Network Engineer - Campus and NAC

Optimum Solutions (Singapore) Pte Ltd.; Singapore; On-site; SGD 70,000 - 110,000; Full time

Job summary

Optimum Solutions (Singapore) Pte Ltd. seeks a Network Engineer (Campus and NAC) to design, build and operate enterprise campus networks, WLAN, WAN/SD‑WAN and NAC for a premier financial institution in Singapore.

You will lead hands-on deployments, site projects, and act as the on-site technical authority, coordinating with carriers and internal teams while ensuring ITIL-aligned change management and robust access control.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or related discipline.
• 6 to 10 years hands-on enterprise campus network engineering experience.
• Strong implementation experience with Cisco Catalyst 9K in large-scale environments.
• Proven wireless design experience and survey tool proficiency.
• Advanced Cisco ISE (802.1X/MAB, posture, guest, TACACS+).
• Experience with Forescout eyeSight/eyeControl and NAC coexistence.
• SD-WAN design and deployment experience; carrier interfacing in SG.

Responsibilities

• Campus & Wireless Engineering: design and implement Cisco Catalyst 9K campus switching standards and wireless architectures.
• Hands-on implementation: lead on-site deployments, cabling, migrations, and data centre work.
• NAC: architect and configure Cisco ISE policies and access controls.
• Forescout & coexistence: design visibility and coexistence between ISE and Forescout.
• WAN, SD-WAN & governance: design topologies and manage circuit implementations with telecom carriers.
• ITIL change management: document designs and support regulatory audit requirements.

Skills

Campus networking

WLAN design

NAC

Cisco 9K knowledge

SD-WAN design

Network design & engineering

IT risk & ITIL change

Analytical thinking

Team collaboration

Vendor coordination

Education

Bachelor's degree in CS/IT or related

Tools

Cisco Catalyst 9K

Cisco ISE

Forescout eyeSight/eyeControl

SD-WAN (Viptela/Catalyst/Meraki)

Wireless survey tools (Ekahau)

Wi‑Fi 6/6E controller architectures

Job description

About the Role

We are seeking a Network Engineer (Campus and NAC) to join our dynamic infrastructure team supporting a premier banking and financial services institution in Singapore. In this role, you will lead the end-to-end design, build, and lifecycle engineering of our enterprise campus network, wireless architecture, WAN/SD-WAN, and Network Access Control (NAC) platforms.

As an on-site technical authority, you will spearhead hands‑on implementations, hardware refreshes, wireless validation surveys, new site deployments, and data centre cage installations. You will serve as the primary engineering escalation point for complex access and campus networking challenges.

Responsibilities

• Campus & Wireless Engineering: Design and implement Cisco Catalyst 9K campus switching standards, hardware refreshes, software upgrades, and network segmentation. Engineer enterprise Wi‑Fi 6/6E controller architectures and SSID/RF designs, and conduct predictive and validation surveys.
• Hands‑on Implementation: Lead on‑site deployments, structured cabling coordination, equipment migrations, and data centre cage infrastructure work.
• Network Access Control (NAC): Architect and configure Cisco ISE policies (802.1X, MAB, device profiling, posture assessment, guest access, and TACACS+ device administration).
• Forescout & Coexistence: Design Forescout eyeSight classification, eyeControl actions, and ensure comprehensive visibility over agentless, IoT, and OT devices. Define and maintain seamless coexistence designs between Cisco ISE and Forescout to prevent policy conflicts.
• WAN, SD‑WAN & Governance: Design enterprise SD‑WAN topologies, site templates, and rollout strategies. Manage new circuit implementations and service modifications directly with local telecommunications carriers.
• Compliance & ITIL Change Management: Author engineering designs and implementation plans adhering to strict ITIL change management processes. Support regulatory audit requirements (e.g., technology risk management frameworks) with robust access control and change evidence documentation.

Requirements

• Bachelor's degree in Computer Science, Information Technology, or a related discipline.
• 6 to 10 years of hands‑on professional experience in enterprise campus network engineering.
• Proven implementation expertise with Cisco Catalyst 9K switching in large‑scale enterprise environments.
• Strong background in enterprise wireless design (Cisco, Juniper, Aruba, or Meraki) and proficiency with wireless survey tools (Ekahau or equivalent).
• Advanced expertise in Cisco ISE (802.1X/MAB, profiling, posture, guest, and TACACS+ policy design).
• Familiarity with Forescout (eyeSight/eyeControl) and demonstrated understanding of multi‑platform NAC coexistence strategies.
• Hands‑on experience in SD‑WAN design and deployment (Cisco Catalyst SD‑WAN/Viptela, Meraki, or similar) alongside experience interfacing with Singapore telecom carriers.
• Strong analytical, troubleshooting, and collaborative communication skills.

Good-to-Have Qualifications

• Experience with Cisco Catalyst Centre (DNAC), Meraki, Aruba, or Juniper wireless platforms.
• Prior working experience within financial services or other highly regulated industry sectors.
• Professional certifications such as Cisco CCNP Enterprise, Cisco SISE / CCNP Security, Forescout Certified Associate/Professional, or CWNA/CWDP.