Network Security Engineer

Singtel; Kuala Lumpur; On-site; Confidential; Full time

Job summary

Singtel in Kuala Lumpur seeks a Senior Network Security Engineer to design, deploy, and operate network security infrastructure including Checkpoint and Fortinet firewalls, NAC, VPN/ZTNA, IDS/IPS, and proxies. The role focuses on both operations and project-based delivery within a large enterprise network.

The ideal candidate has 7+ years in corporate network security, a degree in CS/IT, and strong knowledge of security technologies and vendor coordination.

Qualifications

• Bachelor's degree in Computer Science/Information Technology or equivalent.
• 7+ years of experience in Corporate Network Security.
• Experience in the listed domains and vendor engagement is preferred.

Responsibilities

• Design and implement Firewall solutions (Checkpoint, Fortinet, Cisco Firepower).
• Implement NAC solutions using Forescout and Cisco ISE.
• Manage VPN solutions for secure remote access and Proxy solutions for Internet access.
• Handle on-premise and cloud network security environments.
• Develop LLD and HLD documents for network security projects.
• Collaborate with cross-functional teams to design secure network architectures.
• Drive security governance, policies, and remediation of findings.

Skills

Networking (CISCO)

Checkpoint Firewalls

Fortinet Firewalls

NAC (Forescout)

VPN / ZTNA

IDS/IPS

Proxy (Blue Coat)

Load Balancers (F5)

SSL/TLS PKI

Security Governance

Education

Degree in Computer Science/ Information Technology

Tools

Cisco Nexus

Catalyst switches

Routers

Job description

Be a part of something BIG!
The Senior Network Security Engineer is responsible for working on network security projects, including the design, implementation, and operations of Network security infrastructure. This role involves working on technologies such as but not limited to Firewalls (Checkpoint/Fortinet), NAC (Forescout/ISE), Remote Access VPN/ZTNA (Palo Alto, Zscaler, Cisco VPN), IPS/IDS (Palo Alto), Load balancer(F5), Routing & Switching and Proxy (Zscaler and Bluecoat). We are looking for a technically strong candidate who is also willing to learn new technologies. The candidate will concentrate on network security projects and operations to implement solutions that align with the overall Infrastructure roadmap for network security. This mid-level role is focused on both operational support and project-based delivery.

Make An Impact By

Design and Deployment of Security Solutions

• Design and implement Firewall solutions including Checkpoint, Fortinet and Cisco Firepower.
• Implement Network Access Control (NAC) solution using leading technologies such as Forescout & Cisco ISE,
• Implement and manage VPN solution for secure remote access.
• Implement and manage Proxy solution for Internet Access.

Network Security Management

• Handle network security for both on-premise and cloud environments.
• Design and deploy Intrusion Detection/Prevention Systems (IDS/IPS).
• Understanding & troubleshooting encryption technologies and protocols, including SSL/TLS, IPsec, and PKI.

Design and Solution Implementation

• Collaborate with network, storage, and application teams to design and implement secure network architectures.
• Develop Low-Level Design (LLD) and High-Level Design (HLD) documents for network security projects with the team.

Infrastructure Management

• Configure and troubleshoot network infrastructure components such as Cisco Nexus, Catalyst switches, and routers.

Security Compliance and Best Practices

• Ensure network security solutions comply with industry standards.
• Perform regular security & vulnerability assessments.
• Conduct penetration testing and security audits to identify and mitigate risks.

Incident and Change Management

• Experience in managing security incidents, including detection, response, and mitigation.
• Work on Change Management and Problem Management to ensure secure deployment of network changes.

Security Governance

• Develop and implement security policies, procedures, and guidelines to ensure comprehensive security governance.
• Drive cleanups for Firewall rules, Proxy Rules and VPN/ZTNA profiles and User access.
• Monitor and report on compliance with security policies, providing recommendations for improvement.

Skills For Success

• Degree in Computer Science/ Information Technology
• Network Industry certification (e.g CCNA, CCNP) or Professional Network Security certification is preferred.
• 7+ years of working experience in Corporate Network Security.
• Experience and knowledge in at least 3 domains below:
• Network (CISCO)
• Firewalls (Checkpoint, Fortinet)
• Security Orchestration (Algosec)
• IPS (Palo Alto)
• Proxy (Bluecoat & Zscaler)
• Load balancers (F5)
• Remote Access VPNs/ZTNA.
• Knowledge of LAN, WAN and Data Centre network & Security industry standards relevant to data communications / networking and computing.
• Knowledge of Software Defined Networking (SDN) on Cisco ACI will be advantageous.
• Knowledge on Security best practices and experience in Network Security Operations and Project Management.
• Experience in working with vendors on technology and services.