Industry · Telecom
DevOps for Telecom & Connectivity platforms
Managed DevOps for telecom digital platforms: BSS/OSS cloud migration, Kubernetes at scale, multi-region reliability, and 24/7 senior on-call.
Challenges we solve
- Legacy BSS/OSS modernisation pressure
- Massive scale Kubernetes estates
- Strict availability expectations
- Complex vendor multi-cloud landscapes
Outcomes
What is different about running Telecommunications infrastructure
The constraints below are specific to this sector — they are why a generic platform engagement tends to miss.
What regulates the infrastructure
Providers of public electronic communications networks and publicly available electronic communications services are classed as essential entities, bringing risk-management measures, management-body accountability, supply chain security and a staged incident reporting regime (early warning within 24 hours, notification within 72 hours, final report within one month). The transposition deadline of 17 October 2024 was missed by most member states; the Commission opened infringement proceedings against 23 member states in November 2024 and issued reasoned opinions in May 2025, and as of mid-2026 a small number of states had still not completed transposition — so the binding text and its thresholds are national and differ by country.
The framework governing general authorisation to operate networks and services, spectrum assignment and renewal, universal service, and end-user rights. Its security provisions have largely been displaced by NIS2 for in-scope providers, but its authorisation and spectrum machinery still determines what an operator may deploy and where.
Proposed by the European Commission on 21 January 2026 and not adopted — it is in the ordinary legislative procedure. It would repeal and replace the EECC, the BEREC Regulation and the Radio Spectrum Policy Programme decision outright, and absorb core parts of the Open Internet Regulation and the ePrivacy Directive into a single directly applicable regulation. It includes a single cross-border authorisation ('passport'), copper-to-fibre migration provisions, spectrum management changes and network resilience requirements. Named here only as a pending instrument.
What actually goes wrong here
- Signalling storms: after a cell, core element or software upgrade restarts, all affected subscribers reattach at once and overwhelm the HSS/HLR, IMS registration or AMF, so recovery from a small fault triggers a much larger outage than the fault itself
- Provisioning and OSS/BSS failure, where the radio network is entirely healthy but new activations, SIM swaps, top-ups and prepaid balance checks stop — commercially severe and largely invisible to network-level monitoring
- Emergency call routing or caller-location failure, which is a regulatory incident with mandatory notification and potential enforcement regardless of how few calls were affected
- Submarine cable cuts, where the operational problem is not the loss itself but repair time: cable ships must be contracted and given permits, so repairs in the Red Sea corridor during 2024-2025 ran from about three weeks to five or six months — the February 2024 event severed several systems at once and AAE-1, Seacom and EIG were not restored until mid-to-late 2024 — forcing sustained operation on restoration capacity with degraded latency
- Terrestrial fibre cuts from civil works and road construction, the single most common cause of backhaul loss, whose impact depends entirely on whether the affected route is genuinely diverse or only nominally so
- BGP misconfiguration, route leaks and hijacks propagating an operator's error outward to peers and transit customers
- Signalling-protocol abuse and fraud over SS7, Diameter and SIP — international revenue share fraud, Wangiri, SIM-box bypass and location or SMS interception — which is a direct revenue loss rather than an availability event
- Cell site power failure during grid outages, where the practical limit is battery autonomy and refuelling logistics across thousands of distributed sites, not equipment reliability
- GNSS or PTP timing loss, which desynchronises radio units and degrades or drops service without any component actually failing
- DNS or subscriber-facing platform failure making the network appear down to customers while transport is fully operational
How demand behaves
Continuous 24/7 with a pronounced evening busy hour, and networks are dimensioned on that busy hour rather than on average load. Two load dimensions move independently: bearer traffic, dominated by video streaming and driven by content events, and signalling load, which scales with the number of attached devices and their mobility rather than with bandwidth — so a network can be far from its throughput limit while its signalling plane is saturated. Mass gatherings concentrate both into single cells, and emergencies produce simultaneous nationwide spikes.
Data you will be holding
Operators hold traffic and location metadata, which under the ePrivacy Directive 2002/58/EC is subject to confidentiality and erasure or anonymisation duties distinct from ordinary GDPR personal data. National data retention regimes vary and have been repeatedly narrowed by CJEU case law. Operators are also legally obliged to maintain lawful interception capability, which means production networks carry a mandated, tightly access-controlled interception interface — infrastructure that exists purely for legal reasons and whose compromise is itself a reportable incident.
Architecture this pushes you toward
Telecom infrastructure separates into domains with very different characteristics: RAN, packet core, IMS, transport, and OSS/BSS, with the last resembling ordinary enterprise IT and frequently being the weakest link. The 5G standalone core is cloud-native — containerised network functions on Kubernetes — which has moved traditionally bespoke telco workloads onto general-purpose compute while retaining hard requirements that general-purpose platforms do not usually meet: sub-millisecond determinism, precise clock synchronisation, and geographic N+1 redundancy of core sites. Edge compute sites are constrained by physical estate, power and access rather than by capacity planning.
Availability expectation
Core network elements are engineered to carrier-grade norms, conventionally expressed as 99.999% (about five minutes per year), and this expectation is structural rather than merely contractual: licence conditions typically impose coverage and quality-of-service obligations, and emergency call access carries availability duties in its own right. Enterprise connectivity products are sold with lower, explicitly contracted SLAs backed by service credits.
In Morocco
The sector regulator is the Agence Nationale de Réglementation des Télécommunications (ANRT). The market has three licensed mobile operators — Maroc Telecom (Itissalat Al-Maghrib), Orange Maroc (Médi Telecom) and Inwi (Wana Corporate). ANRT awarded 5G licences to all three in 2025 for a reported total of MAD 2.1 billion, with commercial launch from November 2025 starting in major cities and airports, and coverage commitments of 45% of population by end-2026 rising to 85% by 2030. NIS2 does not apply in Morocco; the domestic regime is Law 05-20 on cybersecurity (promulgated by dahir 1-20-69 of 25 July 2020) with implementing decree 2-21-406 of 15 July 2021, administered by the DGSSI, which imposes information-system security obligations on public bodies and on operators of infrastructure of vital importance — a category that includes telecommunications.
Telecom au Maroc — contexte local
Le marché télécom marocain, régulé par l'ANRT, impose des exigences élevées de disponibilité, de supervision et de traitement de volumes de données importants.
Contraintes spécifiques au Maroc
- Supervision et observabilité à très grande échelle
- Obligations réglementaires de qualité de service
- Traitement de volumes massifs de données d’usage
Cadre réglementaire & conformité
Related
FAQ
Does CloudLink specialise in Telecom?
Yes. We apply multi-cloud DevOps patterns proven in Telecom environments — with a 15-minute CRITICAL SLA and coverage across Morocco, the Middle East, and Europe.
Can you combine managed ops and staffing?
Yes — retainers for platform ownership plus 48-hour staffing shortlists when you need surge capacity.
How do we start?
Book a demo at /demo or run a free audit at /audit. Pricing is transparent at /pricing.
