Network Security Engineer (Firewall – Check Point, Palo Alto & Fortinet)

NTT SINGAPORE PTE. LTD.; Singapore; On-site; SGD 90,000 - 140,000; Full time

Job summary

NTT Singapore Pte. Ltd. is seeking an experienced Network Security Engineer (L2/L3) to support and maintain enterprise firewall infrastructure in Singapore.

You will handle firewall operations, incident resolution, OS upgrades, and routine security tasks across Check Point, Palo Alto, and Fortinet platforms. The ideal candidate has 4+ years of hands-on firewall and network security experience, with knowledge of BGP/OSPF and IPsec VPN.

Qualifications

• Diploma or Degree in Information Technology, Computer Science, Network Engineering, or a related discipline.
• Minimum 4 years of relevant experience in Network Security or Firewall Engineering, with L2/L3 operational support exposure.
• Hands-on experience administering and troubleshooting enterprise firewalls, particularly Check Point, Palo Alto, and Fortinet.

Responsibilities

• Provide L2/L3 operational support for enterprise firewall infrastructure.
• Administer, configure, maintain, and troubleshoot Check Point, Palo Alto, and Fortinet firewalls.
• Perform firewall OS upgrades, security patching, and firmware maintenance.
• Support firewall migration, technology refresh, and infrastructure upgrade projects.
• Configure and troubleshoot BGP, OSPF, and static routing.
• Manage and troubleshoot Check Point IPsec VPN connectivity.
• Implement firewall security policies, rule changes, and configuration updates.
• Investigate incidents, perform root cause analysis, and resolve complex network security issues.
• Support firewall high availability, failover, and disaster recovery testing.
• Monitor firewall performance, availability, capacity, and security compliance.
• Collaborate with network, infrastructure, cybersecurity, application, and vendor teams.
• Maintain technical documentation, operational procedures, and incident reports.
• Participate in scheduled overnight maintenance, weekend implementations, and emergency support.
• Identify automation opportunities and drive operational improvements.

Skills

Network security

Firewall engineering

Troubleshooting

Incident response

VPN troubleshooting

Education

Diploma or Degree in IT/CS/Networking

Tools

Check Point

Palo Alto

Fortinet

BGP

OSPF

Job description

Network Security Engineer (Firewall - Check Point, Palo Alto & Fortinet)

Location: Changi, Singapore

Employment Type: 12-Month Renewable Contract

Experience: 4+ years in Network Security / Firewall Engineering

Job Summary

We are seeking an experienced and hands-on Network Security Engineer (L2/L3) to support and maintain enterprise firewall and network security infrastructure. The role involves firewall operations, incident resolution, firewall OS upgrades, technology refresh projects, routing configuration, VPN administration, and security compliance.

The ideal candidate will have strong technical experience with Check Point, Palo Alto, and Fortinet firewalls, along with practical knowledge of BGP, OSPF, and IPsec VPN technologies.

Key Responsibilities

• Provide L2/L3 operational support for enterprise firewall infrastructure.

• Administer, configure, maintain, and troubleshoot Check Point, Palo Alto, and Fortinet firewalls.

• Perform firewall OS upgrades, security patching, and firmware maintenance.

• Support firewall migration, technology refresh, and infrastructure upgrade projects.

• Configure and troubleshoot BGP, OSPF, and static routing.

• Manage and troubleshoot Check Point IPsec VPN connectivity.

• Implement firewall security policies, rule changes, and configuration updates.

• Investigate incidents, perform root cause analysis, and resolve complex network security issues.

• Support firewall high availability, failover, and disaster recovery testing.

• Monitor firewall performance, availability, capacity, and security compliance.

• Collaborate with network, infrastructure, cybersecurity, application, and vendor teams.

• Maintain technical documentation, operational procedures, and incident reports.

• Participate in scheduled overnight maintenance, weekend implementations, and emergency support.

• Identify automation opportunities and drive operational improvements.

Requirements

• Diploma or Degree in Information Technology, Computer Science, Network Engineering, or a related discipline.

• Minimum 5 years of relevant experience in Network Security or Firewall Engineering, with L2/L3 operational support exposure.

• Hands-on experience administering and troubleshooting enterprise firewalls, particularly Check Point, Palo Alto, and Fortinet.

• Practical experience performing firewall OS upgrades, migrations, and technology refresh activities.

• Strong understanding of TCP/IP networking, BGP, OSPF, and static routing.

• Experience configuring and troubleshooting Check Point IPsec VPN.

• Knowledge of firewall policies, NAT, high availability, failover, and network security best practices.

• Ability to troubleshoot complex firewall and network connectivity issues independently.

• Experience supporting enterprise or financial services infrastructure environments is advantageous.

• Relevant certifications such as Check Point CCSA/CCSE, Palo Alto PCNSA/PCNSE, Fortinet NSE/FCP/FCSS, or CCNA/CCNP would be advantageous.

• Willingness to support night, weekend, and after-hours maintenance activities when required.