[LTA-DPO] SNR / EXEC / ENGINEER, SYSTEM ARCHI & ASSURANCE (INFRA)

Land Transport Authority (LTA) Singapore; Singapore; On-site; SGD 70,000 - 100,000; Full time

Job summary

Land Transport Authority (LTA) Singapore seeks a Senior/Executive Engineer to design, implement and support AFC network infrastructure underpinning Singapore’s rail and bus ticketing systems. You will work on on-premises, datacentre, and cloud environments, turning project needs into detailed network designs and secure configurations.

You will lead hands-on installation, testing, and commissioning of network gear, plus ongoing optimization, backups and security controls aligned with

Qualifications

• At least 3 years of experience in designing and implementing IT/OT networks.
• CCNA certification preferred.
• Knowledge of TCP/IP, HTTP/S, FTPS, SFTP and OSI model as applied to enterprise design.
• IP addressing, CIDR, subnets, firewalls, routers, MPLS and cloud design.

Responsibilities

• Design secure and resilient AFC networks across LAN, WAN, WLAN, fibre and cloud.
• Create IP plans, security controls, configuration standards and implementation/rollback plans.
• Install, configure, integrate and commission network equipment and servers in test and live environments.
• Plan changes, upgrades and migrations, including patches and firmware updates, with minimal disruption to services.
• Monitor network health, troubleshoot faults using logs and tools; implement lasting fixes.
• Implement and maintain security controls, network segmentation, and access management per public-sector requirements.
• Maintain backups of critical configurations and data; test restoration and recovery procedures.
• Keep network diagrams, records, and SOPs accurate and up-to-date.
• Collaborate with project teams, system engineers, cybersecurity specialists, operators, vendors and service providers.
• Look for automation opportunities and standardize configurations to improve reliability.
• Support planned cutovers and on-site incident recovery outside office hours when required.

Skills

Independent work

Team player

Problem solving

Education

Engineering/CS/IS degree or related field

Tools

AWS

Azure

Linux

Windows

AIX

Networking hardware

Job description

[What the role is]

Senior/ Executive Engineer (Infrastructure - Network Engineer)

[What you will be working on]

We are seeking a passionate and experienced Network Engineer to design, implement and support the network infrastructure behind Singapore’s Automatic Fare Collection (AFC) system.

You will work on public-facing rail and bus ticketing infrastructure, taking solutions from design through installation, testing, commissioning and ongoing improvement. This role suits engineers who enjoy being close to the technology, solving real operational problems and building reliable systems that commuters depend on every day.

Experience with system platforms such as Linux, Windows or AIX, cloud environments such as AWS or Azure, backup solutions, and cybersecurity implementation will be an added advantage.

What You Will Do

• Design practical, secure and resilient AFC networks that support Singapore’s rail and bus ticketing services, covering LAN, WAN, WLAN, fibre and connectivity across on-premises, datacentre and cloud environments
• undefined
• Turn project and operational needs into clear network designs, equipment specifications, IP plans, security controls, configuration standards and implementation or rollback plans
• Get hands-on with the work: install, configure, integrate and commission network equipment, servers and related infrastructure in test and live environments
• Plan and carry out network changes, upgrades, migrations and technology refreshes, including patches, firmware and software updates, while keeping disruption to ticketing services to a minimum
• Monitor network and system health, capacity and performance; investigate alerts and incidents; troubleshoot faults using logs and diagnostic tools; and implement lasting fixes
• Implement and maintain essential security controls, including firewalls, network access control, endpoint protection, secure access and network segmentation, in line with public-sector security requirements
• Maintain backups of critical configurations and data, test restoration and recovery procedures, and support resilience and disaster-recovery exercises
• Keep network diagrams, configuration records, installation and operating procedures, test results and incident findings and troubleshooting guides accurate and useful
• Work closely with project teams, system engineers, cybersecurity specialists, operators, vendors and service providers to deliver practical solutions and resolve issues
• undefined
• Look for sensible ways to automate routine work, standardise configurations and improve the reliability, security and maintainability of the AFC network
• Support planned cutovers, maintenance and onsite incident recovery outside normal office hours when required.

[What we are looking for]

• Knowledge in Engineering, Computer Science, Information Systems, or related field
• At least 3 years of experience in designing and implementing IT/OT networks
• Certification in CCNA preferred
• Networks and Protocols — working knowledge of common network and communication protocols such as TCP/IP, HTTP/S, FTPS, and SFTP, and the OSI model as applied to enterprise system design
• Network Infrastructure — understanding of IP addressing, CIDR, subnets, firewalls, routers, MPLS, and availability zone design in cloud and hybrid environments.
• Security and Compliance — experience in network security, identity and access management, data protection, encryption, vulnerability management, and threat detection and response
• Ability to work independently as well as a team player

Bonus Skills

• Familiarity with Singapore's Government Commercial Cloud on AWS, including its governance requirements and deployment constraints
• Hands‑on experience on DevSecOps, CI/CD, containerisation (e.g. ECS, EKS), serverless system, or data streaming pipelines

As part of the shortlisting process for the role, you may be required to complete a medical declaration and / or undergo further assessment.