Job Description

Responsibilities:

Network & Security Infrastructure:


Design, implement, and manage core network infrastructure including routing, switching, load balancers, firewalls, and application gateways. Configure and maintain site-to-site and remote access VPN solutions. Implement cloud network security solutions and web application firewalls.
Security & Compliance:


Perform network security hardening and remediation in accordance with industry best practices (CIS, ITIL). Implement network access control (NAC) and zero-trust network architectures. Monitor and respond to security incidents, intrusion detection, and prevention systems (IDPS).
Leadership & Team Management:


Lead a small technical team (3+ members) in daily operations and strategic projects. Provide mentorship and technical guidance to team members.
Automation & Monitoring (Desirable):


Automate network tasks using Python, Ansible, or similar tools. Monitor network performance and optimize infrastructure using tools like SolarWinds, PRTG, or Nagios.
Core Skills & Expertise


Load Balancers:


Experience with F5 BIG-IP or equivalent solutions. Knowledge in application delivery, SSL offloading, and traffic management.
Network Routing & Switching:


Cisco IOS and Nexus series configuration and troubleshooting. Experience with OSPF, BGP, EIGRP, VLANs, and general IP networking. Familiarity with alternative solutions (Juniper, Arista, HPE/Aruba).
Next-Generation Firewalls & IDPS:


Experience with Check Point, Palo Alto, or equivalent firewalls. Configuring, tuning, and maintaining IDPS solutions and analyzing logs. Cloud Network Security & Application Gateways: Experience with Azure Firewall, Azure Application Gateway, and cloud-native security solutions. Familiarity with AWS or Google Cloud equivalents is a plus. Software-Defined Networking (SDN/SDA/SD-WAN): Knowledge of Cisco ACI, Cisco SD-WAN, VMware NSX, or equivalent SDN solutions. Experience in SD-WAN policy deployment and controller-based configuration.
Network Security Protocols:


Strong understanding of IPSec, SSL/TLS, 802.1x, and TACACS/RADIUS. Implementation of network access controls and zero-trust policies.

Qualifications:

Bachelor's degree in IT, Computer Science, or related field (or equivalent experience). Must be eligible for Singapore Security Clearance. Minimum 10 years of hands-on networking and network security experience. Experience leading a small technical team (3+ members). Cisco Certified Network Professional (CCNP) or equivalent. ITIL Foundation v4 Certified. * Strong knowledge of IP addressing, routing, VLANs, and network security best practices.