Network Security Engineer (Banking Domain)

NTT SINGAPORE PTE. LTD.; Singapore; Hybrid; SGD 120,000 - 180,000; Full time

Job summary

NTT Singapore Pte. Ltd. seeks an experienced networking professional with 8–12 years of experience to help maintain and optimize global network services.

The role focuses on WAN/LAN/Wi‑Fi, security and performance, with duties spanning incident troubleshooting, capacity planning, and cross‑functional collaboration with engineering and regional teams. You will drive automation practices, support data centre networking, cloud connectivity, and security best practices while ensuring regulatory

Qualifications

• 8–12 years of networking experience in data networks, security, FW, proxy, LB, VOICE, etc.
• Ability to lead cross-functional teams and communicate complex concepts to stakeholders.
• Proven track record of innovative problem-solving and troubleshooting complex networks.

Responsibilities

• Administer, monitor, maintain and optimize WAN, LAN, Wi‑Fi for maximum availability.
• Troubleshoot complex incidents (latency, DNS, firewall policies, VPN).
• Perform WAN/LAN/Wi‑Fi/Firewall/Load balancer configuration and documentation updates.
• Collaborate with regional teams on design and implementation of new technical solutions.
• Troubleshoot WAN circuits with upstream provider and manage multiple systems.

Skills

Networking

Security

Automation

Cloud

Data Centre

Collaboration

Troubleshooting

Education

Bachelor's Degree in Computer Science/IT/Network Engineering

CCNA/CCNP or related

Firewall vendor certification (Fortinet NSE / Palo / Check Point)

Tools

F5 BIG-IP

AVI Load Balancer

SolarWinds

Wireshark

Ansible

Python scripting

Job description

Job Description: The role requires a hybrid skillset across operations, implementation, and advanced troubleshooting, with exposure to banking/fin-techs or technology-driven environments. The candidate will act as a technical escalation point for L1/ L2, and work with Engineering and operations teams, ensuring stable, secure, and scalable network operations.

Roles & Responsibilities

• Administer, Monitor, maintain and optimize WAN, LAN, Wi-Fi networks for optimal performance and maximum availability.
• Troubleshoot complex incidents (latency, packet drops, DNS issues, firewall policies, VPN instability).
• Perform WAN/LAN/Wi-Fi/Firewall/Load balancer configuration, backups, and regular network documentation updates.
• Collaborate with regional team on the design and implementation of new technical solutions.
• Troubleshoot and optimize WAN circuits with upstream provider.
• Manage and coordinate the administration of several systems
• Visit to sites and regional Data Centres carry on the tasks as required.
• Assist with security and third-party software installations.
• Communicate and liaise with all company departments; notify appropriate parties immediately of any issues which may affect efficient operations including, but not limited to, outages, service disruptions, and network bottlenecks.
• Maximizes network performance by monitoring performance; troubleshooting network problems and outages; scheduling upgrades; collaborating with network architects for network optimization.
• Secure network system by establishing and enforcing policies; defining and monitoring access.
• Take an automated data driven approach to diagnosing and solving complex network infrastructure issues.
• Leverage on automation skills and take a "dev ops" approach to improve efficiency of solving complex network infrastructure issues, network management.
• Capacity Planning: Perform ongoing network performance monitoring and capacity planning to handle current and future data demands.
• Security Compliance: Collaborate with security teams to ensure networks are designed and implemented with security best practices, regulatory compliance (e.g., GDPR, HIPAA), and threat mitigation in mind.
• Documentation and Standards: Develop and maintain documentation for network architecture, including diagrams, configuration guides, and operational procedures.
• Cross-Department Collaboration: Partner with application, cloud, and infrastructure teams to optimize overall system performance and deliver integrated solutions.
• Troubleshooting: Support for diagnosing, troubleshooting, and resolving complex network issues, ensuring business continuity.

Technical Requirements

• Networking Protocols: Expertise in IP networking protocols (e.g., BGP, EIGRP, OSPF, MPLS, VLANs, IPsec, TCP/IP, QoS) and related technologies.
• Network Security Technologies: Proficient in network security technologies like firewalls, VPNs, IDS/IPS, Load-balancers: F5 BIG-IP / AVI LB, Web proxy's; DDI Enterprise - DNS, DHCP, NTP, IPAM
• Security: Understanding of Network Segmentation in DMZ/ Perimeter networks, Zero Trust concepts, Cloud based DDOS/WAF capabilities.
• Network Monitoring: Familiarity with network monitoring tools (e.g., SolarWinds, Netscout, Wireshark) for performance and anomaly detection.
• Data Centre Architecture: In-depth understanding of data centre networking (e.g., spine-leaf, fabric architectures) and cloud connectivity.
• Cloud Networking: Good to have exposure, with basic understanding on various cloud-to-on-prem deployments like hybrid connectivity (VPN/Direct-Connect/Express-route)
• Network Automation: Knowledge of network automation tools (e.g., Ansible, Python scripting, Terraform) to automate configuration, deployment, and management processes.

Job Requirements

• Experience: 8-12 years of experience in networking in domains such as data networks, security, FW, Proxy, LB, Voice, etc.,
• Demonstrated ability to lead cross-functional teams and communicate complex technical concepts to both technical and non-technical stakeholders.
• Proven track record of innovative problem-solving and ability to troubleshoot complex network systems.

Educational Requirements

• Bachelor's Degree: Degree in Computer Science, Information Technology, Network Engineering, or a related field is required.
• CCNA / CCNP or related professional certification is preferred.
• Firewall vendor certification (Fortinet NSE / Palo / Check Point) is good to have.