Network Engineer

Starhub Ltd; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

Starhub Ltd. is seeking an on-site Network Security Specialist to provide Level 2 support for Palo Alto firewalls and Datacom infrastructure.

You will work to resolve incidents within SLA targets, perform root-cause analysis, and maintain comprehensive network documentation. The role requires 3–5 years of hands-on experience with Palo Alto firewalls, strong knowledge of Datacom routing, and certification preferences (PCNSE/PCNSA, CCNA/CCNP, HCIA/HCIP).

Qualifications

• Background in network security operations, managed services, or enterprise campus environments.
• Minimum 3–5 years of hands-on experience managing Palo Alto firewalls.
• Strong knowledge of Datacom switching and routing technologies.
• Experience in firewall policy management, VPN configuration, log analysis, and security incident troubleshooting.
• Huawei switching or campus network experience advantageous but not mandatory (training and knowledge transfer can be provided).
• Certifications preferred: Palo Alto PCNSE / PCNSA, CCNA / CCNP, Huawei HCIA / HCIP or equivalent.
• Experience working within SLA-driven environments with strong incident management discipline.
• Proven ability to resolve complex network/security incidents independently onsite.
• Strong documentation, communication, and stakeholder engagement skills.

Responsibilities

• Provide Level 2 onsite support for Palo Alto NGFW and Datacom network infrastructure.
• Ensure timely incident resolution and service restoration within SLAs.
• Perform root-cause analysis and implement corrective/preventive actions.
• Maintain documentation of configurations, policies, network diagrams, and records.
• Collaborate with Day #1, Cybersecurity, Service Management, and Vendor TAC teams for service delivery.

Skills

Palo Alto FW

Datacom switching

VPN configuration

Log analysis

Incident troubleshooting

SLA-driven operations

Job description

Select how often (in days) to receive an alert:

Date: 28 Jul 2026

Location:

SG

Job Description

• Provide Level 2 onsite support for Palo Alto NGFW and Datacom network infrastructure.
• Ensure timely incident resolution and service restoration within agreed SLAs.
• Perform root-cause analysis and implement corrective and preventive actions.
• Maintain accurate documentation of configurations, policies, network diagrams, and operational records.
• Collaborate with Day #1, Cybersecurity, Service Management, and Vendor TAC teams to ensure seamless service delivery and knowledge transfer.
• Troubleshoot and resolve security and network incidents involving Palo Alto firewalls (policy issues, NAT, VPN, IPSec, SSL VPN, Threat Prevention, URL Filtering, etc.).
• Manage firewall rule reviews, policy optimization, log analysis, and security posture improvements.
• Perform configuration updates, firmware upgrades, patching, and change implementations following ITIL processes.
• Troubleshoot Datacom switching and routing issues including VLAN, STP, OSPF/BGP (where applicable), and campus network connectivity issues.
• Conduct periodic health checks, capacity reviews, performance monitoring, and vulnerability assessments to prevent service disruption.
• Support integration with authentication systems (e.g., AD/LDAP), endpoint security solutions, and other enterprise platforms where required.
• Liaise with vendor TAC (Palo Alto, Datacom, and Huawei where applicable) for escalations and major incident handling.
• Provide technical reports, update service tickets, and participate in operational review meetings.

Qualifications

• Background in network security operations, managed services, or enterprise campus environments.
• Minimum 3–5 years of hands-on experience managing Palo Alto firewalls (must have).
• Strong knowledge of Datacom switching and routing technologies (must have).
• Experience in firewall policy management, VPN configuration, log analysis, and security incident troubleshooting.
• Huawei switching or campus network experience is advantageous but not mandatory (training and knowledge transfer can be provided).
• Certifications preferred: Palo Alto PCNSE / PCNSA, CCNA / CCNP, Huawei HCIA / HCIP or equivalent.
• Experience working within SLA-driven environments with strong incident management discipline.
• Proven ability to resolve complex network/security incidents independently onsite.
• Strong documentation, communication, and stakeholder engagement skills.