ICT Security Engineer (Network Architecture, Network Security, WLC Design, SD-WAN, IPSec VPN, DHCP Snooping)

EVYONIC SOLUTIONS PTE. LTD.; Singapore; On-site; SGD 90,000 - 180,000; Full time

Benefits offered by this job

Fortigate firewall expertise

Job summary

EVYONIC SOLUTIONS PTE. LTD. seeks an experienced Network Engineer to design, deploy, and secure enterprise networks across multiple vendors. You will configure FortiGate firewalls, implement SD-WAN, and manage wireless with central WLCs for roaming across campus environments.

Candidates should have 8+ years in network engineering and security, strong routing (OSPF/BGP), and multi-vendor experience. Weekend on-call support may be required.

Qualifications

• 8+ years of experience in Network Engineering and Security.
• FortiGate firewall administration expertise.
• Experience with multi-vendor networks (Cisco, Huawei, Aruba, Maipu).
• SD-WAN and IPSec/SSL VPN implementation.
• Cisco switching, VLANs and segmentation.
• Security technologies: ACLs, RADIUS, 802.1X, DHCP Snooping, DAI.
• AC/WLC design and AP deployments with roaming.
• OSPF and BGP routing experience.
• CCNA/CCNP or Fortinet certifications preferred.
• On-call standby support during weekends.

Responsibilities

• Design, deploy, and optimize scalable enterprise networks.
• Configure FortiGate firewalls and security policies.
• Implement end-to-end SD-WAN across multi-ISP environments.
• Architect campus wireless networks with centralized WLC.
• Manage Cisco switching, VLANs, and segmentation.
• Enforce 802.1X, RADIUS, DHCP Snooping, and DAI.
• Monitor network events and provide L2/L3 support.
• Support wireless network deployment and secure access solutions.
• Troubleshoot networks and harden infrastructure.
• Maintain documentation and knowledge transfer.

Skills

Network Engineering

Network Security

FortiGate Administration

SD-WAN Implementation

IPSec VPN

SSL VPN

Cisco Switching

VLAN Configuration

Network Segmentation

802.1X

RADIUS

DHCP Snooping

Dynamic ARP Inspection

Quality of Service

AP Deployments

WLC Design

Roaming Optimization

OSPF

BGP

Multi-Vendor Environments

Troubleshooting

Education

CCNA

CCNP

Fortinet Certifications

Tools

FortiGate

Check Point

Palo Alto

Job description

Responsibilities

• Design, deploy, and optimize highly scalable enterprise networks utilizing advanced routing protocols and multi-vendor hardware like Cisco, Huawei, Aruba and Maipu.
• Configure and administer FortiGate firewalls, including security policies, traffic controls and security profiles.
• Implement end-to-end SD-WAN across multi-ISP environments, complex firewall policies, deep-packet/certificate inspection, WAF, and secure remote access (SSL VPN).
• Architect and secure campus wireless networks using centralized WLC designs.
• Manage Cisco switching and network segmentation, including VLAN configuration and access controls.
• Implement network security measures such as ACLs, 802.1X authentication, RADIUS, DHCP Snooping and Dynamic ARP Inspection.
• Monitor network and security events, investigate connectivity or security issues, and provide L2/L3 technical support.
• Support the deployment and maintenance of wireless network infrastructure and secure access solutions.
• Perform network troubleshooting, security hardening and infrastructure improvement activities.
• Maintain technical documentation and support handover and knowledge-sharing activities.

Requirements

• 8+ years of experience in Network Engineering, Network Security with good experience in Network Architecture.
• Strong hands-on experience with FortiGate firewall administration and network security policies.
• Proven experience with FortiGate, Check Point, Palo Alto etc for Firewall and security appliances.
• Proven experience in SD-WAN and IPSec/SSL VPN implementation and support.
• Hands-on experience in Cisco switching, VLANs and network segmentation.
• Experience with network security technologies such as ACLs, RADIUS, 802.1X,DHCP Snooping, Dynamic ARP Inspection, STP, HSRP, VRRP, and QoS.
• Expertise in AC/WLC design, AP deployments, SSID 802.1X with dynamic VLAN mapping, and RSSI tuning for seamless roaming across Ruijie, Ubiquiti, Aruba and Maipu hardware.
• Experience in routing protocols, particularly OSPF and BGP.
• Experience working with multi-vendor network and security environments.
• Relevant certifications such as CCNA, CCNP or Fortinet certifications will be an advantage.
• Availability to provide on-call standby support during weekends, as required.