GIC is one of the world’s largest sovereign wealth funds. With over 2,000 employees across 11 locations around the world, we invest in more than 40 countries globally across asset classes and businesses. Working at GIC gives you exposure to an extraordinary network of the world’s industry leaders. As a leading global long-term investor, we Work at the Point of Impact for Singapore’s financial future, and the communities we invest in worldwide.
Technology Group
We experiment, design, and lead a 24×7 global business where we support core capabilities in asset management, trading, investment operations, and risk management. We deliver secure, reliable, and integrated solutions, and provide insights on new and emerging technologies.
Infrastructure & Cybersecurity Resilience (ICR)
We design, build, and secure the technology foundations that power GIC’s global investment operations. We aim to deliver resilient, scalable, and secure infrastructure that empowers our people and businesses to perform securely, efficiently, and effectively.
What impact can you make in this role?
The AVP/VP, Network Engineer is responsible for the design, engineering, and delivery of network infrastructure across all GIC data centres and office sites globally. This hands-on technical role owns the architecture and build of Data Centre, Campus, and WAN/SD-WAN networks across a multi-vendor estate, and applies network automation to improve consistency, scalability, and delivery velocity. The role partners closely with Network Operations, Security, and other infrastructure engineering teams to translate business and technical requirements into resilient, secure, and standardised network solutions.
This is an individual-contributor technical role. In addition to deep hands-on engineering across Data Centre Networks, Campus Networks (wired and wireless), and SD-WAN, the role engages vendors and product principals to drive feature enhancements and influence product roadmaps, and requires the ability to develop, read and make edits to automation code (Ansible), backed by sound knowledge of financial-sector security and compliance requirements.
What will you do as an AVP/VP, Network Automation and Reliability Engineer?
- Network Engineering & Solution Design Leadership
- Lead the design and engineering of network solutions across Data Centre, Campus, and WAN/SD-WAN domains, ensuring scalability, resilience, security, and performance.
- Produce high-quality low-level and high-level designs (HLDs/LLDs), standards, and reference architectures aligned to financial-industry best practices.
- Act as the technical authority and design-approval reviewer for network changes and new builds, ensuring engineering rigour and adherence to architectural standards.
- Partner with Network Operations, Security, and other infrastructure engineering teams to translate requirements into deployable, well-documented solutions.
- Core Engineering Responsibilities
- Data Centre Networks: Design, build, and evolve data centre fabrics using EVPN/VXLAN, Cisco ACI, and modern spine-leaf architectures across a multi-vendor estate.
- Premises include Cisco, Arista, Juniper; engineer multi-tenancy, segmentation, and high-availability designs; integrate with load balancers (F5 LTM/GTM) and L4–L7 services.
- Define oversubscription, capacity, and failure-domain strategies to support trading and critical workloads.
- Campus Networks
- Engineer enterprise campus LAN and wireless solutions (routing, switching, Wi‑Fi 6/7 with a managed controller ecosystem) using standardised, templated designs across sites of varying size.
- Implement access security and segmentation (802.1X, NAC, zoning) in collaboration with Security teams.
- Ensure resilient, performant designs for corporate connectivity.
- SD-WAN, WAN & Secure Connectivity
- Design and deliver SD-WAN and WAN solutions, including overlay transport, application-aware routing, secure connectivity, and cloud on-ramp, using leading platforms.
- Embed Zero Trust and SASE principles into WAN and remote-access designs (Zscaler ZIA/ZPA, Prisma Access, or equivalent).
- Lead WAN modernisation and migration efforts with structured, low-risk transition plans.
- Engineer secure interconnectivity between data centres, campus sites, and cloud providers.
- Network Automation (Ansible)
- Develop, read, interpret, and edit Ansible playbooks, roles, and Jinja2 templates to support network provisioning, configuration management, and compliance.
- Maintain and extend standardised configuration templates, and use automated validation within delivery workflows.
- Apply automation to drive configuration consistency, support drift detection, and reduce manual TOIL across the network estate.
- (Preferred) Familiarity with adjacent automation/IaC tooling — Python scripting, Terraform, YAML, and CI/CD pipelines (Git-based) — to support scalable, repeatable delivery.
- Security & Resilience Integration
- Embed security baselines, hardening standards, and segmentation into all network designs.
- Engineer for high availability, redundancy, and compliance with internal RTO/RPO and resilience targets.
- Project Delivery & Lifecycle Management
- Lead engineering delivery for network projects from design through build, testing, and handover to operations.
- Develop detailed test plans, simulation/validation approaches, implementation steps, and rollback strategies for high-risk changes.
- Maintain comprehensive design documentation, build guides, and as-built records to meet operational and audit expectations.
- Observability, Performance & Troubleshooting
- Design and apply network observability — telemetry, monitoring, flow analytics, and dashboards — to provide visibility across DC, campus, and WAN.
- Provide advanced troubleshooting and root cause analysis (RCA) for complex, cross-domain network issues, including performance optimisation.
- Establish baselines and proactive alerting to detect and pre-empt performance degradation.
- Vendor & Product Engagement
- Engage vendors and product principals to evaluate technologies and influence feature enhancements and product roadmaps aligned to the firm’s network strategy.
- Provide structured technical feedback, raise and track enhancement and defect requests, and validate fixes and new features through proofs-of-concept and testing.
- Maintain strong working relationships with OEMs and partners to support technical escalations, product lifecycle planning, and assessment of emerging technologies.
- Collaboration & Standards
- Work closely with the Network Operations team to ensure solutions are operable, monitored, and supportable, and to incorporate operational feedback into designs.
- Define and maintain engineering standards, design templates, and gold-standard configuration baselines.
- Act as a senior technical escalation point for complex network issues and share engineering knowledge across teams.
- Governance, Risk & Compliance
- Ensure all network designs and changes adhere to internal controls, security baselines, and regulatory frameworks (MAS-TRM, CSA CCoP, and NIST CISF guidelines).
- Support internal/external audits with design documentation, technical evidence, and explanations of network controls and configurations.
What qualifications or skills should you possess in this role?
- Education: Bachelor’s degree in Information Technology, Computer Science, Engineering, or equivalent experience.
- Experience: 8–12 years in Network Engineering, with 3–5 years in a senior design/engineering capacity—preferably in the financial industry. AVP candidates: 6–10 years with hands-on engineering depth.
- Technical Expertise:
- Data Centre Networks (EVPN/VXLAN, Cisco ACI, spine-leaf, multi-vendor estate: Cisco, Arista, Juniper)
- Enterprise Campus Networks (routing, switching, Wi-Fi 6/7 and wireless controller ecosystems)
- SD-WAN design and delivery on leading platforms and WAN technologies
- Zero Trust / SASE and network security (segmentation, NAC, IDS/IPS, firewalls)
- Network automation with Ansible (playbooks, roles, Jinja2), Git
- Adjacent automation/IaC — Python, Terraform, YAML, CI/CD pipelines
- Strong knowledge of networking protocols (BGP, OSPF, MPLS, IPsec, DNS, DHCP, QoS)
- Network observability and monitoring tooling
- Cloud Networking (AWS, GCP, Azure)
- Certifications (preferred): CCNP/CCIE, vendor certifications; familiarity with ITIL, NIST CSF
- Soft Skills:
- Strong technical depth with the ability to lead complex network design and delivery end-to-end as an individual contributor.
- Analytical, problem-solving, and clear communication for technical and executive audiences.
- Ability to engage and influence vendors and product principals to shape enhancements and roadmaps.
- Collaborative mindset to work across architecture, operations, and compliance teams.
Work at the Point of Impact
We aim to be forward-looking to attract the right people to help us become the Leading Global Long-term Investor. Join our ambitious, agile, and diverse teams, be empowered to push boundaries, share your views, and be heard. Our PRIME Values—Prudence, Respect, Integrity, Merit and Excellence—guide day-to-day decisions. We strive to inspire and to make an impact.
GIC is a Great Place to Work
At GIC, our offices are vibrant hubs for ideation, professional growth, and interpersonal connection. We offer flexibility in work arrangements; teams come into the office four days per week with the option to work from home, subject to situational needs.
GIC is an equal opportunity employer
As an employer, we believe every individual brings diverse perspectives to enrich our teams. An inclusive environment yields exceptional contribution.
Learn more about our Technology Group
https://gic.careers/group/technology-group/
Our PRIME Values
GIC’s PRIME Values stand for Prudence, Respect, Integrity, Merit and Excellence and guide our decisions and relationships with clients, partners, and employees.