Senior Network Security Design Engineer

RecruiterPal; Philippines; Hybrid; PHP 1,000,000 - 1,300,000; Full time

Job summary

BW Group is seeking a Senior Network Engineer/Designer to lead enterprise network architecture across on-premises, cloud, and OT environments. You will safeguard global network services, drive strategy, and collaborate with security, cloud, and operations teams to deliver scalable, resilient solutions.

The role emphasizes Meraki, Fortinet, Zscaler, and Azure-based designs, with responsibilities spanning design, implementation, and governance. Strong leadership and vendor management are essential.

Qualifications

• Experience leading network security projects across hybrid environments.
• Ability to translate business needs into secure network design.
• Proficient with cloud networking and modern zero-trust architectures.
• Hands-on experience with Meraki, Fortinet, Zscaler security suites and vendors.

Responsibilities

• Lead network design decisions for office, data center and cloud services.
• Develop and enforce architecture standards across on-prem and cloud networks.
• Drive optimization to improve convergence, latency, and resiliency.
• Collaborate with security and operations teams to deliver secure network services.
• Maintain accurate network diagrams and documentation.
• Mentor technical teams and manage project workload.

Skills

Network security

Azure design

Networking design

Cisco Meraki

Fortinet

Zscaler

CCIE/CCNP

MITRE ATT&CK

Tools

CrowdStrike

Palo Alto

Cisco

Azure

Job description

COMPANY DESCRIPTION

About BW Group

BW Group is a leading global energy andmaritime company involved in shipping, deepwater oil & gas production, renewable energyand digital infrastructure. BW controls a fleet of about 400 vessels transporting oil, gas and dry commodities. In the infrastructure space, the group operatesin wind, batteries, water, subsea cable networks and data centres. BW is proud to be listed as one of Forbes World’s Best Employers 2026.

Are you ready to make an impact?

What drives us is our mission to deliver energy for the world today, and to find solutions for tomorrow. If you want to make lives better around the world by providing access to energy, while working on sustainability and decarbonisation, we’d like to hear from you. Working at BW you will feel the pulse of the world each day. If something happens in the world, we feel it, and you can play your part by anticipating and responding to it. Our high-performing teams are drawn to BW by the global nature of our work and the satisfaction of working with collaborative people who inspire each other to deliver exceptional results.

RESPONSIBILITIES

The Senior Network Engineer / Designer is a core technical authority within the Network & Security COE, responsible for enterprise network architecture, design standards, and complex implementations across on premises, cloud, and OT environments.

This role drives network strategy execution, ensures architectural consistency, and partners closely with security, cloud, and operations teams to deliver secure, scalable, and resilient network services globally

Operations

• Support day-to-day governance of:
  • LAN, WAN, WLAN, VPN environments, Cloud Networks, OT.
  • Meraki, Fortinet, Palo Alto, Zscaler platforms.
  • Security toolsets.
  • Asset Management.
• Monitor network health, performance, and availability.
• Perform initial troubleshooting and elevate complex issues as required.
• Support network incident, change, and service request processes.
• Tracking incident, service request and change against SLA inline with incident and change management processes

Design, Implementation and Consultancy

• Lead network design decisions.
• Perform network architecture/design for office, data center and cloud services.
• Drive network optimization to improve convergence, performance, latency and resiliency.
• Active member of ARB.
• Vendor and technology partner management.
• Manage workload and engagement for self as part of project deliverables.
• Engage with the business units to understand requirements and translate into technology architecture and design solutions.
• SME for security and network services.
• Maintain accurate:
  • Network diagrams.
  • Configuration records.
  • Architecture, Designs and as-builts (HLD, LLD)
• Asset management and technology lifecycle management.
• Assist with BOM creation and license tracking.
• Ensure documentation is kept current and audit ready.
• Champion the standardization and automation mindset.
• Provide high priority network operation support, problem determination, network incident troubleshooting and elevate to vendors/management accordingly.

QUALIFICATIONS

Applicants MUST meet these key skills:

• Experience mentoring technical teams across network, security and cloud functions.
• 3+ years of experience in a project consultant role, working with business requirements, through to solution architecture & design to deployment.
• 5+ years of operational support.
• Knowledge in Network Security (functionality and maintenance); SIEM; WAF; IPS/IDS; Cloud Network Security.
• Exposure to Microsoft 365; Systems both Linux and Windows; Endpoint Security.
• Experience designing secure solutions in Azure (VM, MicroServices, Containers) aligning to Azure 'Well Architected Framework'.
• Experience working with NIST CSF, MITRE ATT&CK Framework.
• Hands on experience in Cisco Meraki, Fortinet, Palo Alto, Zscaler (ZIA, ZPA), CrowdStrike.

Supporting skills:

• Awareness of cybersecurity trends and hacking techniques.
• Proficient in multi-tiered architecture, design, and implementation.
• Strong working knowledge to apply architecture concepts, frameworks, and methodologies.
• Strong technical experience in switching and routing such as resiliency, VLAN, VPC/MLAG, HSRP/VRRP, NAT, IPsec, dynamic routing, WiFi.
• Knowledge of IaC, automation and API integration.
• Experience with Trust Zone Segmentation and Zero Trust methodology.
• Regular office hours and on call during non-business hours support.
• Network and Security related certification:
  • CCIE/CCNP
  • Fortinet FCX / FCSS / FCP
  • Zscaler ZDTA / ZDTE / ZDXA
  • Azure AZ 700, AZ 500, AZ 303/304
  • GIAC/SANS
  • Experience working under ITIL

Behavioral Preferences:

• Able to work in a systematic and organized manner.
• Able to work tactfully with team members and peers.
• Constantly strives to achieve results and customer satisfaction.
• Is determined to complete tasks and projects in line with agreed timelines.
• Reliability, excellent interpersonal manner, patience with end users and ability to work independently are required.
• Ability to work under pressure in a fast-paced environment.
• Excellent communication and stakeholder management skills.
• Ability to confidently talk openly, raise issues and question decisions.
• Experienced in managing own workload, scheduling and setting delivery expectations.
• Strong attention to detail with an analytical mind and outstanding problem-solving skills.