Network Security Engineer (Kuala Lumpur, Malaysia)

Singtel; Kuala Lumpur; On-site; Confidential; Full time

Job summary

Singtel is seeking a Senior Network Security Engineer to lead design, deployment, and operations of network security infrastructure. You will work on Firewalls, NAC, VPN, and Proxy solutions in on-premises and cloud environments.

The role combines hands-on engineering with project delivery, requiring strong collaboration with network, storage, and application teams and adherence to security governance and best practices.

Qualifications

• Bachelor's degree in Computer Science or Information Technology.
• 7+ years of corporate network security experience.
• Certs such as CCNA/CCNP or security-focused certificates preferred.
• Experience with multiple security domains and vendors.

Responsibilities

• Design and deploy firewall solutions including Checkpoint, Fortinet and Cisco Firepower.
• Implement NAC using Forescout and Cisco ISE.
• Implement and manage VPN solutions for secure remote access.
• Implement and manage Proxy solutions for Internet access.
• Collaborate with teams to design secure network architectures and produce LLD/HLD documents.

Skills

7+ years experience

Network security

Firewall

NAC

VPN

IDS/IPS

Security governance

Education

Degree in CS/IT

Tools

Check Point

Fortinet

Cisco Firepower

Forescout

Cisco ISE

Palo Alto

Zscaler

Blue Coat

F5

Job description

Be a part of something BIG!

The Senior Network Security Engineer is responsible for working on network security projects, including the design, implementation, and operations of Network security infrastructure. This role involves working on technologies such as but not limited to Firewalls (Checkpoint/Fortinet), NAC (Forescout/ISE), Remote Access VPN/ZTNA (Palo Alto, Zscaler, Cisco VPN), IPS/IDS (Palo Alto), Load balancer(F5), Routing & Switching and Proxy (Zscaler and Bluecoat).

We are looking for a technically strong candidate who is also willing to learn new technologies. The candidate will concentrate on network security projects and operations to implement solutions that align with the overall Infrastructure roadmap for network security. This mid-level role is focused on both operational support and project-based delivery.

Make an Impact by:

• Design and Deployment of Security Solutions:
  • Design and implement Firewall solutions including Checkpoint, Fortinet and Cisco Firepower.
  • Implement Network Access Control (NAC) solution using leading technologies such as Forescout & Cisco ISE,
  • Implement and manage VPN solution for secure remote access.
  • Implement and manage Proxy solution for Internet Access.

• Network Security Management:
  • Handle network security for both on-premise and cloud environments.
  • Design and deploy Intrusion Detection/Prevention Systems (IDS/IPS).
  • Understanding & troubleshooting encryption technologies and protocols, including SSL/TLS, IPsec, and PKI.

• Design and Solution Implementation:
  • Collaborate with network, storage, and application teams to design and implement secure network architectures.
  • Develop Low-Level Design (LLD) and High-Level Design (HLD) documents for network security projects with the team.

• Infrastructure Management:
  • Configure and troubleshoot network infrastructure components such as Cisco Nexus, Catalyst switches, and routers.

• Security Compliance and Best Practices:
  • Ensure network security solutions comply with industry standards.
  • Perform regular security & vulnerability assessments.
  • Conduct penetration testing and security audits to identify and mitigate risks.

• Incident and Change Management:
  • Experience in managing security incidents, including detection, response, and mitigation.
  • Work on Change Management and Problem Management to ensure secure deployment of network changes.

• Security Governance:
  • Develop and implement security policies, procedures, and guidelines to ensure comprehensive security governance.
  • Drive cleanups for Firewall rules, Proxy Rules and VPN/ZTNA profiles and User access.
  • Monitor and report on compliance with security policies, providing recommendations for improvement.

Skills for Success:

• Degree in Computer Science/ Information Technology
• Network Industry certification (e.g CCNA, CCNP) or Professional Network Security certification is preferred.
• 7+ years of working experience in Corporate Network Security.
• Experience and knowledge in at least 3 domains below:

1. Network (CISCO)
2. Firewalls (Checkpoint, Fortinet)
3. Security Orchestration (Algosec)
4. IPS (Palo Alto)
5. Proxy (Bluecoat & Zscaler)
6. Load balancers (F5)
7. Remote Access VPNs/ZTNA.

• Knowledge of LAN, WAN and Data Centre network & Security industry standards relevant to data communications / networking and computing.
• Knowledge of Software Defined Networking (SDN) on Cisco ACI will be advantageous.
• Knowledge on Security best practices and experience in Network Security Operations and Project Management.
• Experience in working with vendors on technology and services.