Network Engineer

Soft Space; Kuala Lumpur; On-site; MYR 60,000 - 90,000; Full time

Job summary

Soft Space is seeking a Network Engineer to design, implement, and maintain our enterprise network infrastructure, ensuring optimized connectivity and secure segmentation across environments. You will work with Cybersecurity and Platform teams to support readiness, audits, and compliant network design.

The role requires hands-on experience with switching, routing, VPN, firewalls, and subnet management, with a focus on high availability and regulatory alignment.

Qualifications

• Bachelor’s degree in Computer Science, IT, Network Engineering, or equivalent experience.
• 2–3 years of enterprise network design, implementation, and operations.
• Strong knowledge in switching and routing (BGP, OSPF, VLAN, MPLS, STP).
• Experience with Fortinet or similar firewall platforms.
• Hands‑on VPN and secure remote access experience.
• Solid subnetting/IP addressing (IPAM) and VLAN management.
• Proficiency with network diagramming tools (Visio/Lucidchart/Draw.io).
• Certifications such as CCNA/Network+ are a plus; strong troubleshooting skills.

Responsibilities

• Design and implement enterprise network infrastructure (LAN/WAN/VPN/wireless/data center).
• Plan segmentation for critical systems including CDE and guest networks.
• Ensure segmentation aligns with PCI-DSS, SOC 2, and RMiT requirements.
• Design subnets and manage IP addressing; maintain documentation.
• Maintain network diagrams across the organization.
• Manage switching, routing, VLAN configurations, and wireless subnetting.
• Support firewall policy reviews and integration with routing.
• Monitor performance, optimize bandwidth, and ensure high availability.
• Prepare for SASE, ZTNA, and DLP deployments; document changes.
• Escalate and resolve network issues; assist in incident post-reviews.
• Collaborate with Cybersecurity and Project teams for secure designs; assist SOC as needed.
• Provide network architecture details to audits and compliance teams.

Skills

Networking design

Routing & switching

Firewall administration

VPN & secure remote access

IP addressing & subnetting

Network diagrams & documentation

Network incident response

Network monitoring & troubleshooting

Education

Bachelor’s degree in CS/IT/Net Eng

Tools

Fortinet

Visio/Lucidchart/Draw.io

Job description

The Network Engineer is responsible for planning, designing, implementing, and maintaining the organization’s network infrastructure. This role ensures optimized connectivity and segmentation across enterprise and regulated environments, supporting business, cybersecurity, and compliance objectives.

Key responsibilities include network architecture planning, segmentation for sensitive environments such as the Card Data Environment (CDE), subnet design, and management of switching, routing, VLANs, and firewalls. The Network Engineer collaborates closely with Cybersecurity, Platform Architecture, and Project teams to support connectivity, network readiness, and implementation of best practice frameworks. While not part of Security Operations or Audit & Risk functions, this role provides technical support during network-related incidents, assists in troubleshooting and recovery, and supplies information for audits when required.

Key Responsibilities

• Design and implement enterprise network infrastructure encompassing LAN, WAN, VPN, wireless, and data center connectivity.
• Plan and execute segmentation for critical systems, including Card Data Environment (CDE), database and application networks, corporate and guest access networks.
• Ensure network segmentation aligns with security requirements and regulatory frameworks (PCI-DSS, SOC 2, RMiT).
• Perform network subnet design and planning, maintaining proper IP address allocation and documentation.
• Possess authority to allocate and manage project subnets, including preparing network addressing schemes for new implementations.
• Maintain and regularly update comprehensive network architecture diagrams, reflecting physical and logical topologies across the organization.

2) Network Operations & Management

• Manage and administer switching, routing, and VLAN configurations, including wireless subnet assignments and access segmentation.
• Maintain network device configurations following baseline standards and approved change management processes.
• Collaborate in managing firewalls, primarily supporting policy reviews, configuration updates, and network routing integration.
• Conduct network performance monitoring, bandwidth optimization, and error resolution to ensure high availability.
• Support operational readiness for initiatives such as SASE, Zero Trust Network Access (ZTNA), and Network Data Loss Prevention (DLP) deployments.
• Ensure all network changes are documented, reviewed, and aligned with infrastructure and cybersecurity standards.
• Serve as the first escalation point for diagnosing and resolving network-related issues.
• Participate in incident response activities concerning connectivity failures, latency, or security-related network disruptions.
• Perform root cause analysis for network incidents and document corrective measures to prevent recurrence.
• Support service restoration and contribute to post-incident reviews from a network engineering perspective.

4) Collaboration & Governance Support

• Collaborate with the Cybersecurity Lead, Infrastructure, and Project teams on architecture validation, security-aligned network design, and secure system integration, while supporting the SOC on shared firewall operations and network log requests when required.
• Provide information related to network architecture, subnets, and configurations to audit or compliance teams upon request.
• Minimal engagement in risk management or compliance tracking beyond necessary information provision.

Required Skills and Qualifications:

Must-Have:

• Bachelor’s degree in Computer Science, Information Technology, Network Engineering, or equivalent experience.
• 2–3 years of experience in enterprise network design, implementation, and operations.
• Strong technical knowledge and hands‑on experience in switching and routing (BGP, OSPF, VLAN, MPLS, STP).
• Experience with firewall platforms such as Fortinet or similar technologies.
• Hands‑on experience with VPN and secure remote access technologies.
• Solid understanding of network subnetting, IP addressing (IPAM), and VLAN management.
• Experience in wireless network configuration including SSID setup and VLAN association.
• Proficiency in network diagramming tools such as Visio, Lucidchart, or Draw.io. Basic certifications such as CompTIA Network+, Security+, or CCNA (or equivalent knowledge).
• Strong analytical and troubleshooting skills in network environments.
• Good documentation and communication skills.

Nice-to-Have:

• Understanding of PCI-DSS, SOC 2, and RMiT requirements relating to network segmentation and data protection.
• Experience with Ansible, Python, or Terraform for network automation and configuration management.
• Hands‑on experience with network monitoring and analysis tools such as Wireshark, SolarWinds, or NetFlow.