Network Security Engineer

Opensource; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

Opensource in Singapore is seeking an experienced Network Infrastructure and Security Engineer to design and modernize enterprise networks, evaluate technologies, and support security solutions across firewalls, VPNs, NDR, and NAC.

You will administer Check Point and Aruba/HPE gear, work with MSPs, perform root-cause analysis, maintain network diagrams and SOPs, and collaborate with cybersecurity and infrastructure teams to deliver resilient solutions.

Qualifications

• Degree in Computer Engineering, Information Technology, Computer Science, or related discipline.
• Minimum 5 years' experience in enterprise network and security engineering.
• CCNA/CCNP certification or higher.

Responsibilities

• Perform network architecture design, capacity planning, and infrastructure modernization initiatives.
• Manage and support network security solutions including firewalls, VPNs, NDR systems, and NACs.
• Administer and troubleshoot Check Point firewalls, NAT, VPN, clustering, and security monitoring.
• Manage and support Extreme Networks switches, routers, fabric solutions, and network management platforms.
• Work with MSP to support network and security incidents, service requests, and problem management, patching activities.
• Lead network troubleshooting and root-cause analysis for production issues.
• Develop and maintain network diagrams, SOPs, and design standards.
• Collaborate with cybersecurity and infrastructure teams to deliver secure and resilient solutions.
• Initiate network/security projects, tech refreshes, migrations, and operational improvements.
• Assist in IT audit, develop and update SOPs related to Network and Security.

Skills

Cisco

Extreme Networks

Aruba

Layer 2/3 switching

Routing protocols (OSPF/BGP/VRRP)

Network monitoring tools

Campus/data centre network design

Education

Degree in Computer Engineering/IT/CS

Tools

Check Point Firewall

Palo Alto Firewall

VPN technologies

Zero Trust concepts

Job description

Key Responsibilities

• Perform network architecture design, capacity planning, technology evaluation, and infrastructure modernization initiatives.


• Manage and support network security solutions, including firewalls, VPNs, NDR systems, and network access controls.


• Administer and troubleshoot Check Point firewalls, security policies, NAT, VPN, clustering, and security monitoring.


• Manage and support Extreme Networks switches, routers, fabric solutions, and network management platforms.


• Manage and support HPE Aruba wired and wireless network infrastructures.


• Work with Managed Service provider to support network and security incidents, service requests, and problem management, patching activities.


• Lead network troubleshooting and root-cause analysis for production issues.


• Develop and maintain network diagrams, operational procedures, technical documentation, and design standards.


• Collaborate with cybersecurity, infrastructure teams to deliver secure and resilient solutions.


• Initiate network/security infrastructure projects, technology refreshes, migration activities, and operational improvements.


• Assist in IT audit, develop and update SOP related to Network, Security domain.

Requirements

Technical Skills Requirements

The candidate shall demonstrate experience in:

Network Infrastructure

• Cisco, Extreme Networks, Aruba, or equivalent enterprise networking technologies.


• Layer 2 and Layer 3 switching.


• OSPF, BGP, VRRP, and dynamic routing protocols.


• Campus, data centre, and enterprise network architecture.


• Network monitoring and performance management tools.

Security Technologies

• Check Point Firewall.


• Palo Alto Firewall.


• Network segmentation and Zero Trust principles.


• VPN technologies (IPSec and SSL VPN).


• Security policy design and administration.


• Network access control and authentication technologies.


• Wireless Technologies


• Wireless network design and deployment.


• Wireless security and performance optimization.

Preferred Qualifications

The candidate shall possess:

• Degree in Computer Engineering, Information Technology, Computer Science, or a related discipline.


• Minimum 5 years' experience in enterprise network and security engineering.


• Cisco Certified Network Associate (CCNA), Cisco Certified Network Professional (CCNP) certification or higher.

Firewall certification from one of the following:

• Check Point Certified Security Administrator (CCSA) / CCSE


• Palo Alto Networks Certified Network Security Administrator (PCNSA) / PCNSE


• Equivalent industry-recognized firewall certification


• Proven experience supporting enterprise network environments.


• Strong working knowledge of TCP/IP, routing and switching, VLANs, DNS, DHCP, VPN, and network security technologies.


• ITIL Foundation Certification.

Desirable Experience

Candidates with experience in the following areas will have an advantage:

• High-Performance Computing (HPC) network environments.


• Spine-leaf architecture.


• Data centre networking.


• 100GbE, 400GbE, InfiniBand, or other high-speed networking technologies.


• DWDM (Dense Wavelength Division Multiplexing).


• BGP routing in enterprise, ISP, or research network environments.


• Cloud networking (AWS, Azure, Google Cloud).


• Network automation and Infrastructure-as-Code.

Security Operations Centre (SOC) and Network Operations Centre (NOC) environments.