Company Description
Dwell Technologies Sdn. Bhd., founded in 2012, specializes in industry-focused application development and digital solutions. In 2018, the company formed a joint venture with iLink Systems, USA, creating iLink Dwell Sdn. Bhd. to strengthen its global capabilities. Together, they leverage expertise in Cloud, Data Analytics, AI, and Product Engineering to serve as a one-stop provider for Hybrid IT & Cloud, SD-WAN, and industry-based digital services. Dwell Technologies operates delivery centers in the USA, the Middle East, India, and Malaysia, with Kuala Lumpur serving as the South East Asia Delivery Centre. Candidates joining the company can expect to work in a dynamic, technology-driven environment with regional and global exposure.
Role Description
The Lead Network Engineer is a full-time, on-site role based in WP. Kuala Lumpur. This role is responsible for designing, implementing, and maintaining secure and scalable network infrastructures across hybrid IT and cloud environments. Day-to-day tasks include overseeing network operations, performing advanced troubleshooting, optimizing network performance, and ensuring high availability and reliability of connectivity. The Lead Network Engineer will lead network projects, provide technical guidance to engineering teams, coordinate with cross-functional stakeholders, and maintain documentation and standards. You'll be the technical authority for Palo Alto Networks firewalls and Prisma SASE, Aruba switching and wireless, and Prisma SD-WAN
Key Responsibilities
Network Security – Palo Alto Networks
- Design, configure, and maintain Palo Alto NGFWs and Prisma Access via Panorama / Strata Cloud Manager, including security policies, NAT, App-ID, User-ID, and threat prevention profiles.
- Manage GlobalProtect remote access, including certificate-based authentication, HIP checks, and SAML/MFA integration with Entra ID.
- Implement URL filtering, SSL decryption, egress controls, and security hardening aligned to frameworks such as ASD Essential Eight.
- Lead firewall upgrades, PAN-OS lifecycle management, and vulnerability remediation.
Switching – Aruba / HPE
- Design and maintain Aruba/HPE campus and core switching (e.g. 2930F, 5400R series), including VLANs, STP, LACP, VSF/stacking, OSPF, and static routing.
- Plan and execute core switch migrations, fiber link additions, and cutovers with minimal downtime.
- Manage firmware upgrades, configuration standards, and backups.
Wireless – Aruba
- Design, deploy, and troubleshoot Aruba wireless (Instant/Central/controller-based), including SSID design, RF optimisation, 802.1X/RADIUS, and guest access.
- Conduct site surveys and capacity planning for new and expanding sites.
SD-WAN – Prisma SD-WAN (ION)
- Deploy and manage Prisma SD-WAN ION devices, path policies, QoS, and application-aware routing across multiple sites.
- Troubleshoot WAN/ISP issues, tunnel health, and site outages using ION CLI and controller tools.
- Integrate SD-WAN with Prisma Access and data centre/cloud connectivity.
Operations & Escalation
- Act as L3 escalation point for L1/L2 teams; perform root cause analysis and produce RCA reports for major incidents.
- Prepare RFCs, implementation plans, rollback plans, and present changes to CAB.
- Maintain network documentation: HLD/LLD, topology diagrams, runbooks, and SOPs.
- Engage directly with customers in technical meetings and project reviews; mentor junior engineers.
- Participate in on-call rotation and after-hours change windows.
Requirements
- Degree/Diploma in IT, Computer Science, or related field.
- 6–8+ years in enterprise networking, with at least 3 years at L3/senior level.
- Strong hands-on experience with Palo Alto NGFW, Panorama/SCM, Prisma Access, and GlobalProtect.
- Solid experience with Aruba/HPE switches and Aruba wireless.
- Strong understanding of TCP/IP, routing (OSPF/BGP), VPN (IPsec/SSL), DNS/DHCP, and 802.1X.
- Experience working with ITIL change and incident processes.
- Good written and verbal English; able to communicate with customer stakeholders.
Preferred Certifications
- PCNSE (Palo Alto Networks Certified Network Security Engineer)
- Aruba ACSP / ACMP / ACCP
- Palo Alto SD-WAN or SASE certification
- CCNP or equivalent
Nice to Have
- Exposure to FortiGate, Microsoft Entra ID/Intune, or CrowdStrike.
- Experience supporting multi-country or multi-site enterprise customers.