[LTA-DPO] SNR / EXEC / ENGINEER, SYSTEM ARCHI & ASSURANCE (INFRA)

Land Transport Authority (LTA); Singapore; On-site; SGD 90,000 - 120,000; Full time

Job summary

Land Transport Authority (LTA) in Singapore is seeking a Senior/Executive Engineer (Infrastructure - Network Engineer) to design, implement and support the network infrastructure behind Singapore’s AFC system. You will work on public-facing rail and bus ticketing infrastructure, taking solutions from design through installation, testing, commissioning and ongoing improvement.

Experience with Linux, Windows or AIX, cloud environments (AWS/Azure), backup solutions and cybersecurity is an added

Qualifications

• 3+ years of experience in designing and implementing IT/OT networks
• TCP/IP, HTTP/S, FTPS and SFTP knowledge; OSI model applied to enterprise design
• IP addressing, CIDR, subnets, firewalls, routers and cloud/hybrid design
• Security and compliance: network security, IAM, data protection, encryption, vulnerability management, threat detection and response
• Ability to work independently as well as a team player
• Familiarity with Singapore Government Cloud on AWS and DevSecOps/CI/CD concepts
• Hands-on experience with DevSecOps, containerisation, serverless systems or data pipelines

Responsibilities

• Design practical, secure and resilient AFC networks covering LAN, WAN, WLAN, fibre and connectivity across on-premises, datacentre and cloud environments
• Turn project and operational needs into clear network designs, equipment specs, IP plans, security controls and implementation or rollback plans
• Install, configure, integrate and commission network equipment, servers and related infrastructure in test and live environments
• Plan and carry out network changes, upgrades, migrations and technology refreshes with minimal disruption
• Monitor network and system health, investigate alerts, troubleshoot faults and implement fixes
• Implement and maintain essential security controls including firewalls, network access control and endpoint protection
• Maintain backups of critical configurations and data, test restoration and recovery
• Keep network diagrams, configuration records and procedures accurate and up-to-date
• Collaborate with project teams, system engineers, cybersecurity specialists, operators, vendors and service providers
• Look for ways to automate routine work and improve reliability, security and maintainability
• Support planned cutovers, maintenance and onsite incident recovery outside normal hours

Education

CCNA certification

Engineering, Computer Science, Information Systems background

3+ years IT/OT network design experience

Tools

TCP/IP

HTTP/S

FTPS

SFTP

MPLS

Cloud networking (AWS/Azure)

Job description

[What the role is]

Senior/ Executive Engineer (Infrastructure - Network Engineer)

[What you will be working on]

We are seeking a passionate and experienced Network Engineer to design, implement and support the network infrastructure behind Singapore’s Automatic Fare Collection (AFC) system.

You will work on public-facing rail and bus ticketing infrastructure, taking solutions from design through installation, testing, commissioning and ongoing improvement. This role suits engineers who enjoy being close to the technology, solving real operational problems and building reliable systems that commuters depend on every day.

Experience with system platforms such as Linux, Windows or AIX, cloud environments such as AWS or Azure, backup solutions, and cybersecurity implementation will be an added advantage.

What You Will Do

• Design practical, secure and resilient AFC networks that support Singapore’s rail and bus ticketing services, covering LAN, WAN, WLAN, fibre and connectivity across on-premises, datacentre and cloud environments
• undefined
• Turn project and operational needs into clear network designs, equipment specifications, IP plans, security controls, configuration standards and implementation or rollback plans
• Get hands-on with the work: install, configure, integrate and commission network equipment, servers and related infrastructure in test and live environments
• Plan and carry out network changes, upgrades, migrations and technology refreshes, including patches, firmware and software updates, while keeping disruption to ticketing services to a minimum
• Monitor network and system health, capacity and performance; investigate alerts and incidents; troubleshoot faults using logs and diagnostic tools; and implement lasting fixes
• Implement and maintain essential security controls, including firewalls, network access control, endpoint protection, secure access and network segmentation, in line with public-sector security requirements
• Maintain backups of critical configurations and data, test restoration and recovery procedures, and support resilience and disaster-recovery exercises
• Keep network diagrams, configuration records, installation and operating procedures, test results, incident findings and troubleshooting guides accurate and useful
• Work closely with project teams, system engineers, cybersecurity specialists, operators, vendors and service providers to deliver practical solutions and resolve issues
• undefined
• Look for sensible ways to automate routine work, standardise configurations and improve the reliability, security and maintainability of the AFC network
• Support planned cutovers, maintenance and onsite incident recovery outside normal office hours when required.

[What we are looking for]

• Knowledge in Engineering, Computer Science, Information Systems, or related field
• At least 3 years of experience in designing and implementing IT/OT networks
• Certification in CCNA preferred
• Networks and Protocols — working knowledge of common network and communication protocols such as TCP/IP, HTTP/S, FTPS, and SFTP, and the OSI model as applied to enterprise system design
• Network Infrastructure — understanding of IP addressing, CIDR, subnets, firewalls, routers, MPLS, and availability zone design in cloud and hybrid environments.
• Security and Compliance — experience in network security, identity and access management, data protection, encryption, vulnerability management, and threat detection and response
• Ability to work independently as well as a team player

Bonus Skills:

• Familiarity with Singapore's Government Commercial Cloud on AWS, including its governance requirements and deployment constraints
• Hands-on experience on DevSecOps, CI/CD, containerisation (e.g. ECS, EKS), serverless system, or data streaming pipelines

As part of the shortlisting process for the role, you may be required to complete a medical declaration and / or undergo further assessment.