Network Engineer — Retail Network

Apple; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Apple is seeking a highly driven Network Engineer to design, deploy, and operate retail network services spanning Apple Stores and global operations. You will own routing, switching, wireless, and WAN infrastructure, ensuring secure, resilient connectivity across our retail footprint.

In this hands-on role, you will leverage automation, scripting, and AI-assisted workflows to improve reliability and efficiency, partner with global teams and vendors, and participate in on-call coverage to

Qualifications

• 5+ years hands-on experience designing, deploying, and operating enterprise network infrastructure.
• Strong foundation in TCP/IP, BGP, OSPF, VLANs, QoS, and VPN architectures.
• Experience with enterprise routing, switching, and security platforms.
• Proficient in Python, Ansible, Git, Linux, and automation tooling.
• Ability to communicate trade-offs clearly across teams and travel as needed.

Responsibilities

• Design, deploy, monitor, and optimize retail routing, switching, wireless, WAN, and related network services.
• Troubleshoot complex network incidents to root cause and implement durable fixes.
• Identify capacity, reliability, and operational risks before affecting stores.
• Build and maintain automation workflows for provisioning, testing, configuration management, and telemetry.
• Leverage AI-assisted tools to accelerate scripting, analysis, and documentation.
• Collaborate with global teams, carriers, vendors, and stakeholders on projects and upgrades.
• Execute network changes per change-governance and zero-downtime standards.
• Maintain topology diagrams, SOPs, dashboards, and engineering standards.
• Provide tier-3 escalation support and participate in on-call coverage.

Skills

TCP/IP

BGP

OSPF

VLANs

QoS

VPN

Routing

Switching

Security platforms

Python scripting

Ansible

Linux

Git

AI tools

Communication

Travel

Education

Bachelor’s degree in CS/IT/EE or equivalent experience

Tools

Cisco IOS-XE/NX-OS

Juniper JUNOS

Arista EOS

Fortinet FortiGate

Splunk

Grafana

Job description

Summary

Apple is where extraordinary people gather to do their best work. The Retail Network Infrastructure team designs, builds, and operates the critical network services connecting Apple Retail stores and operations worldwide.

Description

We are seeking a highly self-driven Network Engineer to deliver secure, resilient, and scalable routing, switching, wireless, and WAN infrastructure. In this hands‑on engineering role, you will take technical ownership of store connectivity, proactively solve complex operational challenges, and leverage automation and modern AI‑assisted workflows to elevate network reliability across our global retail footprint.

Key Responsibilities

• Design, deploy, monitor, and optimize retail routing, switching, wireless, WAN, and related network services.
• Troubleshoot complex network incidents down to root cause, implementing durable fixes and preventative safeguards against recurrence.
• Proactively identify capacity, reliability, lifecycle, and operational risks before they affect store operations.
• Build and maintain automation workflows for provisioning, testing, configuration management, and operational telemetry.
• Leverage modern engineering and AI‑assisted tools to accelerate scripting, configuration analysis, documentation synthesis, and operational efficiency.
• Partner with global network teams, telecommunications carriers, hardware vendors, and cross‑functional stakeholders on project delivery, technology upgrades, and critical escalations.
• Author, review, and execute network changes in strict accordance with change‑governance, documentation, and zero‑downtime availability standards.
• Maintain operational documentation, architecture topology diagrams, SOPs, monitoring dashboards, and engineering standards.
• Provide tier-3 escalation support and participate in scheduled on‑call coverage during business‑critical periods, ensuring swift triage and resolution of high‑impact incidents.

Minimum Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Electrical Engineering, or equivalent practical work experience.
• 5+ years of hands‑on experience designing, deploying, and operating enterprise or service‑provider network infrastructure.
• Solid foundation in core networking protocols and technologies, including TCP/IP, BGP, OSPF, VLANs, 802.1Q trunking, QoS, and VPN architectures (IPSec, DMVPN).
• Hands‑on experience with enterprise routing, switching, and security platforms (Cisco IOS‑XE/NX‑OS, Juniper JUNOS, or Arista EOS).
• Working knowledge of enterprise wireless infrastructure, controller architectures, and RF troubleshooting.
• Demonstrated scripting and automation skills using Python, Bash, Ansible, or similar tooling for network configuration and data collection.
• Familiarity with Linux environments, standard command-line diagnostic utilities, Git‑based version control, and practical use of AI‑assisted engineering tools.
• Demonstrated ability to independently own deliverables, cut through technical ambiguity, and communicate complex trade‑offs clearly across cross‑functional teams.
• Ability to travel domestically and internationally as required by business needs.

Preferred Qualifications

• Hands‑on experience with the Fortinet security ecosystem (FortiGate NGFW, FortiOS, FortiManager, FortiAnalyzer), including centralized policy management, automated deployments, and IPSec VPN orchestration.
• Experience designing, deploying, and supporting SD‑WAN architectures, including policy‑based routing, application‑aware traffic steering, and multi‑transport resilience (Metro Ethernet, DIA, cellular underlays).
• Advanced hands‑on experience with Cisco switching, Cisco Catalyst 9800 wireless controllers, or Aruba wireless solutions.
• Experience with operational observability, log analytics, and dashboarding platforms such as Splunk, Grafana, or equivalent.
• Active industry certifications such as CCNP, CCIE, Fortinet NSE / FCSS / FCP, or equivalent credentials.