Network Security Engineer_Contract

NTT SINGAPORE PTE. LTD.; Singapore; On-site; SGD 140,000 - 180,000; Full time

Job summary

NTT Singapore Pte. Ltd. is seeking an experienced Network Operations professional to support perimeter security technologies in a banking/finance environment.

You will manage triage, incident handling, and escalation for network infrastructure incidents, with a focus on firewall and IDS/IPS, DNS/DHCP/IPAM and PKI related tasks. The role requires hands-on expertise across CheckPoint NGFW, Fortinet, Palo Alto, Cisco Firepower, and Juniper SRX, plus strong communication skills to brief stakeholders

Qualifications

• 8+ years’ experience in Network Operations support in the banking and finance industry.
• Extensive experience configuring and troubleshooting perimeter security technologies: CheckPoint NGFW (R80+), Fortinet FortiGate, Palo Alto NGFW, Cisco Firepower, Juniper SRX.
• Strong understanding of DMZ and Internet security and multi-vendor network security technologies.
• Proficient with Load Balancer (F5 LTM/GTM), DNS/DHCP/IPAM/NTP (Bluecat), AAA (Clearpass, ISE), Proxy/DLP.
• Solid knowledge of VLAN, TCP/IP, UDP, routing and switching protocols, PKI and certificate handling.
• Experience with packet capture tools (Wireshark, tcpdump) and security tooling (Splunk, SevOne).
• Excellent incident handling, client interfacing, and clear communication under outages.
• Ability to work in fast-paced, high-demand environments and escalate when needed.

Responsibilities

• Provide operational support for network perimeter security technologies.
• Lead production triage for network incidents and coordinate with senior teams.
• Identify service impacts from monitors, dashboards and logs; communicate impacts to stakeholders.
• Deliver status updates and technical details for awareness communications.
• Identify potential production failure scenarios and escalate as needed.
• Document application flows and outage impacts for post-incident reviews.
• Ensure data quality and accuracy of incident tickets in the system of record.
• Generate ad-hoc reports and contribute to governance during triage and fixes.
• Support and extend focus areas to breaches, load balancing, DDI, proxy, and AAA as needed.

Skills

Network Operations

Firewall

IDS/IPS

NAT & FW concepts

Troubleshooting

Wireshark

Packet capture

Splunk

Multi-vendor support

Client interfacing

Tools

CheckPoint NGFW

Fortinet FortiGate

Palo Alto

Cisco Firepower

Juniper SRX

Bluecoat

Bluecat

Aruba Clearpass

Cisco ISE

TrendMicro TippinPoint

IPS signatures

F5 LTM

Job description

Shift and hours of work:

Each shift will be 12hrs, alternate week’s Wed will be an off day.

Shift Pattern A: Sun to Wed

Shift Pattern B: Wed to Sat

Responsibilities

• Operational Support of Network Perimeter Security technologies
• Technical areas of focus include but are not limited to firewall, network address translation, routing, and intrusion detection/prevention systems
• Lead production support triage efforts for network infrastructure incidents, manage bridge line troubleshooting and appropriate team engagement, engage in technical research and troubleshooting, and elevate to next level of leadership as needed
• Identify service impact, interpret monitors, dashboards, and logs; Work with senior team members to validate impacts and communicate all impacts to internal stakeholders and leadership
• Provide status updates and technical detail for awareness communications, ensure accuracy of all communications sent, and ensure any necessary follow-ups are scheduled.
• Identify possible production failure scenarios, vulnerabilities, and opportunities for improvement, and take ownership of escalation.
• Participate in the documentation of application flows, upstream/downstream impacts during outages, the customer experience in failure scenarios, contacts for various support needs and ensures appropriate documents and wikis are up to date and available for use during triage
• Responsible for data quality and completion of incident tickets, including ensuring all impacts are accurately recorded and documented in the system of record.
• Work ad-hoc reports and offline incidents at the direction of the senior team members or leadership
• Promote and enforce production governance during triage/testing and fix efforts, exercises judgment within defined procedures and practices to determine appropriate action.
• Technical areas of focus are on Firewall and IDS/IPS, and extends to other network security areas such as (but not limited to) Application Delivery (Load Balancer), DDI, Proxy, AAA.
• Must adhere to design standards and global design authority processes and procedures.
• The ability to assemble professional documents based on existing templates and ability to provide accurate work descriptions with assumptions, and caveats.
  

Required Skills

• Minimum 8+ years’ experience in a Network Operations support in the banking and finance industry.
• Extensive experience in configuring and troubleshooting the following Perimeter Security technologies:
  • CheckPoint NGFW (R80+)
  • Fortinet (FortiGate, FortiManager, etc)
  • Palo Alto NGFW, Cisco Firepower, or Juniper SRX
  • Mastery in NAT, Stateful Firewall concepts, HA and clustering protocols, FW policy management
  • Solid Experience with IDS/IPS such as TrendMicro TippinPoint, IPS Signatures
  • Tunneling protocols – SSL/TLS, IPSEC, GRE
• In-depth experience and understanding of network security technologies, principles, and practices such as in areas of DMZ and Internet Security.
• Well-rounded proficiency across multiple network security technologies:
  • Load Balancer - F5 LTM, GTM, iRules, SSLO, APM, NSX AVI
  • DNS/DHCP/IPAM/NTP – Bluecat
  • AAA - Aruba Clearpass, Cisco ISE
  • Proxy - (Bluecoat, Skyhigh Web Gateway), DLP (Alteon FireEye), HTTP
• Strong foundation in Network Data Technologies – VLAN, TCP/IP, UDP, HA/failover protocols (VRRP, HSRP, etc.), ANYCAST, Routing and Switching Protocols such as BGP, OSPF, STP, LACP, VPC, ARP.
• Experience and knowledge in digital certificates and public key infrastructure (PKI), certificate authority and trust chain, CRLs, OCSP, and secure deployment practices. Expertise in packet capture analysis using Wireshark, tcpdump/ssldump from L2 to L7 traffic flow.
• Broad experience using (both proactive and reactive) advanced tooling; Inclusive of but not limited to Splunk, SevOne, IBM Watson, Netscout, etc.
• Strong technical acumen and analytical skills with extensive experience in troubleshooting complex networking problems in a multi-vendor and multiple technology environment
• Excellent client interfacing skills, proven ability to manage and set client expectations.
• Ability to thrive in a fast-paced, high-performing, rapidly growing environment while balancing multiple, sometimes competing priorities.
• Excellent incident handling skills and ability to assess impact and urgency, and translate findings into actionable steps to resolution.
• Ability to make quick decisions and comfortable escalating to management when required.
• Firm understanding of IT Service Management processes.
• Strong verbal and written communication skills and ability to work with all levels of management.
• Self-starter/self-directed, organized and detail oriented.
• Demonstrates ownership: Is accountable and can hold others accountable (professionally)