[lta-Dpo] Snr / Exec / Engineer, System Archi & Assurance (infra)

sggovterp; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

sgovterp is seeking a Senior/Executive Engineer (Infrastructure - Network Engineer) to design, implement and support the network infrastructure behind Singapore's AFC system. You will work on rail and bus ticketing networks spanning on‑premises, data centres and cloud, ensuring secure, reliable operations that commuters depend on daily.

The role requires hands‑on network design and deployment, with familiarity in Linux/Windows/AIX, AWS/Azure and security best practices.

Qualifications

• Bachelor's degree in a related field.
• Proficient understanding of network protocols and architectures.
• Experience designing and implementing IT/OT networks.

Responsibilities

• Design secure and resilient AFC networks across LAN/WAN/WLAN, on‑premises, data centres and cloud.
• Translate project needs into network designs, IP plans and security controls.
• Install, configure and commission network equipment and servers in test and live environments.
• Plan changes, upgrades and migrations with minimal disruption to services.
• Monitor network health, troubleshoot incidents and implement lasting fixes.
• Implement security controls including firewalls and network segmentation per public-sector requirements.
• Maintain backups of crucial configurations and data; support DR exercises.
• Keep accurate network diagrams, configs and runbooks.

Skills

Network design

Troubleshooting

TCP/IP

Security controls

Education

Bachelor's in IT/CS/IS

Tools

CCNA

Job description

What the role is

Senior/ Executive Engineer (Infrastructure - Network Engineer)

What you will be working on

We are seeking a passionate and experienced Network Engineer to design, implement and support the network infrastructure behind Singapore's Automatic Fare Collection (AFC) system.

You will work on public-facing rail and bus ticketing infrastructure, taking solutions from design through installation, testing, commissioning and ongoing improvement. This role suits engineers who enjoy being close to the technology, solving real operational problems and building reliable systems that commuters depend on every day.

Experience with system platforms such as Linux, Windows or AIX, cloud environments such as AWS or Azure, backup solutions, and cybersecurity implementation will be an added advantage.

What You Will Do

• Design practical, secure and resilient AFC networks that support Singapore's rail and bus ticketing services, covering LAN, WAN, WLAN, fibre and connectivity across on-premises, datacentre and cloud environments
• undefined
• Turn project and operational needs into clear network designs, equipment specifications, IP plans, security controls, configuration standards and implementation or rollback plans
• Get hands-on with the work: install, configure, integrate and commission network equipment, servers and related infrastructure in test and live environments
• Plan and carry out network changes, upgrades, migrations and technology refreshes, including patches, firmware and software updates, while keeping disruption to ticketing services to a minimum
• Monitor network and system health, capacity and performance; investigate alerts and incidents; troubleshoot faults using logs and diagnostic tools; and implement lasting fixes
• Implement and maintain essential security controls, including firewalls, network access control, endpoint protection, secure access and network segmentation, in line with public-sector security requirements
• Maintain backups of critical configurations and data, test restoration and recovery procedures, and support resilience and disaster-recovery exercises
• Keep network diagrams, configuration records, installation and operating procedures, test results, incident findings and troubleshooting guides accurate and useful
• Work closely with project teams, system engineers, cybersecurity specialists, operators, vendors and service providers to deliver practical solutions and resolve issues
• undefined
• Look for sensible ways to automate routine work, standardise configurations and improve the reliability, security and maintainability of the AFC network
• Support planned cutovers, maintenance and onsite incident recovery outside normal office hours when required.

What we are looking for

• Knowledge in Engineering, Computer Science, Information Systems, or related field
• At least 3 years of experience in designing and implementing IT/OT networks
• Certification in CCNA preferred
• Networks and Protocols - working knowledge of common network and communication protocols such as TCP/IP, HTTP/S, FTPS, and SFTP, and the OSI model as applied to enterprise system design
• Network Infrastructure - understanding of IP addressing, CIDR, subnets, firewalls, routers, MPLS, and availability zone design in cloud and hybrid environments.
• Security and Compliance - experience in network security, identity and access management, data protection, encryption, vulnerability management, and threat detection and response
• Ability to work independently as well as a team player

Bonus Skills

• Familiarity with Singapore's Government Commercial Cloud on AWS, including its governance requirements and deployment constraints
• Hands-on experience on DevSecOps, CI/CD, containerisation (e.g. ECS, EKS), serverless system, or data streaming pipelines

As part of the shortlisting process for the role, you may be required to complete a medical declaration and / or undergo further assessment.