Role Summary:

We are looking for Network Engineers who experienced in designing, implementing, and maintaining enterprise-level network infrastructure for one of our key customers in Singapore. The candidate should possess in-depth knowledge and hands-on experience with the following core technologies and their market alternatives:

(a) Load Balancers (Core):

• F5 BIG-IP: Advanced configuration and management
• Alternative products: Citrix ADC (NetScaler), NGINX Plus, HAProxy
• Experience in application delivery, SSL offloading, and traffic management

(b) Network Routing and Switching (Core):

• Cisco: IOS, Nexus series configuration and troubleshooting
• Alternative products: Juniper Networks, Arista Networks, HPE (Aruba)
• Proficiency in OSPF, BGP, EIGRP, and VLANs

(c) Next-Generation Firewalls (Core):

• Check Point: Configuration, policy management and threat prevention
• Palo Alto Networks: Configuration, policy management and threat prevention
• Alternative products: Fortinet FortiGate, Cisco Firepower
• Proficient in On-Premise firewall equipment and Cloud firewall instances
• Proficient in dynamic routing protocols
• Experience in implementing zero-trust network architectures

(d) Cloud Network Security (Core):

• Azure Firewall: Design and implementation in Azure environments
• Alternative products: AWS Network Firewall, Google Cloud Armor
• Skilled in cloud-native network security best practices

(e) Application Gateways (Core):

• Azure Application Gateway: Configuration and management
• Alternative products: AWS Application Load Balancer, Google Cloud Load Balancing
• Experience in web application firewall (WAF) implementation

(f) Intrusion Detection Prevention Systems (IDPS):

• Implementation and management of IDPS solutions
• Experience with products like Check Point, Palo Alto Networks
• Alternative products: Fortinet, Cisco Firepower, Suricata
• Skilled in configuring, tuning, and maintaining IDPS rules and policies
• Proficient in analyzing IDPS logs and responding to security incidents

(g) Software-Defined Networking (SDN) (Good to have):

• Familiarity with SDN concepts and implementation
• Experience with products like Cisco ACI, VMware NSX, or Juniper Contrail
• Experience in SDA handling the Cisco UCS and Cluster SDN Controllers
• Experience in ACI Configuration and Implementation
• Experience in SD-WAN implementation and policy push through Controller.

(h) Network Monitoring and Analytics (Good to have):

• Proficiency in using network monitoring tools (e.g., SolarWinds, PRTG, Nagios)
• Experience in network performance analysis and optimisation
• Experience in NetFlow tracing and understanding
• VPN and Remote Access Solutions (Good to have):
• Configuring and managing site-to-site and remote access VPNs
• Experience with products like Cisco AnyConnect, Palo Alto GlobalProtect

(j) Network Automation (Good to have):

• Scripting skills for network automation (e.g., Python, Ansible)
• Experience with network orchestration tools

(k) Network Security Protocols (Core):

• Deep understanding of IPSec, SSL/TLS, 802.1x
• Implementation of network access control (NAC) solutions
• Deep understanding and implementation skillset on Tacacs Server.

Required Skills & Qualifications:

• Bachelor’s degree in IT, Computer Science, or related field (or equivalent experience).
• Minimum of 5 years of hands-on experience.
• At least Cisco Certified Network Professional (CCNP)
• Experience with deployment and support of Cisco SDWAN, Cisco ACI, F5 load balancers, Checkpoint or Palo Alto Firewalls
• Experience with performing CIS hardening on network devices, perform security assessment and remediation.
• Familiar with ITIL best practices and processes
• Good knowledge of networking (IP addressing, routing, VLANs)