Senior Network Engineer - Enterprise Campus & SD-WAN

Optimum Solutions Pte Ltd; Singapore; On-site; SGD 90,000 - 180,000; Full time

Job summary

Optimum Solutions Pte Ltd is seeking a Network Engineer (Campus and NAC) to join its infrastructure team in Singapore. You will lead end-to-end design, build, and lifecycle engineering of the campus network, wireless architecture, WAN/SD-WAN, and NAC platforms.

You will be the on-site technical authority, driving hands-on implementations, wireless surveys, site deployments, and data centre cage installations, while serving as the primary escalation point for complex access and campus networking

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related discipline.
• 6 to 10 years hands-on enterprise campus network engineering experience.
• Proven implementation experience with Cisco Catalyst 9K switching in large-scale enterprise environments.
• Strong background in enterprise wireless design (Cisco, Juniper, Aruba, or Meraki) and proficiency with wireless survey tools (Ekahau) or equivalent.
• Advanced expertise in Cisco ISE (802.1X/MAB, profiling, posture, guest, and TACACS+ policy design).
• Familiarity with Forescout eyeSight/eyeControl and NAC coexistence strategies.
• Hands-on SD-WAN design and deployment (Cisco Catalyst SD-WAN/Viptela, Meraki, or similar) with Singapore telecom carriers.

Responsibilities

• Campus & Wireless Engineering: Design and implement Cisco Catalyst 9K campus switching standards, hardware refreshes, software upgrades, and network segmentation.
• Hands-on Implementation: Lead on-site deployments, structured cabling coordination, equipment migrations, and data centre cage infrastructure work.
• Network Access Control (NAC): Architect and configure Cisco ISE policies (802.1X, MAB, device profiling, posture assessment, guest access, and TACACS+ device administration).
• Forescout & Coexistence: Design eyeSight classification, eyeControl actions, and ensure visibility over agentless, IoT, and OT devices; maintain NAC coexistence designs.
• WAN, SD-WAN & Governance: Design enterprise SD-WAN topologies, site templates, and rollout strategies; manage circuit implementations with carriers.
• Compliance & ITIL Change Management: Author engineering designs and implementation plans adhering to ITIL change processes; support audit requirements with robust access controls.

Skills

Enterprise campus network engineering

Wireless design

Analytical & troubleshooting

Collaborative communication

NAC coexistence understanding

Education

Bachelor’s degree in Computer Science/IT or related

Tools

Cisco Catalyst 9K switching

Cisco ISE

Forescout eyeSight/eyeControl

Ekahau (survey tools)

SD-WAN (Catalyst / Viptela)

Meraki/Aruba/Juniper wireless platforms

Job description

We are seeking a Network Engineer (Campus and NAC) to join our dynamic infrastructure team supporting a premier banking and financial services institution in Singapore. In this role, you will lead the end-to-end design, build, and lifecycle engineering of our enterprise campus network, wireless architecture, WAN/SD-WAN, and Network Access Control (NAC) platforms.

As an on-site technical authority, you will spearhead hands-on implementations, hardware refreshes, wireless validation surveys, new site deployments, and data centre cage installations. You will serve as the primary engineering escalation point for complex access and campus networking challenges.

Responsibilities

• Campus & Wireless Engineering: Design and implement Cisco Catalyst 9K campus switching standards, hardware refreshes, software upgrades, and network segmentation. Engineer enterprise Wi-Fi 6/6E controller architectures and SSID/RF designs, and conduct predictive and validation surveys.
• Hands-on Implementation: Lead on-site deployments, structured cabling coordination, equipment migrations, and data centre cage infrastructure work.
• Network Access Control (NAC): Architect and configure Cisco ISE policies (802.1X, MAB, device profiling, posture assessment, guest access, and TACACS+ device administration).
• Forescout & Coexistence: Design Forescout eyeSight classification, eyeControl actions, and ensure comprehensive visibility over agentless, IoT, and OT devices. Define and maintain seamless coexistence designs between Cisco ISE and Forescout to prevent policy conflicts.
• WAN, SD-WAN & Governance: Design enterprise SD-WAN topologies, site templates, and rollout strategies. Manage new circuit implementations and service modifications directly with local telecommunications carriers.
• Compliance & ITIL Change Management: Author engineering designs and implementation plans adhering to strict ITIL change management processes. Support regulatory audit requirements (e.g., technology risk management frameworks) with robust access controls and change-evidence documentation.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, or a related discipline.
• 6 to 10 years of hands-on professional experience in enterprise campus network engineering.
• Proven implementation expertise with Cisco Catalyst 9K switching in large-scale enterprise environments.
• Strong background in enterprise wireless design (Cisco, Juniper, Aruba, or Meraki) and proficiency with wireless survey tools (Ekahau or equivalent).
• Advanced expertise in Cisco ISE (802.1X/MAB, profiling, posture, guest, and TACACS+ policy design).
• Familiarity with Forescout (eyeSight/eyeControl) and demonstrated understanding of multi-platform NAC coexistence strategies.
• Hands‑on experience in SD‑WAN design and deployment (Cisco Catalyst SD‑WAN/Viptela, Meraki, or similar) alongside experience interfacing with Singapore telecom carriers.
• Strong analytical, troubleshooting, and collaborative communication skills.

Good-to-Haves

• Experience with Cisco Catalyst Centre (DNAC), Meraki, Aruba, or Juniper wireless platforms.
• Prior experience in financial services or other highly regulated industries.
• Professional certifications such as Cisco CCNP Enterprise, Cisco SISE / CCNP Security, Forescout Certified Associate/Professional, or CWNA/CWDP.