Senior Network Engineer

FINEXUS Group; Kuala Lumpur; Presencial; MYR 120.000 - 180.000; Jornada completa

Descripción de la vacante

FINEXUS Group is seeking a Senior Network Engineer to own the design, run and recovery of our core network across on‑premises and data centre environments in Kuala Lumpur. You will balance hands‑on operations with design leadership, automation and cross‑functional collaboration across Security, Infrastructure, Cloud and Compliance teams.

You will drive availability and resilience, implement automation, and prepare audit evidence for PCI, ISO/IEC 27001, SOC 2 and BNM RMiT.

Formación

• At least 5 years hands-on networking experience in enterprise or data centre environments.
• Experience managing enterprise firewalls, switches, routers, VPNs, and routing protocols.
• Ability to design highly available network environments with redundancy and failover.
• Experience supporting audits in regulated environments (PCI-DSS, ISO/IEC 27001, SOC 2 or BNM RMiT).

Responsabilidades

• Design, enhance and optimise network architecture for high availability, resilience and scalability across data centre and DR sites.
• Configure and manage firewalls, switches, routers, VPNs, and routing protocols (BGP/OSPF).
• Lead automation and standardisation using Python, Ansible; Terraform is an advantage.
• Provide 24x7 support on a rotational basis and lead major incident escalations.
• Support PCI-DSS, ISO/IEC 27001, SOC 2, and BNM RMiT audits with evidence and documentation.
• Mentor and coach junior Network Engineers and ensure documentation rigor.

Conocimientos

Network troubleshooting

Network monitoring

IP addressing

VLANs

BGP/OSPF

NAT

IPSec VPN

SNMP

Network architecture

Python

Ansible

Terraform

Fortinet

Palo Alto

Cisco

Juniper

Aruba

CCNA

CCNP

Educación

Diploma or higher in Computer Science/Networking

Herramientas

Python

Ansible

Terraform

Descripción del empleo

Finexus operates mission-critical infrastructure that underpins Malaysia's financial ecosystem. Our networks enable secure, high-availability transaction processing, data centre operations and regulatory-compliant environments.

As a Senior Network Engineer, you are the technical owner of how our core network is designed, run and recovered. Your work directly affects uptime, incident resolution, architecture quality and our readiness for PCI and Bank Negara audits.

About the Role

You will manage and improve our on‑premises and data centre network across corporate, development, UAT and production environments, including secure connectivity to hybrid and cloud services. The role combines hands‑on operations with design responsibility, automation and technical leadership. You will work closely with the Network Engineer Lead and junior engineers, and partner with the Security, Infrastructure, Application, Cloud and Compliance teams.

Expected Outcomes

• Secure, resilient and highly available enterprise networks.
• Complex incidents resolved with minimal supervision, with clear root cause and follow‑up.
• Network architecture that is documented, redundant and continuously improved.
• Standardised, partly automated network operations.
• Clean, on‑time audit evidence for PCI-DSS, ISO/IEC 27001, SOC 2 and BNM RMiT.
• Junior engineers who are guided, coached and well supported on escalations.

Key Responsibilities

Network Architecture and Improvement

• Design, enhance and optimise network architecture for high availability, resilience and scalability across data centre, DR and branch sites.
• Evaluate and recommend improvements to topology, segmentation and security controls.
• Research and evaluate new network devices and tools, and run proof‑of‑concept work where it improves reliability or efficiency.
• Drive automation and standardisation using scripting and configuration tools such as Python and Ansible. Terraform is an advantage.

Network Operations and Implementation

• Manage and maintain corporate, development, UAT and production networks, including ISP links, firewalls, switches, routers and VPN connectivity.
• Configure and manage:
  • Firewalls: policies, port access, routing and NAT
  • Switches: VLANs, LAG, STP and ACLs
  • Routers and routing protocols such as BGP and OSPF
• Run vulnerability management for network devices, including firmware, signature and security updates.
• Configure and support site‑to‑site IPSec VPN and SD-WAN or multi-WAN tunnels (for example SpeedFusion), and manage remote access VPN accounts.
• Maintain an accurate network asset inventory and configuration baseline.
• Oversee physical network installation and cabling work carried out by vendors or facilities teams, and perform hands‑on work where needed during maintenance windows.

Troubleshooting and Monitoring

• Lead troubleshooting of complex issues such as packet loss, routing failures, timeouts and connectivity disruptions.
• Use diagnostic tools including ping, telnet, traceroute, nslookup/dig, tcpdump and Wireshark.
• Design, configure and improve monitoring and alerting using SNMP and monitoring platforms.

Operations Readiness and Support

• Provide 24x7 support on a rotational basis and act as the escalation point for major incidents.
• Support after‑hours and weekend activities, including network maintenance and upgrades, high‑severity incident resolution, and production go‑live deployments.

Business Continuity and Disaster Recovery

• Provide technical leadership in BCP and DR planning and testing.
• Ensure network readiness, redundancy and rapid recovery during DR tests and real incidents.

Security and Compliance

• Manage and support network‑related security services including DNS, reverse proxy and Anti‑DDoS solutions.
• Support certifications, audits and due diligence reviews covering PCI-DSS, PCI-3DS, PCI-PIN, ISO/IEC 27001, ISO 9001, SOC 2 and BNM RMiT.
• Prepare, review and validate audit evidence and compliance documentation.

Collaboration and Technical Leadership

• Coordinate with application and infrastructure teams on connectivity, performance and compliance requirements.
• Serve as technical escalation point and mentor for Network Engineers.
• Maintain documentation, SOPs and change management discipline.
• Pursue ongoing training and professional certifications such as CCNP.

Key Requirements

Qualification

• Diploma or higher in Computer Science, Computer Networking, Software Engineering or a related discipline

Experience

• At least 5 years of hands‑on networking experience in enterprise or data centre production environments.
• Proven experience managing and troubleshooting enterprise firewalls, switches, routers, VPNs, routing protocols and network monitoring.
• Demonstrated ability to design and support highly available network environments, including redundancy and failover.
• Experience supporting audits in a regulated environment such as banking, payments or a certified data centre, against at least one of PCI-DSS, ISO/IEC 27001, SOC 2 or BNM RMiT.

Technical Skills

• Strong proficiency in:
  • Network troubleshooting and monitoring
  • IP addressing, VLANs, BGP/OSPF and NAT
  • IPSec VPN and SNMP
  • Network architecture and design principles
• Hands‑on experience with enterprise‑grade firewalls, switches and routers from vendors such as Fortinet, Palo Alto, Cisco, Juniper or Aruba.
• Scripting skills and an automation mindset (for example Python or Ansible).
• Experience with Infrastructure-as-Code tools such as Terraform is an advantage.

Certifications

• CCNA or equivalent is required.
• CCNP or an equivalent professional‑level or vendor certification (for example Fortinet NSE 4 or above, or PCNSE) is strongly preferred.

Additional Requirements

• Strong ownership, initiative and problem‑solving ability.
• Clear communication and effective stakeholder coordination.
• Ability to plan, prioritise and manage operational schedules.
• Able to work independently and lead technical initiatives.