "is_primary": true,
          "match_strategy": "CASE_INSENSITIVE"
        }
      ],
      "canonical": {
        "category_id": 8,
        "display_name": "SOPs",
        "id": 897,
        "is_also_category": false,
        "is_extractable": true,
        "skill_nature": "METHODOLOGY",
        "slug": "sops",
        "sub_category_id": 629,
        "typical_lifespan": "EVERGREEN",
        "volatility": "STABLE"
      },
      "dimensions": [
        {
          "dimension": {
            "difficulty_hint": "well_known",
            "display_name": "Operational Automation and Runbooks",
            "id": 222,
            "rationale": "Automation patterns, runbooks, and procedures used to keep model operations repeatable and recoverable. This cluster covers the day-to-day operational glue that turns release policy into executable steps.",
            "slug": "operational-automation-and-runbooks",
            "source": "db"
          },
          "input_skill": "SOPs",
          "llm_role": null,
          "roles_from_db": [
            {
              "display_name": "ML Ops Engineer",
              "id": 16,
              "rationale": null,
              "role_archetype": null,
              "slug": "ml-ops-engineer",
              "source": "db"
            }
          ]
        },
        {
          "dimension": {
            "difficulty_hint": "well_known",
            "display_name": "Release Documentation and Runbooks",
            "id": 158,
            "rationale": "Operational documents that explain how to deploy, recover, and hand off systems safely. This is a coherent dimension because DevOps work depends on repeatable procedures and clear escalation paths.",
            "slug": "release-documentation-and-runbooks",
            "source": "db"
          },
          "input_skill": "SOPs",
          "llm_role": null,
          "roles_from_db": [
            {
              "display_name": "DevOps Engineer",
              "id": 10,
              "rationale": null,
              "role_archetype": null,
              "slug": "devops-engineer",
              "source": "db"
            }
          ]
        }
      ],
      "input_skill": "SOPs",
      "matched_via": "alias",
      "new_alias_persisted": false,
      "new_alias_text": null,
      "new_skill_meta": null,
      "source_tag": "db",
      "was_in_llm_skills": true
    },
    {
      "aliases_in_db": [],
      "canonical": null,
      "dimensions": [],
      "input_skill": "Cisco",
      "matched_via": null,
      "new_alias_persisted": false,
      "new_alias_text": null,
      "new_skill_meta": {
        "derived": {
          "category": "Networking",
          "skill_nature": "TOOL",
          "sub_category": "general",
          "typical_lifespan": "MULTI_YEAR",
          "version_strategy": "UNVERSIONED",
          "volatility": "MEDIUM"
        },
        "enrichment": null,
        "keep_log": [],
        "locked_dimensions": [],
        "merge_log": [],
        "placed": null,
        "relationships": null,
        "skill_id": "cisco",
        "split_log": [],
        "typed": null,
        "warnings": []
      },
      "source_tag": "llm",
      "was_in_llm_skills": true
    },
    {
      "aliases_in_db": [],
      "canonical": null,
      "dimensions": [],
      "input_skill": "BGP4",
      "matched_via": null,
      "new_alias_persisted": false,
      "new_alias_text": null,
      "new_skill_meta": {
        "derived": {
          "category": "Networking",
          "skill_nature": "CONCEPT",
          "sub_category": "general",
          "typical_lifespan": "EVERGREEN",
          "version_strategy": "UNVERSIONED",
          "volatility": "STABLE"
        },
        "enrichment": null,
        "keep_log": [],
        "locked_dimensions": [],
        "merge_log": [],
        "placed": null,
        "relationships": null,
        "skill_id": "bgp4",
        "split_log": [],
        "typed": null,
        "warnings": []
      },
      "source_tag": "llm",
      "was_in_llm_skills": true
    },
    {
      "aliases_in_db": [],
      "canonical": null,
      "dimensions": [],
      "input_skill": "OSI model",
      "matched_via": null,
      "new_alias_persisted": false,
      "new_alias_text": null,
      "new_skill_meta": {
        "derived": {
          "category": "Networking",
          "skill_nature": "CONCEPT",
          "sub_category": "general",
          "typical_lifespan": "EVERGREEN",
          "version_strategy": "UNVERSIONED",
          "volatility": "STABLE"
        },
        "enrichment": null,
        "keep_log": [],
        "locked_dimensions": [],
        "merge_log": [],
        "placed": null,
        "relationships": null,
        "skill_id": "osi-model",
        "split_log": [],
        "typed": null,
        "warnings": []
      },
      "source_tag": "llm",
      "was_in_llm_skills": true
    },
    {
      "aliases_in_db": [],
      "canonical": null,
      "dimensions": [],
      "input_skill": "TCP/IP",
      "matched_via": null,
      "new_alias_persisted": false,
      "new_alias_text": null,
      "new_skill_meta": {
        "derived": {
          "category": "Networking",
          "skill_nature": "CONCEPT",
          "sub_category": "general",
          "typical_lifespan": "EVERGREEN",
          "version_strategy": "UNVERSIONED",
          "volatility": "STABLE"
        },
        "enrichment": null,
        "keep_log": [],
        "locked_dimensions": [],
        "merge_log": [],
        "placed": null,
        "relationships": null,
        "skill_id": "tcp-ip",
        "split_log": [],
        "typed": null,
        "warnings": []
      },
      "source_tag": "llm",
      "was_in_llm_skills": true
    },
    {
      "aliases_in_db": [],
      "canonical": null,
      "dimensions": [],
      "input_skill": "NAT/PAT",
      "matched_via": null,
      "new_alias_persisted": false,
      "new_alias_text": null,
      "new_skill_meta": {
        "derived": {
          "category": "Networking",
          "skill_nature": "CONCEPT",
          "sub_category": "general",
          "typical_lifespan": "EVERGREEN",
          "version_strategy": "UNVERSIONED",
          "volatility": "STABLE"
        },
        "enrichment": null,
        "keep_log": [],
        "locked_dimensions": [],
        "merge_log": [],
        "placed": null,
        "relationships": null,
        "skill_id": "nat-pat",
        "split_log": [],
        "typed": null,
        "warnings": []
      },
      "source_tag": "llm",
      "was_in_llm_skills": true
    },
    {
      "aliases_in_db": [
        {
          "alias_text": "DNS",
          "alias_type": "CANONICAL",
          "id": 1285,
          "is_primary": true,
          "match_strategy": "CASE_INSENSITIVE"
        }
      ],
      "canonical": {
        "category_id": 10,
        "display_name": "DNS",
        "id": 740,
        "is_also_category": false,
        "is_extractable": true,
        "skill_nature": "PROTOCOL",
        "slug": "dns",
        "sub_category_id": 561,
        "typical_lifespan": "EVERGREEN",
        "volatility": "STABLE"
      },
      "dimensions": [
        {
          "dimension": {
            "difficulty_hint": "well_known",
            "display_name": "Cloud Networking and Connectivity",
            "id": 153,
            "rationale": "Network primitives and connectivity patterns used to expose services and connect environments. DevOps engineers need this to troubleshoot deployment reachability, ingress, DNS, and environment-to-environment communication.",
            "slug": "cloud-networking-and-connectivity",
            "source": "db"
          },
          "input_skill": "DNS",
          "llm_role": null,
          "roles_from_db": [
            {
              "display_name": "DevOps Engineer",
              "id": 10,
              "rationale": null,
              "role_archetype": null,
              "slug": "devops-engineer",
              "source": "db"
            }
          ]
        },
        {
          "dimension": {
            "difficulty_hint": "well_known",
            "display_name": "Cloud Networking and Edge Connectivity",
            "id": 136,
            "rationale": "Network architecture for cloud environments, including segmentation, connectivity, and ingress/egress patterns. Cloud Architects use this to define trust boundaries and workload placement standards.",
            "slug": "cloud-networking-and-edge-connectivity",
            "source": "db"
          },
          "input_skill": "DNS",
          "llm_role": null,
          "roles_from_db": [
            {
              "display_name": "Cloud Architect",
              "id": 9,
              "rationale": null,
              "role_archetype": null,
              "slug": "cloud-architect",
              "source": "db"
            }
          ]
        }
      ],
      "input_skill": "DNS",
      "matched_via": "alias",
      "new_alias_persisted": false,
      "new_alias_text": null,
      "new_skill_meta": null,
      "source_tag": "db",
      "was_in_llm_skills": true
    },
    {
      "aliases_in_db": [],
      "canonical": null,
      "dimensions": [],
      "input_skill": "DHCP",
      "matched_via": null,
      "new_alias_persisted": false,
      "new_alias_text": null,
      "new_skill_meta": {
        "derived": {
          "category": "Networking",
          "skill_nature": "CONCEPT",
          "sub_category": "general",
          "typical_lifespan": "EVERGREEN",
          "version_strategy": "UNVERSIONED",
          "volatility": "STABLE"
        },
        "enrichment": null,
        "keep_log": [],
        "locked_dimensions": [],
        "merge_log": [],
        "placed": null,
        "relationships": null,
        "skill_id": "dhcp",
        "split_log": [],
        "typed": null,
        "warnings": []
      },
      "source_tag": "llm",
      "was_in_llm_skills": true
    },
    {
      "aliases_in_db": [],
      "canonical": null,
      "dimensions": [],
      "input_skill": "TACACS",
      "matched_via": null,
      "new_alias_persisted": false,
      "new_alias_text": null,
      "new_skill_meta": {
        "derived": {
          "category": "Networking",
          "skill_nature": "CONCEPT",
          "sub_category": "general",
          "typical_lifespan": "MULTI_YEAR",
          "version_strategy": "UNVERSIONED",
          "volatility": "MEDIUM"
        },
        "enrichment": null,
        "keep_log": [],
        "locked_dimensions": [],
        "merge_log": [],
        "placed": null,
        "relationships": null,
        "skill_id": "tacacs",
        "split_log": [],
        "typed": null,
        "warnings": []
      },
      "source_tag": "llm",
      "was_in_llm_skills": true
    },
    {
      "aliases_in_db": [],
      "canonical": null,
      "dimensions": [],
      "input_skill": "Wireshark",
      "matched_via": null,
      "new_alias_persisted": false,
      "new_alias_text": null,
      "new_skill_meta": {
        "derived": {
          "category": "Network Management Systems",
          "skill_nature": "TOOL",
          "sub_category": "general",
          "typical_lifespan": "MULTI_YEAR",
          "version_strategy": "UNVERSIONED",
          "volatility": "MEDIUM"
        },
        "enrichment": null,
        "keep_log": [],
        "locked_dimensions": [],
        "merge_log": [],
        "placed": null,
        "relationships": null,
        "skill_id": "wireshark",
        "split_log": [],
        "typed": null,
        "warnings": []
      },
      "source_tag": "llm",
      "was_in_llm_skills": true
    },
    {
      "aliases_in_db": [],
      "canonical": null,
      "dimensions": [],
      "input_skill": "Network Management Systems",
      "matched_via": null,
      "new_alias_persisted": false,
      "new_alias_text": null,
      "new_skill_meta": {
        "derived": {
          "category": "Networking",
          "skill_nature": "CONCEPT",
          "sub_category": "general",
          "typical_lifespan": "MULTI_YEAR",
          "version_strategy": "UNVERSIONED",
          "volatility": "MEDIUM"
        },
        "enrichment": null,
        "keep_log": [],
        "locked_dimensions": [],
        "merge_log": [],
        "placed": null,
        "relationships": null,
        "skill_id": "network-management-systems",
        "split_log": [],
        "typed": null,
        "warnings": []
      },
      "source_tag": "llm",
      "was_in_llm_skills": true
    },
    {
      "aliases_in_db": [],
      "canonical": null,
      "dimensions": [],
      "input_skill": "ITIL",
      "matched_via": null,
      "new_alias_persisted": false,
      "new_alias_text": null,
      "new_skill_meta": {
        "derived": {
          "category": "Soft Skills",
          "skill_nature": "PRACTICE",
          "sub_category": "general",
          "typical_lifespan": "MULTI_YEAR",
          "version_strategy": "UNVERSIONED",
          "volatility": "MEDIUM"
        },
        "enrichment": null,
        "keep_log": [],
        "locked_dimensions": [],
        "merge_log": [],
        "placed": null,
        "relationships": null,
        "skill_id": "itil",
        "split_log": [],
        "typed": null,
        "warnings": []
      },
      "source_tag": "llm",
      "was_in_llm_skills": true
    },
    {
      "aliases_in_db": [],
      "canonical": null,
      "dimensions": [],
      "input_skill": "Change Management",
      "matched_via": null,
      "new_alias_persisted": false,
      "new_alias_text": null,
      "new_skill_meta": {
        "derived": {
          "category": "Soft Skills",
          "skill_nature": "PRACTICE",
          "sub_category": "general",
          "typical_lifespan": "MULTI_YEAR",
          "version_strategy": "UNVERSIONED",
          "volatility": "MEDIUM"
        },
        "enrichment": null,
        "keep_log": [],
        "locked_dimensions": [],
        "merge_log": [],
        "placed": null,
        "relationships": null,
        "skill_id": "change-management",
        "split_log": [],
        "typed": null,
        "warnings": []
      },
      "source_tag": "llm",
      "was_in_llm_skills": true
    }
  ],
  "unmatched_skills": [
    "LAN",
    "WAN",
    "WLAN",
    "SD-WAN",
    "Fortinet",
    "BGP",
    "OSPF",
    "NGFW",
    "NAC",
    "RCA",
    "Cisco",
    "BGP4",
    "OSI model",
    "TCP/IP",
    "NAT/PAT",
    "DHCP",
    "TACACS",
    "Wireshark",
    "Network Management Systems",
    "ITIL",
    "Change Management"
  ]
}
API 3 — final-role-output
{
  "chosen_role": {
    "display_name": "Cybersecurity Engineer",
    "id": 5,
    "rationale": "This role covers critical skills such as VPN, LAN, and network security necessary for the position.",
    "role_archetype": null,
    "slug": "cybersecurity-engineer",
    "source": "db"
  },
  "chosen_role_resolution": "in_db",
  "final_input_skills": [
    {
      "skill": "LAN",
      "tag": "new"
    },
    {
      "skill": "WAN",
      "tag": "new"
    },
    {
      "skill": "WLAN",
      "tag": "new"
    },
    {
      "skill": "SD-WAN",
      "tag": "new"
    },
    {
      "skill": "Fortinet",
      "tag": "new"
    },
    {
      "skill": "BGP",
      "tag": "new"
    },
    {
      "skill": "OSPF",
      "tag": "new"
    },
    {
      "skill": "NGFW",
      "tag": "new"
    },
    {
      "skill": "VPN",
      "tag": "in_db"
    },
    {
      "skill": "NAC",
      "tag": "new"
    },
    {
      "skill": "RCA",
      "tag": "new"
    },
    {
      "skill": "SOPs",
      "tag": "in_db"
    },
    {
      "skill": "Cisco",
      "tag": "new"
    },
    {
      "skill": "BGP4",
      "tag": "new"
    },
    {
      "skill": "OSI model",
      "tag": "new"
    },
    {
      "skill": "TCP/IP",
      "tag": "new"
    },
    {
      "skill": "NAT/PAT",
      "tag": "new"
    },
    {
      "skill": "DNS",
      "tag": "in_db"
    },
    {
      "skill": "DHCP",
      "tag": "new"
    },
    {
      "skill": "TACACS",
      "tag": "new"
    },
    {
      "skill": "Wireshark",
      "tag": "new"
    },
    {
      "skill": "Network Management Systems",
      "tag": "new"
    },
    {
      "skill": "ITIL",
      "tag": "new"
    },
    {
      "skill": "Change Management",
      "tag": "new"
    }
  ],
  "llm_cost_api1_usd": null,
  "llm_cost_api2_usd": null,
  "llm_cost_api3_usd": null,
  "llm_cost_total_usd": null,
  "persistence": {
    "items": [
      {
        "chosen_role_id": 5,
        "dimension": {
          "difficulty_hint": "well_known",
          "display_name": "Cloud Network Security Controls",
          "id": 242,
          "rationale": "Controls and techniques for protecting cloud traffic, remote access, and boundary exposure. This includes segmentation, firewalling, private connectivity, and cloud-native network inspection patterns.",
          "slug": "cloud-network-security-controls",
          "source": "db"
        },
        "dimension_id": 242,
        "input_skill": "VPN",
        "llm_role": null,
        "matched_chosen_role": false,
        "outcome_line": "Existing dimension (library) \u00b7 Role\u2194dimension skipped (dimension not under chosen role)",
        "role_dimension_saved": false,
        "roles_from_db": [
          {
            "display_name": "Cloud Security Engineer",
            "id": 23,
            "rationale": null,
            "role_archetype": null,
            "slug": "cloud-security-engineer",
            "source": "db"
          }
        ],
        "skill_dimension_saved": true,
        "skill_id": 304,
        "skill_tag": "in_db",
        "skipped_reason": null
      },
      {
        "chosen_role_id": 5,
        "dimension": {
          "difficulty_hint": "well_known",
          "display_name": "Network Security Controls",
          "id": 60,
          "rationale": "Controls and techniques for protecting network traffic, remote access, and perimeter exposure. This cluster is coherent because it covers the protocols and enforcement points used to reduce lateral movement and unauthorized access.",
          "slug": "network-security-controls",
          "source": "db"
        },
        "dimension_id": 60,
        "input_skill": "VPN",
        "llm_role": null,
        "matched_chosen_role": true,
        "outcome_line": "Existing dimension (library) \u00b7 Role\u2194dimension saved",
        "role_dimension_saved": true,
        "roles_from_db": [
          {
            "display_name": "Cybersecurity Engineer",
            "id": 5,
            "rationale": null,
            "role_archetype": null,
            "slug": "cybersecurity-engineer",
            "source": "db"
          }
        ],
        "skill_dimension_saved": true,
        "skill_id": 304,
        "skill_tag": "in_db",
        "skipped_reason": null
      },
      {
        "chosen_role_id": 5,
        "dimension": {
          "difficulty_hint": "well_known",
          "display_name": "Operational Automation and Runbooks",
          "id": 222,
          "rationale": "Automation patterns, runbooks, and procedures used to keep model operations repeatable and recoverable. This cluster covers the day-to-day operational glue that turns release policy into executable steps.",
          "slug": "operational-automation-and-runbooks",
          "source": "db"
        },
        "dimension_id": 222,
        "input_skill": "SOPs",
        "llm_role": null,
        "matched_chosen_role": false,
        "outcome_line": "Existing dimension (library) \u00b7 Role\u2194dimension skipped (dimension not under chosen role)",
        "role_dimension_saved": false,
        "roles_from_db": [
          {
            "display_name": "ML Ops Engineer",
            "id": 16,
            "rationale": null,
            "role_archetype": null,
            "slug": "ml-ops-engineer",
            "source": "db"
          }
        ],
        "skill_dimension_saved": true,
        "skill_id": 897,
        "skill_tag": "in_db",
        "skipped_reason": null
      },
      {
        "chosen_role_id": 5,
        "dimension": {
          "difficulty_hint": "well_known",
          "display_name": "Release Documentation and Runbooks",
          "id": 158,
          "rationale": "Operational documents that explain how to deploy, recover, and hand off systems safely. This is a coherent dimension because DevOps work depends on repeatable procedures and clear escalation paths.",
          "slug": "release-documentation-and-runbooks",
          "source": "db"
        },
        "dimension_id": 158,
        "input_skill": "SOPs",
        "llm_role": null,
        "matched_chosen_role": false,
        "outcome_line": "Existing dimension (library) \u00b7 Role\u2194dimension skipped (dimension not under chosen role)",
        "role_dimension_saved": false,
        "roles_from_db": [
          {
            "display_name": "DevOps Engineer",
            "id": 10,
            "rationale": null,
            "role_archetype": null,
            "slug": "devops-engineer",
            "source": "db"
          }
        ],
        "skill_dimension_saved": true,
        "skill_id": 897,
        "skill_tag": "in_db",
        "skipped_reason": null
      },
      {
        "chosen_role_id": 5,
        "dimension": {
          "difficulty_hint": "well_known",
          "display_name": "Cloud Networking and Connectivity",
          "id": 153,
          "rationale": "Network primitives and connectivity patterns used to expose services and connect environments. DevOps engineers need this to troubleshoot deployment reachability, ingress, DNS, and environment-to-environment communication.",
          "slug": "cloud-networking-and-connectivity",
          "source": "db"
        },
        "dimension_id": 153,
        "input_skill": "DNS",
        "llm_role": null,
        "matched_chosen_role": false,
        "outcome_line": "Existing dimension (library) \u00b7 Role\u2194dimension skipped (dimension not under chosen role)",
        "role_dimension_saved": false,
        "roles_from_db": [
          {
            "display_name": "DevOps Engineer",
            "id": 10,
            "rationale": null,
            "role_archetype": null,
            "slug": "devops-engineer",
            "source": "db"
          }
        ],
        "skill_dimension_saved": true,
        "skill_id": 740,
        "skill_tag": "in_db",
        "skipped_reason": null
      },
      {
        "chosen_role_id": 5,
        "dimension": {
          "difficulty_hint": "well_known",
          "display_name": "Cloud Networking and Edge Connectivity",
          "id": 136,
          "rationale": "Network architecture for cloud environments, including segmentation, connectivity, and ingress/egress patterns. Cloud Architects use this to define trust boundaries and workload placement standards.",
          "slug": "cloud-networking-and-edge-connectivity",
          "source": "db"
        },
        "dimension_id": 136,
        "input_skill": "DNS",
        "llm_role": null,
        "matched_chosen_role": false,
        "outcome_line": "Existing dimension (library) \u00b7 Role\u2194dimension skipped (dimension not under chosen role)",
        "role_dimension_saved": false,
        "roles_from_db": [
          {
            "display_name": "Cloud Architect",
            "id": 9,
            "rationale": null,
            "role_archetype": null,
            "slug": "cloud-architect",
            "source": "db"
          }
        ],
        "skill_dimension_saved": true,
        "skill_id": 740,
        "skill_tag": "in_db",
        "skipped_reason": null
      }
    ],
    "new_skills_created": 0,
    "role_dimension_saved": 0,
    "skill_dimension_saved": 0,
    "skipped": 0
  },
  "planner_output": null,
  "run_id": "bdbc9288-f20a-423d-a1fc-389a1cc5eebf"
}

LLM Calls

Every model call made for this run, in pipeline order. Click a card to see the model's response.

Loading…