Network Security Engineer

OPENSOURCE PTE. LTD.; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

OPENSOURCE PTE. LTD. in Singapore seeks an experienced Enterprise Network and Security Engineer to design, implement, and optimize complex network and security infrastructures. You will work across campuses and data centers, leading architecture refreshes and incident response.

You will collaborate with cybersecurity and infrastructure teams, manage Check Point and Palo Alto firewalls, VPNs, and network devices, and produce documentation, diagrams, and design standards.

Qualifications

• Minimum 5 years' experience in enterprise network and security engineering.
• CCNA/CCNP or higher certification.
• Firewall certifications Check Point and Palo Alto.
• Strong knowledge of TCP/IP, routing and switching, VLANs, DNS, DHCP, VPN, and security technologies.
• ITIL Foundation Certification.

Responsibilities

• Perform network architecture design, capacity planning, technology evaluation, and infrastructure modernization initiatives.
• Manage and support network security solutions, including firewalls, VPNs, NDR systems, and network access controls.
• Administer and troubleshoot Check Point firewalls, NAT, VPN, clustering, and security monitoring.
• Manage and support Extreme Networks switches, routers, fabric solutions, and network management platforms.
• Work with cybersecurity and infrastructure teams to deliver secure and resilient solutions.
• Lead network troubleshooting and root-cause analysis for production issues.
• Develop and maintain network diagrams, SOPs, and design standards.
• Collaborate with cybersecurity, infrastructure teams to deliver secure and resilient solutions.
• Initiate network/security infrastructure projects, technology refreshes, migration activities, and operational improvements.
• Assist in IT audit, develop and update SOP related to Network, Security domain.

Skills

Network Infrastructure

Layer 2 & 3 Switching

Dynamic Routing (OSPF/BGP/VRRP)

Enterprise Network Architecture

Network Monitoring Tools

VPN Technologies

Security Policy Design

Network Access Control

Wireless Networking

Zero Trust

TCP/IP & Networking Fundamentals

WAN/LAN Segmentation

Education

Degree in Computer Engineering, Information Technology, Computer Science, or related discipline

Tools

CCNA/CCNP certification or higher

Check Point Certified Security Administrator/Engineer

PCNSA/PCNSE certification

ITIL Foundation Certification

Job description

Key Responsibilities

• Perform network architecture design, capacity planning, technology evaluation, and infrastructure modernization initiatives.
• Manage and support network security solutions, including firewalls, VPNs, NDR systems, and network access controls.
• Administer and troubleshoot Check Point firewalls, security policies, NAT, VPN, clustering, and security monitoring.
• Manage and support Extreme Networks switches, routers, fabric solutions, and network management platforms.
• Manage and support HPE Aruba wired and wireless network infrastructures.
• Work with Managed Service provider to support network and security incidents, service requests, and problem management, patching activities.
• Lead network troubleshooting and root-cause analysis for production issues.
• Develop and maintain network diagrams, operational procedures, technical documentation, and design standards.
• Collaborate with cybersecurity, infrastructure teams to deliver secure and resilient solutions.
• Initiate network/security infrastructure projects, technology refreshes, migration activities, and operational improvements.
• Assist in IT audit, develop and update SOP related to Network, Security domain.

Requirements

Technical Skills Requirements

• The candidate shall demonstrate experience in:
• Network Infrastructure
• Cisco, Extreme Networks, Aruba, or equivalent enterprise networking technologies.
• Layer 2 and Layer 3 switching.
• OSPF, BGP, VRRP, and dynamic routing protocols.
• Campus, data centre, and enterprise network architecture.
• Network monitoring and performance management tools.
• Security Technologies
• Check Point Firewall.
• Palo Alto Firewall.
• Network segmentation and Zero Trust principles.
• VPN technologies (IPSec and SSL VPN).
• Security policy design and administration.
• Network access control and authentication technologies.
• Wireless Technologies
• Wireless network design and deployment.
• Wireless security and performance optimization.

Preferred Qualifications

• The candidate shall possess:
• Degree in Computer Engineering, Information Technology, Computer Science, or a related discipline.
• Minimum 5 years' experience in enterprise network and security engineering.
• Cisco Certified Network Associate (CCNA), Cisco Certified Network Professional (CCNP) certification or higher.
• Firewall certification from one of the following:
• Check Point Certified Security Administrator (CCSA) / CCSE
• Palo Alto Networks Certified Network Security Administrator (PCNSA) / PCNSE
• Equivalent industry-recognized firewall certification
• Proven experience supporting enterprise network environments.
• Strong working knowledge of TCP/IP, routing and switching, VLANs, DNS, DHCP, VPN, and network security technologies.
• ITIL Foundation Certification.

Desirable Experience

• Candidates with experience in the following areas will have an advantage:
• High-Performance Computing (HPC) network environments.
• Spine-leaf architecture.
• Data centre networking.
• 100GbE, 400GbE, InfiniBand, or other high-speed networking technologies.
• DWDM (Dense Wavelength Division Multiplexing).
• BGP routing in enterprise, ISP, or research network environments.
• Cloud networking (AWS, Azure, Google Cloud).
• Network automation and Infrastructure-as-Code.
• Security Operations Centre (SOC) and Network Operations Centre (NOC) environments.