Management Information System Engineer

Troka Group Inc.; Makati; On-site; PHP 540,000 - 660,000; Full time

Job summary

Troka Group Inc. in Makati is seeking a proactive MIS Engineer to architect, deploy, and secure our office network from the ground up. You will own the enterprise network environment, firewall architecture, and drive security compliance across VAPT audits.

The role requires hands-on expertise with NGFWs, VPNs, AD/LDAP, and network services, focusing on high availability, zero-trust segmentation, and scalable infrastructure. On-site collaboration across teams and audits.

Qualifications

• Minimum 3–5 years of proven experience in Network Administration, System Engineering, or an advanced MIS role.
• Deep knowledge of TCP/IP, OSI model, VLAN tagging, routing protocols (OSPF, BGP), and enterprise wireless network topologies.
• Hands-on experience configuring policy-based routing, intrusion prevention systems (IPS), SSL inspection, and web/application filtering on enterprise-tier firewalls.
• Strong understanding of security hardening practices (e.g., CIS Benchmarks) and standard vulnerability patching workflows.
• Elite troubleshooting skills; ability to isolate layer-2/layer-3 network issues under pressure.
• Good command of English to handle technical documentation and communicate network architecture effectively.

Responsibilities

• Design, deploy, and optimize high-availability office LAN/WAN and enterprise Wi-Fi environments.
• Manage network hardware including core/distribution switches, routers, access points, and structured cabling layouts.
• Ensure seamless, stable, and redundant connectivity across all departments.
• Configure, monitor, and maintain Next-Generation Firewalls (NGFW) (e.g., Fortinet, Palo Alto, Cisco, or Sophos).
• Establish and manage secure remote access gateways, including Site-to-Site IPsec VPNs and Client-to-Site SSL VPNs.

Skills

Networking

Firewall security

VAPT awareness

Problem-solving

Communication

English proficiency

Tools

Fortinet NGFW

Palo Alto

Cisco

Sophos

Active Directory

LDAP

DNS

DHCP

EDR

IPsec VPN

Job description

Company Description Troka Group Inc. is a growing organization based in Makati that focuses on delivering efficient, technology-enabled solutions to support its business operations. The company values reliable information systems that enable data-driven decision-making and streamlined workflows across departments. Team members collaborate closely to improve processes, maintain system reliability, and support organizational growth. Troka Group Inc. offers opportunities to work with modern technologies and contribute to continuous improvement initiatives. The work environment encourages professionalism, accountability, and ongoing skills development.

Role Description The Management Information System Engineer is a full-time, on-site role based in Makati.

We are looking for a proactive, hands-on MIS Engineer to architect, deploy, and secure our office infrastructure from the ground up. This is not just an ordinary desktop support role; you will be the core owner of our enterprise network environment, corporate firewall architecture, and the primary technical driver ensuring our office environment successfully passes strict VAPT (Vulnerability Assessment and Penetration Testing) audits.

Key Responsibilities

• Design, deploy, and optimize high-availability office LAN/WAN and enterprise Wi-Fi environments.
• Manage network hardware including core/distribution switches, routers, access points (APs), and structured cabling layouts.
• Ensure seamless, stable, and redundant connectivity across all departments.

Enterprise Firewall & Network Security Management:

• Configure, monitor, and maintain Next-Generation Firewalls (NGFW) (e.g., Fortinet, Palo Alto, Cisco, or Sophos).
• Implement strict network segmentation, Virtual Local Area Networks (VLANs), and Access Control Lists (ACLs) to enforce zero-trust principles.
• Establish and manage secure remote access gateways, including Site-to-Site IPsec VPNs and Client-to-Site SSL VPNs.

VAPT Readiness & Security Remediation:

• Act as the primary MIS liaison to coordinate and assist internal/external security teams during VAPT execution.
• Actively remediate system vulnerabilities, patch gaps, and secure infrastructure configurations based on VAPT reports.
• Maintain asset inventories, patch logs, and configurations to guarantee continuous compliance with corporate security baselines.

System Operations & Helpdesk Scaling:

• Manage core infrastructure services including Active Directory (AD), LDAP, DNS, DHCP, and centralized backup protocols.
• Oversee Endpoint Detection and Response (EDR) agents, asset management systems, and patch deployment schedules.

Requirements & Qualifications

Experience:

Minimum of 3–5 years of proven experience in Network Administration, System Engineering, or an advanced MIS role.

Networking Mastery:

Deep knowledge of TCP/IP, OSI model, VLAN tagging, routing protocols (OSPF, BGP), and enterprise wireless network topologies.

Firewall Expertise:

Hands-on experience configuring policy-based routing, intrusion prevention systems (IPS), SSL inspection, and web/application filtering on enterprise-tier firewalls.

VAPT Awareness:

Strong understanding of security hardening practices (e.g., CIS Benchmarks) and standard vulnerability patching workflows.

Problem-Solving:

Elite troubleshooting skills; ability to isolate layer-2/layer-3 network issues under pressure.

Communication:

Good command of English to handle technical documentation and communicate network architecture effectively.

Bonus Points (Preferred Qualifications)

• Active professional certifications such as CCNA / CCNP, Fortinet NSE 4 or above, CompTIA Security+, or CEH (Certified Ethical Hacker).
• Direct experience leading or executing infrastructure remediation for ISO 27001, SOC 2, or financial-grade regulatory audits.
• Familiarity with Infrastructure as Code (IaC) or scripting (Python, PowerShell, Bash) for network automation.