Senior Network Engineer

WORKLE PTE. LTD.; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

WORKLE PTE. LTD. in Singapore seeks an experienced Network Engineer to design, implement, and manage LAN/WAN, data centre, DR, and security systems.

You will configure routing protocols, manage firewalls, and ensure secure connectivity across multiple sites and marine-related systems. Ideal candidates have 7+ years in network engineering/cybersecurity, hands-on firewall experience, and familiarity with ISO27001/NIST.

Qualifications

• Bachelor's degree in IT/CS/Engineering or related field.
• 7+ years in network engineering, cybersecurity, telecoms, or infra operations.
• Strong knowledge of LAN/WAN, routing, switching, OSPF, BGP, IPsec and MFA.
• Hands-on with enterprise firewalls (Palo Alto, Fortinet, Cisco, Juniper).
• Experience with IDS/IPS, NAC, SIEM, NMS platforms, vulnerability tools.
• Familiarity with ISO27001/NIST, security audits, and risk management.
• 4G/5G RAN deployment, telecom site implementation and commissioning.
• Scripting/automation (Python, Bash, PowerShell, Ansible) preferred.

Responsibilities

• Design, configure, implement, maintain and troubleshoot LAN/WAN, data centre, DR, routers, switches, firewalls, VPNs, and NMS.
• Configure routing protocols (OSPF/BGP) and secure connectivity.
• Monitor performance, investigate incidents, perform root-cause analyses and implement fixes.
• Maintain network security solutions including NAC, SIEM, and zero trust measures.
• Conduct vulnerability assessments, patch management, system hardening, and remediation.
• Support ISO 27001, NIST compliance, audits, and security improvements.
• Perform system integration testing, commissioning, and acceptance testing per specs.
• Provide onsite and remote technical support to customers and project teams.
• Coordinate with vendors, subcontractors and customers on deployment activities.
• Prepare network diagrams, SOPs, incident reports and audit docs.
• Support shift work including nights and weekends as needed.

Skills

LAN/WAN

Routing & Switching

Network security

Threat detection & SIEM

NMS and monitoring

Firewalls (Palo Alto, Fortinet, Cisco,

Education

Bachelor's degree in IT/CS/Telecom/Engineering

Tools

Palo Alto

Fortinet

Cisco ASA/FTD

Juniper

Splunk/QRadar/ArcSight/Elastic

Nessus/NAC tools

Job description

Responsibilities

• Design, configure, implement, maintain, and troubleshoot LAN/WAN, data centre, disaster recovery (DR), routers, switches, firewalls, VPNs, and network monitoring systems (NMS).
• Configure and manage routing and switching protocols, including OSPF and BGP, as well as network access controls and secure connectivity.
• Monitor network performance, investigate incidents, perform root-cause analysis, and implement corrective and preventive measures.
• Implement and maintain network security solutions, including firewalls, IDS/IPS, Network Access Control (NAC), SIEM, access controls, network segmentation, and Zero Trust security measures.
• Perform security monitoring, incident response, vulnerability assessments, patch management, system hardening, and remediation activities.
• Support compliance with ISO 27001, NIST guidelines, internal security policies, and applicable industry standards.
• Maintain security audit records and assist with risk assessments and security improvement initiatives.
• Execute 4G/5G Radio Access Network (RAN) installation, integration, commissioning, alarm monitoring, and troubleshooting.
• Support Telecom Implementation (TI), site integration, BFT, cable audits, quality inspections, and Technical Site Survey Report (TSSR) coordination.
• Coordinate with vendors, subcontractors, customers, and project teams to resolve technical issues and support deployment activities.
• Install, integrate, test, commission, and maintain marine communication, navigation, surveillance, and safety systems.
• Support marine systems such as GMDSS, radar, ECDIS, AIS, DGPS, LRIT, VDR, VSAT, autopilot, compass systems, echo sounders, speed logs, and associated navigation interfaces.
• Maintain radio communication systems, including microwave radio, SCADA radio, trunked radio, crane radio, radio dispatch, and satellite phones.
• Support wired communication and alarm systems, including Public Address and General Alarm (PAGA), Page/Party, Talk-Back, Smart Series, Driller Communication, analogue PABX, VoIP, and sound-powered telephone systems.
• Maintain surveillance and security systems, including CCTV, access control, intrusion detection, Person on Board (POB) systems, and associated security interfaces.
• Troubleshoot navigation and safety equipment, including navigation and obstruction lights, RACON, fog horns, Bridge Navigational Watch Alarm Systems (BNWAS), and related interfaces.
• Support marine entertainment systems, satellite communications, and Environmental Monitoring Systems (EMS), where applicable.
• Perform system integration testing, functional checks, fault diagnosis, commissioning, and acceptance testing in accordance with project specifications and applicable standards.
• Provide onsite and remote technical support to customers and project teams.
• Coordinate technical requirements, materials, spare parts, vendor support, and issue resolution.
• Prepare and maintain network diagrams, technical documentation, standard operating procedures (SOPs), incident reports, commissioning records, and audit documentation.
• Support shift work, including nights, weekends, and public holidays, when required by project or operational needs.

Requirements

• Bachelor's degree in information technology, Computer Science, Telecommunications, Electronics, Engineering, or a related discipline.
• At least 7 years of relevant experience in network engineering, cybersecurity, telecommunications, or infrastructure operations.
• Strong knowledge of LAN/WAN, routing, switching, OSPF, BGP, IPsec, SSL/TLS, SSL VPN, GRE, DMVPN, ACLs, AAA, RADIUS, TACACS+, 802.1X, DNSSEC, and multi-factor authentication (MFA).
• Hands-on experience with enterprise firewalls such as Palo Alto, Fortinet, Cisco ASA/FTD, or Juniper.
• Experience with IDS/IPS, NAC, SIEM, NMS platforms, vulnerability assessment tools, and network security monitoring.
• Familiarity with cybersecurity frameworks, including ISO 27001 and NIST, as well as vulnerability management, incident response, system hardening, and security audits.
• Experience in 4G/5G RAN deployment, telecom site implementation, integration, and commissioning.
• Familiarity with SIEM platforms such as Splunk, IBM QRadar, ArcSight, or Elastic, and NMS platforms such as SolarWinds.
• Experience with vulnerability assessment tools such as Nessus or equivalent and NAC solutions such as Cisco ISE or FortiNAC.
• Knowledge of marine communication, navigation, surveillance, and safety technologies, including GMDSS, radar, ECDIS, AIS, DGPS, LRIT, VDR, VSAT, PAGA, and PABX, will be an added advantage.
• Familiarity with scripting and automation tools such as Python, Bash, PowerShell, or Ansible is preferred.
• Strong troubleshooting, analytical, documentation, communication, and vendor coordination skills.
• Ability to work independently and collaboratively across technical teams, customers, and project stakeholders.

EA License No: 19C9611

EA Personnel Reg No: R22108807 Liang Syeh Wei (Shevy)