Senior Network Engineer L3 (1-year renewable contract) #IAC

Job Responsibilities

• Design and manage LAN and WAN topology — Aruba switching, VLAN provisioning and layer 3 routing
• Manage Fortinet and MikroTik firewall policies — rule lifecycle, NAT, CVE patching and security profiles
• Configure and maintain SSL VPN and client VPN services; manage user profiles and monitor tunnel health
• Manage DNS zones, DHCP scopes and IP address management across all environments
• Configure and maintain load balancer rules, health checks and listener configuration
• Manage cloud networking across all provider environments — security groups, routing and cloud VA firewalls
• Operate and maintain anti-DDoS appliances and cloud DDoS mitigation services
• Monitor network performance and availability using Cisco DNA and Cisco Thousand Eyes
• Monitor QoS and conduct regular performance and policy reviews; produce trend analysis reports
• Maintain network security posture; respond to security anomalies and policy violation alerts
• Participate in the change advisory process for all network changes and maintain audit records
• Maintain network documentation, configuration runbooks and topology diagrams
• Provide Level 2/3network incident support and coordinate with vendors where required
• Any other ad-hoc duties as assigned by supervisor

Requirements

• Degree in IT or related discipline
• LAN and WAN — switching, VLAN management, trunking, Spanning Tree and layer 3 routing
• Aruba switching — configuration, VLAN provisioning, port management and policy management
• Firewall management — Fortinet FortiGate and MikroTik; policy creation, NAT and security profiles
• VPN — SSL VPN and client VPN gateway configuration, profile management and monitoring
• DNS, DHCP and IPAM — zone management, scope configuration and IP address lifecycle
• Load balancing — rule configuration, health check management and listener lifecycle      
• Cloud networking — virtual networks, security groups, NSG, cloud VA firewall and routing
• Cloud network virtual appliance firewalls — deployment, policy management and monitoring
• Anti-DDoS — on-premises DDoS appliance and cloud-native DDoS mitigation management
• Network monitoring — Cisco DNA Centre and Cisco Thousand Eyes for visibility and synthetic testing
• QoS monitoring — quality of service configuration, monitoring and performance trend analysis
• Network security support — posture monitoring, CVE patching and security policy compliance
• Infrastructure as code — Terraform and Ansible for network configuration management
• Performance and policy review — regular network performance analysis and policy optimisation

Interested applicants, please email your resume to Andre Chua Jing Ming

Email: [email protected]

CEI Reg No: R1989053

EA Licence No: 99C4599

Recruit Express Pte Ltd