Network Engineer

Koninklijke Vopak N.V.; Singapore; On-site; SGD 60,000 - 90,000; Full time

Job summary

Koninklijke Vopak N.V. is looking for a Network Engineer based in Singapore. In this role, you will ensure the health of the network, addressing user needs from device to application server, and managing security operations across both corporate IT and industrial OT environments.

The ideal candidate possesses strong skills in TCP/IP and network configurations, as well as flexibility for on-site troubleshooting. Join us to develop your career in a multicultural team with growth opportunities.

Qualifications

• Strong mastery of TCP/IP, VLANs, and Routing.
• Basic understanding of IT/OT Integration and Purdue Model.
• Familiarity with safety protocols in industrial zones.

Responsibilities

• Manage and optimize Cisco Catalyst switches and Wireless systems.
• Execute complex configurations for Fortinet devices.
• Build and maintain secure IPsec VPN Tunnels for connectivity.

Skills

TCP/IP

VLANs

Subnetting

ARPs and MAC Addressing

Routing

SD-WAN

Cisco: CCNA or CCNP

Fortinet: FCP (NSE4) or FCSS (NSE7)

Effective Communication

Deep-packet analysis

Tools

PRTG Monitoring System

TCPdump

Wireshark

FortiManager

FortiClient EMS

FortiClient Advanced

Job description

Role Summary

Start your career as a Network Engineer at Vopak and join our global infrastructure organization, based out of our Singapore Regional Hub. This role is pivotal in supporting and expanding our regional infrastructure, spanning both corporate IT environments and specialized industrial OT (Operational Technology) zones. Ready to develop yourself and make a positive impact? Improve the world and start as a Network Engineer at Vopak.

What You’ll Do

As a Network Engineer, you will be responsible for the end‑to‑end health of the network, from the user’s device to the application server, ensuring high performance across our Greenfield and Brownfield projects.

Compensation & Benefits

A market-based salary depending on your experience and knowledge and attractive bonuses. Various growth opportunities.

Qualifications & Requirements

• Core Networking: Strong mastery of TCP/IP, VLANs, Subnetting, ARP, MAC Addressing, Routing, and SD‑WAN
• IT/OT Integration: Basic understanding of the Purdue Model and the unique requirements of OT infrastructure
• Certifications: Cisco: CCNA or CCNP, Fortinet: FCP (NSE4) or FCSS (NSE7)
• Safety Excellence: A "Safety First" mindset is non‑negotiable. Familiarity with safety protocols in industrial zones (e.g., Jurong Island) is highly preferred
• Global Team Player: Ability to work effectively within a multicultural, multi‑timezone team. You should be someone who shares knowledge and supports colleagues across the globe
• Flexibility & Adaptability: Comfortable shifting between high‑level configuration tasks and hands‑on physical work. Ready to adapt to changing project priorities in a fast‑paced environment
• Effective Communication: Ability to coordinate clearly with both office‑based global IT teams and on‑site industrial OT operators
• Mobility: Willingness to travel to industrial areas within Singapore (e.g., Jurong Island, Penjuru Road) for on‑site troubleshooting and project execution
• Analytical Mindset: Strong problem‑solving skills with the ability to perform deep‑packet analysis to resolve complex network performance issues

Core Responsibilities

• Network & Security Operations: Manage and optimize Cisco Catalyst switches, Cisco Wireless, and Cisco Catalyst Center. Administer a robust Fortinet stack including FortiManager, FortiClient EMS, and FortiClient Advanced
• Fortinet Administration: Execute complex configurations including VDOMs, NPU links, High Availability (HA), 802.3ad Aggregate interfaces, and Zoning
• Security Policy Management: Manage firewall rule changes, Virtual IPs (VIP), SNAT/DNAT, and security profiles (Web Filtering, SSL/SSH Inspection)
• ITIL Process Management: Strictly adhere to Incident and Change Management procedures via ServiceNow. Ensure all network changes are documented, approved, and executed according to global ITIL standards
• Connectivity: Build and maintain secure IPsec VPN Tunnels and SSLVPN configurations for regional connectivity
• End‑to‑End Troubleshooting: Diagnose complex issues across the stack—from end‑user machines to application servers—using tools like TCPdump, Wireshark (packet sniffing), and iperf
• Monitoring: Maintain 24/7 visibility of global infrastructure using the PRTG Monitoring System
• Project Deployment: Support network operations and assist in Greenfield (new builds) and Brownfield (upgrades/migrations) deployments
• Physical Layer Maintenance: Manage network cabling requirements, including Copper and Fiber (Single‑mode/Multimode), and specify correct Fiber Transceivers

Employment & Equal Opportunity

We are an equal opportunities employer and welcome applications from all suitably qualified persons regardless of their race, gender, religion/belief, sexual orientation or age. Only shortlisted candidates will be notified. The successful candidate will be awarded a local employment contract.