L2/L3 Network Engineer

Job details:

We are hiring L2 and L3 Network Engineers to design, implement and operate the full network stack. The role covers LAN and WAN connectivity, Aruba switching, Fortinet and MikroTik firewall management, SSL and client VPN, DNS/DHCP/IPAM, load balancing, cloud networking, anti-DDoS and network security.

You will use infrastructure as code to maintain all configuration in a version-controlled, repeatable and auditable state, and leverage monitoring platforms including Cisco DNA and Cisco Thousand Eyes for continuous visibility.

Responsibilities:

• Design and manage LAN and WAN topology — Aruba switching, VLAN provisioning and layer 3 routing
• Manage Fortinet and MikroTik firewall policies — rule lifecycle, NAT, CVE patching and security profiles
• Configure and maintain SSL VPN and client VPN services; manage user profiles and monitor tunnel health
• Manage DNS zones, DHCP scopes and IP address management across all environments
• Configure and maintain load balancer rules, health checks and listener configuration
• Manage cloud networking across all provider environments — security groups, routing and cloud VA firewalls
• Operate and maintain anti-DDoS appliances and cloud DDoS mitigation services
• Monitor network performance and availability using Cisco DNA and Cisco Thousand Eyes
• Monitor QoS and conduct regular performance and policy reviews; produce trend analysis reports
• Maintain network security posture; respond to security anomalies and policy violation alerts
• Participate in the change advisory process for all network changes and maintain audit records
• Maintain network documentation, configuration runbooks and topology diagrams
• Provide Level 2/3 network incident support and coordinate with vendors where required

Job requirements:

• 2-5 years of relevant experience for L2 Network Engineer.
• 5-10 years of relevant experience for L3 Network Engineer.
• Highly preferred for the skillsets: Cisco ACI, Cisco SDA, MPLS, Huawei, Infoblox
• LAN and WAN — switching, VLAN management, trunking, Spanning Tree and layer 3 routing
• Aruba switching — configuration, VLAN provisioning, port management and policy management
• Firewall management — Fortinet FortiGate and MikroTik; policy creation, NAT and security profiles
• VPN — SSL VPN and client VPN gateway configuration, profile management and monitoring
• DNS, DHCP and IPAM — zone management, scope configuration and IP address lifecycle
• Load balancing — rule configuration, health check management and listener lifecycle
• Cloud networking — virtual networks, security groups, NSG, cloud VA firewall and routing
• Cloud network virtual appliance firewalls — deployment, policy management and monitoring
• Anti-DDoS — on-premises DDoS appliance and cloud-native DDoS mitigation management
• Network monitoring — Cisco DNA Centre and Cisco Thousand Eyes for visibility and synthetic testing
• QoS monitoring — quality of service configuration, monitoring and performance trend analysis
• Network security support — posture monitoring, CVE patching and security policy compliance
• Infrastructure as code — Terraform and Ansible for network configuration management
• Performance and policy review — regular network performance analysis and policy optimisation

Interested applicants please send your resume to [email protected]

Venessa Goh Wee Ni

R24124686

Recruit Express Pte Ltd

EA License No: 99C4599

We regret that only shortlisted candidates will be contacted.