Senior Network Engineer

liquid group pte. ltd.; Singapore; On-site; SGD 120,000 - 160,000; Full time

Job summary

Liquid Group is seeking a Senior Network Engineer to design, implement and manage enterprise networking in AWS for fintech services in Singapore. You will own the network lifecycle from deployment to monitoring, upgrades and incident response, ensuring security and reliability at scale.

You will work with AWS Direct Connect and firewall platforms (Check Point, FortiGate, Palo Alto) and coordinate with Cloud, DevOps, Security, SOC and partners, including on-call rotation.

Qualifications

• 7+ years hands-on experience in enterprise network engineering and cloud networking.
• Proven track record designing and operating AWS network environments from ground up.
• Deep expertise with Check Point, Fortinet FortiGate, and Palo Alto firewalls.
• Strong knowledge of VPCs, Transit Gateway, VPNs, routing, NAT, DNS, and security groups.
• Experience with AWS Direct Connect and cross-region connectivity.
• Ability to plan HA, DR, and fault-tolerant network architectures.
• Experience supporting production-critical fintech or payments ecosystems is a plus.

Responsibilities

• Design, build, and manage enterprise networking in AWS for production.
• Own network infrastructure lifecycle from deployment to monitoring and upgrades.
• Deploy and manage firewall policies across Check Point, FortiGate, and Palo Alto in AWS.
• Configure NAT, routing, security zones, and VPN connectivity.
• Perform firewall patching, migrations, and vulnerability remediation.
• Maintain AWS networking components: VPCs, subnets, IGW, NAT, SGs, NACLs, VPC peering, Transit Gateway.
• Set up AWS Direct Connect and ensure redundancy and failover connectivity.
• Collaborate with Cloud, DevOps, Security, SOC, and partners; provide on-call support.
• Conduct security reviews and network architecture improvements.
• Support DR testing and incident response exercises.

Skills

AWS Networking

Network Design & Implementation

AWS Direct Connect

Check Point

Fortinet FortiGate

Palo Alto Networks

VPC

Transit Gateway

BGP

Site-to-Site VPN

Firewall Management

Network Security

High Availability

Cloud Connectivity

Disaster Recovery

Production Support

Job description

About

Liquid Group is a FinTech payments services group based in Singapore. Liquid empowers and connects businesses and individuals to make transactions in a smart, secure, and cost-effective way, anywhere in the world.

We operate a regional payment network that enables cross-border QR payment services for e-wallet operators, banks, and merchants. We also provide white-label solutions to accelerate the development and adoption of mobile payments for our business partners.

We work collaboratively and adaptively, exploring innovative ideas and solving challenging problems to develop our products. Together, we ensure efficiency, security, and convenience for our partners and customers.

Job Scope

• Design, build, implement, configure, and manage enterprise networking infrastructure within AWS cloud environments.
• Own network infrastructure throughout its lifecycle, from initial setup and production deployment to monitoring, upgrades, troubleshooting, and ongoing maintenance.
• Deploy, configure, and manage Check Point, Fortinet FortiGate, and Palo Alto Networks firewalls in AWS environments.
• Configure and maintain firewall policies, NAT rules, routing, security zones, access controls, and VPN connectivity.
• Perform firewall patching, firmware upgrades, vulnerability remediation, configuration backups, and lifecycle management.
• Design, implement, and manage AWS networking components, including:VPCs, public and private subnets, and route tablesInternet Gateways and NAT GatewaysSecurity Groups and Network ACLsVPC Peering and Transit GatewayLoad BalancersSite-to-Site VPN and private connectivity
• Set up, configure, and manage AWS Direct Connect, including Direct Connect Gateway, Virtual Interfaces, BGP configuration, routing, redundancy, failover, and VPN backup connectivity.
• Establish and maintain secure connectivity between AWS environments and external partners, service providers, financial networks, and third parties.
• Troubleshoot complex networking issues involving routing, firewalls, VPNs, connectivity, latency, packet loss, DNS, and application performance.
• Monitor network availability, utilisation, performance, security, and capacity to ensure reliable operations.
• Conduct network security assessments, firewall rule reviews, and access control reviews.
• Plan and execute network upgrades, migrations, and architecture improvements.
• Support Disaster Recovery (DR) planning, testing, and failover exercises.
• Maintain network architecture diagrams, firewall documentation, routing information, configuration records, and operational runbooks.
• Prepare implementation plans, rollback procedures, test plans, and validation steps for production network changes.
• Collaborate closely with Cloud, DevOps, Security, SOC, Application, and external vendor teams.
• Provide production support and participate in an on‑call rotation.

Requirements

• At least 7 years of hands‑on experience in Network Engineering, Cloud Networking, or Network Security.
• Proven experience designing and building AWS network environments from the ground up.
• Strong hands‑on experience with Check Point firewalls.
• Strong hands‑on experience with Fortinet FortiGate firewalls.
• Experience with Palo Alto Networks firewalls.
• Strong hands‑on experience in AWS networking design, implementation, and operations.
• Proven experience implementing and managing AWS Direct Connect.
• Strong understanding of the following networking technologies and concepts:AWS VPC architecture and subnettingTransit Gateway and Direct ConnectSite‑to‑Site VPN and BGPRouting, NAT, and DNSSecurity Groups and Network ACLsLoad Balancers and network segmentation
• Experience designing and implementing high availability, redundancy, and failover solutions.
• Proven ability to troubleshoot complex cloud networking and third‑party connectivity issues.
• Strong understanding of network security principles, firewall governance, and access control.
• Experience supporting business‑critical production environments.

Preferred Qualifications

• AWS Certified Advanced Networking – Specialty certification.
• Check Point CCSA or CCSE certification.
• Fortinet FCP or relevant NSE certification.
• Palo Alto Networks PCNSA or PCNSE certification.
• Experience in fintech, banking, payments, or other regulated industries.
• Experience with network automation using Terraform, Ansible, or Python.

Key Skills

• AWS Networking
• Network Design & Implementation
• AWS Direct Connect
• Check Point
• Fortinet FortiGate
• Palo Alto Networks
• VPC
• Transit Gateway
• BGP
• Site‑to‑Site VPN
• Firewall Management
• Network Security
• High Availability
• Cloud Connectivity
• Disaster Recovery
• Production Support