Network Engineer

WORKLE PTE. LTD.; Singapore; On-site; SGD 70,000 - 110,000; Full time

Job summary

WORKLE PTE. LTD. seeks an experienced network engineer to design, implement, and maintain complex LAN/WAN, data centre, and security architectures.

You will manage routers, switches, firewalls, VPNs, and monitoring systems, ensuring robust connectivity and incident response. You will configure OSPF/BGP, enforce security controls, support 4G/5G RAN deployments, and collaborate with vendors and project teams to deliver reliable telecom and marine-related networks.

Qualifications

• Bachelor's degree in IT, CS, telecom, electronics, engineering, or related field.
• 4-7 years of experience in network engineering, cybersecurity, telecommunications, or infrastructure operations.
• Strong knowledge of LAN/WAN, routing & switching (OSPF, BGP) and network security basics.
• Hands-on experience with enterprise firewalls (Palo Alto, Fortinet, Cisco ASA/FTD, Juniper).
• Experience with IDS/IPS, NAC, SIEM, and NMS platforms.
• Familiarity with cybersecurity frameworks (ISO 27001, NIST) and vulnerability management.
• Experience in 4G/5G RAN deployment, telecom site implementation, integration, and commissioning.
• Familiarity with SIEM platforms (Splunk, QRadar, ArcSight, Elastic) and NMS like SolarWinds.
• Experience with vulnerability tools (Nessus) and NAC solutions (Cisco ISE, FortiNAC).
• Knowledge of marine comms tech (GMDSS, ECDIS, AIS, LRIT) is a plus.
• Scripting/automation (Python, Bash, PowerShell, Ansible) is preferred.
• Strong troubleshooting, analytical, documentation, and vendor coordination skills.

Responsibilities

• Design, configure, implement, maintain, and troubleshoot LAN/WAN, data centre, DR, routers, switches, firewalls, VPNs, and NMS.
• Configure routing protocols (OSPF/BGP) and access controls for secure connectivity.
• Monitor performance, investigate incidents, perform root-cause analysis, and implement fixes.
• Implement and maintain network security solutions (firewalls, NAC, SIEM, segmentation, Zero Trust).
• Perform security monitoring, incident response, vulnerability assessments, patching, hardening, and remediation.
• Support ISO 27001/NIST compliance and internal security policies.
• Maintain security audit records and assist risk assessments and improvements.
• Coordinate with vendors, subcontractors, customers, and project teams to resolve issues.
• Prepare and maintain network diagrams, SOPs, incident/ commissioning docs.
• Provide onsite and remote technical support to customers and project teams.

Skills

LAN/WAN

Routing & Switching

OSPF

BGP

IPsec

SSL/TLS

SSL VPN

GRE/DMVPN

ACLs

AAA

802.1X

DNSSEC

MFA

Palo Alto

Fortinet

Cisco ASA/FTD

Juniper

IDS/IPS

NAC

SIEM

NMS

Nessus

Cisco ISE

FortiNAC

Splunk

QRadar

Elasticsearch/Elastic

Education

Bachelor's degree in IT/CS/Telecom/Engineering

Tools

Palo Alto

Fortinet

Cisco ASA/FTD

Juniper

NMS platforms

Splunk

QRadar

ArcSight

Nessus

Cisco ISE

FortiNAC

Job description

Responsibilities

• Design, configure, implement, maintain, and troubleshoot LAN/WAN, data centre, disaster recovery (DR), routers, switches, firewalls, VPNs, and network monitoring systems (NMS).
• Configure and manage routing and switching protocols, including OSPF and BGP, as well as network access controls and secure connectivity.
• Monitor network performance, investigate incidents, perform root-cause analysis, and implement corrective and preventive measures.
• Implement and maintain network security solutions, including firewalls, IDS/IPS, Network Access Control (NAC), SIEM, access controls, network segmentation, and Zero Trust security measures.
• Perform security monitoring, incident response, vulnerability assessments, patch management, system hardening, and remediation activities.
• Support compliance with ISO 27001, NIST guidelines, internal security policies, and applicable industry standards.
• Maintain security audit records and assist with risk assessments and security improvement initiatives.
• Execute 4G/5G Radio Access Network (RAN) installation, integration, commissioning, alarm monitoring, and troubleshooting.
• Support Telecom Implementation (TI), site integration, BFT, cable audits, quality inspections, and Technical Site Survey Report (TSSR) coordination.
• Coordinate with vendors, subcontractors, customers, and project teams to resolve technical issues and support deployment activities.
• Install, integrate, test, commission, and maintain marine communication, navigation, surveillance, and safety systems.
• Support marine systems such as GMDSS, radar, ECDIS, AIS, DGPS, LRIT, VDR, VSAT, autopilot, compass systems, echo sounders, speed logs, and associated navigation interfaces.
• Maintain radio communication systems, including microwave radio, SCADA radio, trunked radio, crane radio, radio dispatch, and satellite phones.
• Support wired communication and alarm systems, including Public Address and General Alarm (PAGA), Page/Party, Talk-Back, Smart Series, Driller Communication, analogue PABX, VoIP, and sound-powered telephone systems.
• Maintain surveillance and security systems, including CCTV, access control, intrusion detection, Person on Board (POB) systems, and associated security interfaces.
• Troubleshoot navigation and safety equipment, including navigation and obstruction lights, RACON, fog horns, Bridge Navigational Watch Alarm Systems (BNWAS), and related interfaces.
• Support marine entertainment systems, satellite communications, and Environmental Monitoring Systems (EMS), where applicable.
• Perform system integration testing, functional checks, fault diagnosis, commissioning and acceptance testing in accordance with project specifications and applicable standards.
• Provide onsite and remote technical support to customers and project teams.
• Coordinate technical requirements, materials, spare parts, vendor support, and issue resolution.
• Prepare and maintain network diagrams, technical documentation, standard operating procedures (SOPs), incident reports, commissioning records, and audit documentation.
• Support shift work, including nights, weekends, and public holidays, when required by project or operational needs.

Requirements

• Bachelor's degree in information technology, Computer Science, Telecommunications, Electronics, Engineering, or a related discipline.
• 4-7 years of relevant experience in network engineering, cybersecurity, telecommunications, or infrastructure operations.
• Strong knowledge of LAN/WAN, routing, switching, OSPF, BGP, IPsec, SSL/TLS, SSL VPN, GRE, DMVPN, ACLs, AAA, RADIUS, TACACS+, 802.1X, DNSSEC, and multi-factor authentication (MFA).
• Hands-on experience with enterprise firewalls such as Palo Alto, Fortinet, Cisco ASA/FTD, or Juniper.
• Experience with IDS/IPS, NAC, SIEM, NMS platforms, vulnerability assessment tools, and network security monitoring.
• Familiarity with cybersecurity frameworks, including ISO 2701, NIST, as well as vulnerability management, incident response, system hardening, and security audits.
• Experience in 4G/5G RAN deployment, telecom site implementation, integration, and commissioning.
• Familiarity with SIEM platforms such as Splunk, IBM QRadar, ArcSight, or Elastic, and NMS platforms such as SolarWinds.
• Experience with vulnerability assessment tools such as Nessus or equivalent and NAC solutions such as Cisco ISE or FortiNAC.
• Knowledge of marine communication, navigation, surveillance, and safety technologies, including GMDSS, radar, ECDIS, AIS, DGPS, LRIT, VDR, VSAT, PAGA, and PABX, will be an added advantage.
• Familiarity with scripting and automation tools such as Python, Bash, PowerShell, or Ansible is preferred.
• Strong troubleshooting, analytical, documentation, communication, and vendor coordination skills.
• Ability to work independently and collaboratively across technical teams, customers, and project stakeholders.

EA License No: 19C9611

EA Personnel Reg No: R22108807 Liang Syeh Wei (Shevy)