Senior Network Engineer

pccw solutions insys pte. ltd.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

pccw solutions insys pte. ltd. in Singapore seeks an experienced Network Engineer to design, deploy, secure, and maintain complex enterprise networks and security infrastructures across multi-vendor environments.

You will lead end-to-end network operations—from LAN/WLAN architecture and firewall management to advanced routing, security hardening, and 24x7 incident support—serving as escalation point. The role requires CCNP, PCNSE/CCSE, 8+ years of experience, and strong firewall knowledge.

Qualifications

• Bachelor's degree in information technology, Computer Science, or a related field.
• Minimum 8 years of experience in handling Network and Security Domain
• Minimum CCNP is required.
• PCNSE or CCSE equivalent certification is value added.
• Proven experience in managing Palo Alto, Check Point and Fortigate firewalls.
• Proficiency in configuring and troubleshooting Cisco or equivalent switches and Routers.
• Hands-on experience with Aruba ClearPass Policy Manager (CPPM) or similar access control systems.
• Proficient in OSPF and BGP configuration.
• Strong knowledge of network protocols, routing, and switching, and Wi‑Fi standards (802.11 a/b/g/n/ac/ax).
• Excellent problem-solving and analytical skills.
• Excellent skillset on Network Analysis and Migration planning to handle Network projects.
• Effective communication and teamwork abilities.

Responsibilities

• Network Design & Architecture: Plan, design, and implement enterprise LAN and wireless networks (802.11 standards).
• Core Infrastructure & Device Management: Configure, deploy, and manage multi-vendor switches/routers; firewall management.
• Security, Compliance & Incident Response: Lead RCA, ensure SLA compliance, patching, and CIS-aligned hardening.
• Lifecycle & Asset Management: Upgrades, inventory, IPAM, and lifecycle documentation.
• Operations & Facility Support: Health checks, and data center power recovery coordination.

Skills

Network design

Firewall management

Routing & switching

Wi-Fi 802.11

CPPM

Incident response

Multi-vendor support

Education

Bachelor's degree in IT/CS

CCNP certification

PCNSE or CCSE certification

Tools

Cisco IOS devices

Palo Alto Firewalls

Fortigate Firewalls

Aruba ClearPass CPPM

IPAM tooling

Job description

We are seeking an experienced and proactive Network Engineer to design, deploy, secure, and maintain complex enterprise network and security infrastructures. In this role, you will lead end-to-end network operations—from LAN/WLAN architecture and firewall management to advanced routing, security hardening, and 24x7 incident support. You will serve as a technical escalation point, ensuring high availability, compliance, and seamless operational performance across multi-vendor customer environments.

Key Responsibilities:

1. Network Design & Architecture

• LAN/WLAN Solutions: Plan, design, and implement enterprise LAN and wireless networks (802.11 standards), including conducting RF site surveys, coverage analysis, and optimizing Access Point (AP) placement.

• Documentation & Topology: Develop and maintain network topologies, high-level/low-level designs (HLDs/LLDs), capacity plans, and migration strategies for technology refresh cycles.

2. Core Infrastructure & Device Management

• Routing & Switching: Configure, deploy, and manage multi-vendor switches (Cisco Catalyst/Nexus, Alcatel, Juniper) and routers. Formulate tech-refresh configurations and resolve critical WAN/LAN connectivity issues.

• Firewall & Security Management: Deploy and manage Palo Alto, Check Point, and Fortigate firewalls. Onboard devices to central management consoles, enforce security policies, configure IPSEC (IKE/Crypto maps), and maintain configuration baselines.

• Wireless & Access Control: Manage Wireless LAN Controllers (WLC) with SSO, FlexConnect, and IAP/EWC concepts. Administer Aruba ClearPass Policy Manager (CPPM) for RADIUS authentication, certificates, and access control.

• Load Balancers: Deploy and configure F5 Local Traffic Managers (LTM), setting up SSL proxies, Virtual IPs (VIPs), and iRules.

3. Lifecycle & Asset Management

• Software & Firmware Upgrades: Plan, coordinate, and execute scheduled upgrades for routers, switches, firewalls, and security appliances, minimizing downtime through managed maintenance windows.

• Asset Tracking & Inventory: Maintain an accurate inventory of all network assets (including UPS systems) across customer sites, ensuring complete lifecycle documentation (installation, warranties, and maintenance logs).

• IPAM & Resources: Oversee enterprise-level IP Address Management (IPAM), subnet inventories, and reservation policies to prevent conflicts.

4. Security, Compliance & Incident Response

• Incident Support (L2/L3): Provide technical leadership for complex network incidents, driving root cause analysis (RCA) and ensuring strict SLA compliance.

• Vulnerability Mitigation & Hardening: Oversee the implementation of security patches, hotfixes, and CIS-aligned hardening baselines. Conduct periodic configuration and firewall rule reviews.

• Access Governance & SIEM: Perform periodic network account reviews, monitor privileged access, ensure SIEM log integration, and oversee automated configuration backups and disaster recovery (DR) exercises.

5. Operations & Facility Support

• Monitoring & Health Checks: Oversee daily operational health checks, traffic trends, and proactive monitoring to detect anomalies early.

• Facility Power Operations: Coordinate data center power shutdown and recovery activities, maintaining robust power recovery runbooks for business continuity.

Requirements:

• Bachelor’s degree in information technology, Computer Science, or a related field.
• Minimum 8 years of experience in handling Network and Security Domain
• Minimum Cisco Certified Network Professional CCNP is required.
• PCNSE or CCSE equivalent certification is value added.
• Proven experience in managing Palo Alto, Check Point and Fortigate firewalls.
• Proficiency in configuring and troubleshooting Cisco or equivalent switches and Routers.
• Hands‑on experience with Aruba Clear Pass Policy Manager (CPPM) or similar access control systems.
• Proficient in OSPF and BGP configuration.
• Strong knowledge of network protocols, routing, and switching, and Wi‑Fi standards (802.11 a/b/g/n/ac/ax)
• Excellent problem‑solving and analytical skills.
• Excellent skillset on Network Analysis and Migration planning to handle Network projects
• Effective communication and teamwork abilities.

Preferred Skills:

• Familiarity with network monitoring and management tools.
• ITIL Foundation certification or higher is preferred.
• Experience in Advanced Network on Network Automation and ACI Infrastructure deployment.
• Experience in Hybrid Network transition from on‑premises networks to cloud.