ICT SECURITY ARCHITECT

MORGAN MCKINLEY PTE. LTD.; Singapore; On-site; SGD 120,000 - 150,000; Full time

Job summary

A leading recruitment firm in Singapore is looking for a highly skilled consultant with extensive experience in firewall systems, load balancing, and network security technologies. The ideal candidate will have a Bachelor's degree in Engineering or IT and at least 15 years of relevant experience, including operational knowledge of various platforms such as Fortinet and Checkpoint. Interested candidates can apply by sending their resumes to the provided contact email.

Qualifications

• Must have at least 15 years of relevant experience.
• Operational experience with various firewall platforms.
• Strong understanding of load-balancing concepts.

Responsibilities

• Maintain and adapt standard architectures for firewall, load balancers, and proxies.
• Troubleshoot VPN and access policy issues.
• Manage DDI-related requests and incidents.

Skills

Firewall Systems

VPN Troubleshooting

Load Balancers

DNS/DHCP

Proxy Technology

IPAM

Network Monitoring

Education

Bachelor’s degree in Engineering or IT

Tools

Fortinet

Checkpoint

F5

Infoblox

SkyHigh

Bluecoat

Zabbix

Ansible

Job description

Job Description

We are seeking a consultant with extensive experience in providing technical support of the technologies such but not limited to: Firewall Systems (Checkpoint and Fortinet), Global. Traffic Managers (F5), Load Balancers (F5 and AVI networks), SSL Accelerators (F5), DNS/DHCP (Infoblox), Proxies (Sky-high Web Gateway and Bluecoat), HSM Appliances (Entrust)

Key Responsibilities:

• Adapt and maintain standard firewall, load-balancer, proxy and DDI architectures and ensure supporting documentation is accurate.
• Maintain platforms (software and hardware lifecycle management) for all technology described above.
• Identify FW issues related to access policy, NATing rules and routing.
• Troubleshoot issues relating to VPN, both for site to site and user remote access perimeters.
• Support and troubleshoot all requests relative to load-balancing estate, including but not limited to virtual server management, pools and nodes management, protocol profiles customization.
• Internet access request management including additions to proxy whitelist/blacklists, exception waiver process management and follow up, liaison with proxy SMEs when policy section changes or updatesrequired.
• Troubleshoot all internet access reported incidents.
• Manage all DDI related requests that aren’t service by automatic systems - some DNS record creation/deletion/updates and DHCP management.
• Troubleshoot all DDI related incidents.
• Ensure that all systems are properly monitored and manage alerts when they happen.
• Ensure that all asset referential are kept up to date, and manage remediation when reconciliation shows some gaps.

Must have Skills & Qualification:

• Must have Bachelor’s degree in Engineering ,information technology or equivalent
• Must have CCNA and CCSA Certification
• Must have minimum 15 years of experience on the below

Firewalls:

• Advanced knowledge of concepts relating to firewall platforms and related network environments
• (platform architecture, topologies, protocols..).
• Operational experience of Fortinet and Checkpoint technologies appreciated.

Proxies:

• Strong familiarity of http and ssl/tls protocols, and mastery of concepts related to proxy technology
• (functional scope and purpose, traffic intermediation and security stack..).
• Operational experience of SkyHigh and Bluecoat technologies appreciated.

Load-balancing:

• Strong familiarity of load-balancing concepts (topologies, platform architecture, load-balancing
• algorithms and parameters..) and DNS/GSLB load-balancing.
• Experience with F5 technology appreciated.

DNS/DHCP:

• Familiarity of concepts and architectures relating to DNS, DHCP and IPAM.
• Operational experience of Infoblox technology appreciated.

Remote access:

• Familiarity of concepts and protocols related to end-user VPNs (both IPSEC and SSL).
• Operational knowledge of Cisco ASA/FTD platforms appreciated.

Administration:

• Operational knowledge of monitoring software (Zabbix/solarwinds/HPOO/Dynatrace..) and protocols
• (mostly SNMP).
• Ability to use, repurpose, troubleshoot and possibly develop administration scripts (python, bash,
• perl).
• Operational experience of Ansible use for automation and deployment.

Interested candidates may apply through the application system or send it to [e-mail]. Shortlisted candidates will be notified.

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to Morgan Mckinley Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.morganmckinley.com/sg/privacy-policy. You acknowledge that you have read, understood, and agree with the Privacy Policy.

Morgan McKinley Pte Ltd
Dinu Dinesh

EA License No: 11C5502

EAP Registration No: R22110286