Workplace Network Engineer

Assurity Trusted Solutions Pte Ltd; Santo Niño 1st; On-site; PHP 670,000 - 1,339,000; Full time

Benefits offered by this job

Learning culture

Growth opportunities

Job summary

Assurity Trusted Solutions (ATS) seeks an Endpoint Network Engineer on a contract basis to support the SSE platform, secure internet access, ZTNA, and endpoint connectivity services for government systems.

You will monitor, troubleshoot and implement changes, coordinate with Endpoint Engineering, Network, Identity, Security and Application teams, and provide end-to-end incident resolution. Prioritize security, reliability and performance.

Qualifications

• Diploma or Degree in IT/CS or cybersecurity discipline.
• 3–5 years of experience with cloud security platforms including Zscaler.
• Experience deploying ZTNA in large-scale, hybrid environments.
• Knowledge of identity and access concepts, SSO, MFA and certificates.
• Strong networking fundamentals and incident response capabilities.

Responsibilities

• Provide end-to-end SSE platform support for secure Internet, SaaS, and private apps.
• Monitor, troubleshoot, and respond to incidents; implement configuration changes.
• Collaborate with Endpoint Engineering, Network, Identity and Security teams for deployment.
• Analyze logs and packet captures to diagnose connectivity issues.

Skills

Networking fundamentals

Troubleshooting

Zero Trust

ZTNA deployment

Identity & access

Log analysis

Education

Diploma or Degree in IT/CS

Tools

Zscaler

SIEM

Cloud security

Job description

Assurity Trusted Solutions (ATS) is a wholly owned subsidiary of the Government Technology Agency (GovTech). As a Trusted Partner over the last decade, ATS offers a comprehensive suite of products and services ranging from infrastructure and operational services, authentication services, governance and assurance services as well as managed processes. In a dynamic digital and cyber landscape, where trust & collaboration are key, ATS continues to drive mutually beneficial business outcomes through collaboration with GovTech, government agencies and commercial partners to mitigate cyber risks and bolster security postures.

We are seeking motivated fresh graduates or early-career professionals passionate about cybersecurity to join our Crowdsourced Vulnerability Discovery Programme (CVDP) triage team on a contract basis. This role presents an excellent opportunity to gain hands-on experience in vulnerability assessment and management whilst working with government systems.

Overview of Role:

The Endpoint Network Engineer is responsible for day-to-day operations, monitoring, troubleshooting and technical support of the SSE platform, supporting secure Internet access, Zero Trust Network Access (ZTNA) and endpoint connectivity services.

Responsible for maintaining service availability and performance, responding to incidents, implementing approved configuration changes, supporting application onboarding, monitoring platform health and escalating complex product or architecture issues to senior engineers, vendors or relevant infrastructure teams.

The engineer will work closely with Endpoint Engineering, Network, Identity, Security, Application Teams, Product Engineers, Service Desk/EUSS and SSE principal to provide end-to-end incident resolution and maintain the SSE service.

Job Scope:

The engineer will provide end-to-end technical support for secure Internet, SaaS and private application connectivity, troubleshooting issues across endpoint, SSE cloud, SSE security policies, SSE on-prem infrastructure, network, DNS, authentication, and backend applications. The scope also include supports application onboarding, configuration and policy changes, on-prem server health check and capacity management, incident resolution, service monitoring and vendor escalation.

• Develop and implement security policies within SSE solution, including access controls, SSL inspection, cloud firewalls, and secure web gateways, to protect users, apps, and data in the cloud.
• Integrate SSE services with other security platforms, including SIEMs, IAM tools, CASBs, and threat intelligence solutions to enhance threat detection, incident response, and compliance reporting.
• Drive cloud cost optimisation by monitoring SSE consumption patterns and implementing resource allocation strategies that balance performance and cost, focusing on efficient deployment and scaling.
• Leverage SSE analytics tools to monitor security posture, generate detailed reports, and provide recommendations for continuous improvement in cloud security measures.
• Work closely with IT, network, and security teams to integrate SSE into existing network and security infrastructures, ensuring seamless deployments and optimised security workflows.
• Stay ahead of the curve on emerging security technologies, continuously refining and enhancing Zscaler configurations and security policies in line with evolving best practices and industry trends.

Technical Competencies:

The engineer is expected to possess strong networking fundamentals and hands-on troubleshooting capabilities to diagnose issues across the complete connectivity path, including the endpoint, SSE cloud, Internet/network infrastructure and backend applications.

Strong knowledge of enterprise networking fundamentals, including:

• TCP/IP
• DNS
• DHCP
• Routing
• NAT
• Firewall
• Proxy
• HTTP/HTTPS
• TLS/SSL
• TCP/UDP
• Network troubleshooting

Hands‑on experience with network diagnostic tools such as:

• ping
• nslookup / dig
• traceroute / tracert
• curl
• PowerShell network commands
• Wireshark / packet capture analysis

Experience supporting enterprise Internet connectivity, proxy, firewall, VPN or Zero Trust networking solutions.

Knowledge or hands‑on experience with SSE technologies is highly desirable.

Understanding of Zero Trust Network Access concepts, including:

• Identity-based access
• Application segmentation
• Least-privilege access
• Device posture
• Application-to-user access policies

Understanding of enterprise identity and authentication technologies, including:

• Microsoft Entra ID
• SAML
• SSO
• SCIM
• MFA
• Digital certificates

Experience analysing logs, packet captures, HAR files and application/network connectivity issues.

Qualifications / Experience:

• Diploma or Degree in Information Technology, Computer Engineering, Network Engineering, Cybersecurity or equivalent.
• 3 to 5 years of experience working with cloud security platforms, including Zscaler.
• Experience in deploying Zero Trust Network Access (ZTNA) solutions for large-scale enterprises, including complex hybrid environments.
• In-depth understanding of cloud security concepts, including network segmentation, secure access policies, secure internet access (SIA), and cloud-delivered firewalling.
• Experience with cloud-native application security, including securing SaaS apps, API traffic, and protecting users across various devices and endpoints using Zscaler solutions.
• Strong knowledge of compliance frameworks (e.g., SOC 2, GDPR, HIPAA) and the ability to apply these to cloud-based security architectures using SSE solutions.
• Advanced certifications such as Zscaler Certifications (ZDTA, ZDTE, etc.), Certified Cloud Security Professional (CCSP), or equivalent.
• Proven ability to conduct security assessments in Zscaler-enforced cloud environments, evaluating security gaps and recommending remediation strategies.

Requirements

Join us and discover a meaningful and exciting career with Assurity Trusted Solutions!

The remuneration package will commensurate with your qualifications and experience.

Benefits

• A wholly-owned subsidiary of GovTech.
• We promote a learning culture and encourage you to grow and learn.