ICT Security Engineer (Network Architecture, Network Security, WLC Design, SD-WAN, IPSec VPN, DHCP Snooping)

EXASOFT PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

EXASOFT PTE. LTD. in Singapore seeks an expert Network Engineer to design, deploy, and optimize scalable enterprise networks. You will configure FortiGate firewalls, implement SD-WAN, and secure wireless and campus networks across multiple vendors.

The role requires 8+ years in network engineering and security, hands-on FortiGate experience, and ability to work in a multi-vendor environment with on-site support responsibilities.

Qualifications

• 8+ years of experience in network engineering and network security.
• Strong hands-on FortiGate firewall administration and security policies.
• Experience with FortiGate, Check Point, Palo Alto firewalls and security appliances.
• Proven experience in SD-WAN and IPSec/SSL VPN implementation and support.

Responsibilities

• Design, deploy, and optimize scalable enterprise networks with multi-vendor hardware.
• Configure and administer FortiGate firewalls and security policies.
• Implement end-to-end SD-WAN across multi-ISP environments and secure remote access.
• Architect and secure campus wireless networks with centralized WLC.

Skills

Network architecture

SD-WAN

L2/L3 support

VLAN configuration

RADIUS

802.1X

OSPF/BGP

Network security

Firewalls

Tools

FortiGate firewall

Check Point

Palo Alto

Multi-vendor networks

Job description

Responsibilities

• Design, deploy, and optimize highly scalable enterprise networks utilizing advanced routing protocols and multi-vendor hardware like Cisco, Huawei, Aruba and Maipu.
• Configure and administer FortiGate firewalls, including security policies, traffic controls and security profiles.
• Implement end-to-end SD-WAN across multi-ISP environments, complex firewall policies, deep-packet/certificate inspection, WAF, and secure remote access (SSL VPN).
• Architect and secure campus wireless networks using centralized WLC designs.
• Manage Cisco switching and network segmentation, including VLAN configuration and access controls.
• Implement network security measures such as ACLs, 802.1X authentication, RADIUS, DHCP Snooping and Dynamic ARP Inspection.
• Monitor network and security events, investigate connectivity or security issues, and provide L2/L3 technical support.
• Support the deployment and maintenance of wireless network infrastructure and secure access solutions.
• Perform network troubleshooting, security hardening and infrastructure improvement activities.
• Maintain technical documentation and support handover and knowledge-sharing activities.

Requirements

• 8+ years of experience in Network Engineering, Network Security with good experience in Network Architecture
• Strong hands-on experience with FortiGate firewall administration and network security policies.
• Proven experience with FortiGate, Check Point, Palo Alto etc for Firewall and security appliances.
• Proven experience in SD-WAN and IPSec/SSL VPN implementation and support.
• Hands-on experience in Cisco switching, VLANs and network segmentation.
• Experience with network security technologies such as ACLs, RADIUS, 802.1X,DHCP Snooping, Dynamic ARP Inspection, STP, HSRP, VRRP, and QoS
• Expertise in AC/WLC design, AP deployments, SSID 802.1X with dynamic VLAN mapping, and RSSI tuning for seamless roaming across Ruijie, Ubiquiti, Aruba and Maipu hardware
• Experience in routing protocols, particularly OSPF and BGP.
• Experience working with multi-vendor network and security environments.
• Relevant certifications such as CCNA, CCNP or Fortinet certifications will be an advantage.
• Availability to provide on-call standby support during weekends, as required.