Manufacturing Station in Malaysia - Principal Network Engineer

JOB CHOICES SOLUTION PTE. LTD.; Singapore; On-site; SGD 80,000 - 100,000; Full time

Job summary

A leading recruitment agency is seeking a Principal Network Engineer to design and manage secure network infrastructures in a global setting. The ideal candidate should have at least 10 years of experience in network security and hands-on skills with Palo Alto and Cisco systems. This position offers an attractive salary in the range of RM 10,000 - 25,000 based on experience.

Qualifications

• Minimum 10 years’ experience in network security engineering.
• Proven expertise in firewall management and secure network design.
• Experience with cloud networking and security, preferably AWS.

Responsibilities

• Design and implement network security infrastructure.
• Monitor network traffic using SIEM and threat-intelligence tools.
• Lead incident response efforts related to network breaches.

Skills

Network security engineering

Cybersecurity expertise

Analytical skills

Effective communication

Education

Bachelor’s degree in Computer Science, Cybersecurity, or related field

Tools

Palo Alto Networks

Cisco security platforms

SIEM systems

Python

Job description

Manufacturing Station in Malaysia - Principal Network Engineer

Location: Johor Bahru, (Able to stat at Malaysia)

Gross Salary: RM 10,000 - 25,000 (Depend on Experience and working skill)

Job Type: Full-time

About the Role

We are seeking a highly skilled Principal / Senior Network Security Engineer to design, implement, and manage secure network infrastructures within a global enterprise environment. The role involves architecting resilient network solutions, strengthening cybersecurity posture, and proactively mitigating threats across complex hybrid environments.

You will report to the Director of Infrastructure Architecture and Engineering (based overseas) and collaborate closely with international infrastructure, SOC, and cloud security teams. This position requires strong technical depth, analytical acumen, and the ability to operate independently while driving enterprise-level network security initiatives.

Key Responsibilities

• Design, implement, and maintain network security infrastructure, including firewalls, VPNs, IDS/IPS, WAFs, and NAC solutions.
• Configure and manage next-generation firewalls (NGFW) — hands‑on experience with Palo Alto Networks is required.
• Apply Zero‑Trust Architecture (ZTA) principles to strengthen network segmentation and micro‑segmentation.
• Deploy and optimize DDoS mitigation, DNS security, and web filtering systems.
• Secure cloud transport services such as AWS VPCs, Direct Connect, and Transit Gateway, ensuring compliance with enterprise security standards.
• Monitor and analyze network traffic using SIEM, SOAR, and threat‑intelligence tools to detect and respond to anomalies.
• Lead and coordinate incident response efforts related to network breaches, performing forensic and root‑cause analysis.
• Collaborate with Security Operations teams to improve visibility and enhance proactive threat hunting.
• Conduct vulnerability assessments, penetration testing, and regular firewall rule audits.
• Maintain compliance with security frameworks such as NIST, ISO 27001, and PCI DSS.
• Support audit readiness, risk management, and remediation activities for network‑related controls. Develop network security automation scripts using Python, Ansible, or other automation tools to streamline rule management and change processes.
• Evaluate and integrate AI/ML‑based threat detection solutions to improve response efficiency.

Required Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related field (or equivalent hands‑on experience).
• Minimum 10 years’ experience in network security engineering or enterprise network architecture within a global organization.
• Proven expertise in firewall management, intrusion detection/prevention, and secure enterprise network design.
• Hands‑on experience with Cisco and Palo Alto security platforms.
• Strong familiarity with SIEM systems, packet analysis tools, and network traffic forensics.
• Experience with cloud networking and security (AWS preferred).
• Working knowledge of encryption, PKI, secure remote access, and incident response frameworks (MITRE ATT&CK, NIST CSF, SANS IR).
• Excellent analytical, troubleshooting, and problem‑solving abilities.
• Effective communicator with the ability to collaborate across global, cross‑functional teams.

Preferred / Nice‑to‑Have

• Experience with Aruba ClearPass or other NAC solutions.
• Professional certifications such as:
• CISSP – Certified Information Systems Security Professional
• CCNP Security – Cisco Certified Network Professional (Security)
• GIAC GSEC / GCIA / GCIH
• PCNSE – Palo Alto Networks Certified Security Engineer

We appreciate every application and assure you that all resumes are carefully reviewed. Our selection process is efficient and typically completed within 3 working days.

If you do not hear from us within this period, it likely means your application was not shortlisted by our client. We encourage you to continue exploring other opportunities to maximize your chances of success.

Interested WhatsApp [phone]

Job Choices Solution Pte. Ltd

EA No. 24C2254

Ang Hock Ann R24122146