ICT Security Engineer (Network Architecture, Network Security, WLC Design, SD-WAN, IPSec VPN, DHCP Snooping)

EXASOFT CONSULTING PTE. LTD.; Singapore; Presencial; SGD 100.000 - 180.000; Jornada completa

Descripción de la vacante

EXASOFT CONSULTING PTE. LTD. in Singapore seeks a senior Network Engineer to design, deploy, and optimize enterprise networks across multi-vendor environments, focusing on security and reliability.

You will manage FortiGate, Check Point and Palo Alto firewalls, implement SD-WAN, and oversee VLANs, 802.1X, RADIUS, and WLC-based wireless deployments while providing Tier-3 support and on-call weekend coverage. The role requires 7+ years of experience and strong routing knowledge.

Formación

• 7+ years of experience in Network Engineering and Network Security with strong architecture skills.
• Hands-on FortiGate firewall administration and security policy tuning.
• Experience with multi-vendor firewalls (Fortinet, Check Point, Palo Alto).
• SD-WAN deployment across multi-ISP environments and VPN support.
• VLANs, authentication, and network segmentation (802.1X, RADIUS, DHCP Snooping).
• OSPF/BGP routing knowledge and multi-vendor network environments.
• CCNA/CCNP or Fortinet certifications are advantageous.

Responsabilidades

• Design, deploy, and optimize scalable enterprise networks with multi-vendor hardware.
• Configure FortiGate firewalls and security policies; manage SD-WAN and VPNs.
• Architect and secure campus wireless networks with centralized WLC designs.
• Manage VLANs, network segmentation, ACLs, 802.1X, and RADIUS implementations.
• Monitor events, investigate connectivity/security issues, provide L2/L3 support.
• Maintain technical documentation and support handover activities.
• Provide on-call standby support during weekends when required.

Conocimientos

Network Engineering

Network Security

Network Architecture

SD-WAN

IPSec/SSL VPN

VLANs

RADIUS

802.1X

ACLs

Wireless Networking

Educación

CCNA

CCNP

Fortinet certifications

Herramientas

FortiGate

Check Point

Palo Alto

Descripción del empleo

Responsibilities

• Design, deploy, and optimize highly scalable enterprise networks utilizing advanced routing protocols and multi-vendor hardware like Cisco, Huawei, Aruba and Maipu.
• Configure and administer FortiGate firewalls, including security policies, traffic controls and security profiles.
• Implement end-to-end SD-WAN across multi-ISP environments, complex firewall policies, deep-packet/certificate inspection, WAF, and secure remote access (SSL VPN).
• Architect and secure campus wireless networks using centralized WLC designs.
• Manage Cisco switching and network segmentation, including VLAN configuration and access controls.
• Implement network security measures such as ACLs, 802.1X authentication, RADIUS, DHCP Snooping and Dynamic ARP Inspection.
• Monitor network and security events, investigate connectivity or security issues, and provide L2/L3 technical support.
• Support the deployment and maintenance of wireless network infrastructure and secure access solutions.
• Perform network troubleshooting, security hardening and infrastructure improvement activities.
• Maintain technical documentation and support handover and knowledge-sharing activities.

Requirements

• 7+ years of experience in Network Engineering, Network Security with good experience in Network Architecture
• Strong hands-on experience with FortiGate firewall administration and network security policies.
• Proven experience with FortiGate, Check Point, Palo Alto etc for Firewall and security appliances.
• Proven experience in SD-WAN and IPSec/SSL VPN implementation and support.
• Hands-on experience in Cisco switching, VLANs and network segmentation.
• Experience with network security technologies such as ACLs, RADIUS, 802.1X,DHCP Snooping, Dynamic ARP Inspection, STP, HSRP, VRRP, and QoS
• Expertise in AC/WLC design, AP deployments, SSID 802.1X with dynamic VLAN mapping, and RSSI tuning for seamless roaming across Ruijie, Ubiquiti, Aruba and Maipu hardware
• Experience in routing protocols, particularly OSPF and BGP.
• Experience working with multi-vendor network and security environments.
• Relevant certifications such as CCNA, CCNP or Fortinet certifications will be an advantage.
• Availability to provide on-call standby support during weekends, as required.