Senior Network Engineer (Hedge Fund)

CHARTERHOUSE PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

CHARTERHOUSE PTE. LTD. is seeking an experienced Senior Network Engineer to design, build, operate, and enhance enterprise network infrastructure across on-prem and cloud environments.

The role entails hands-on engineering with architecture ownership, including firewall governance and Azure networking. You will drive end-to-end network transformations, optimize routing and switching, and implement automation with Python, Ansible, and Terraform.

Qualifications

• Minimum 8 years hands-on network engineering with 3 years owning architecture/design.
• Experience in highly regulated environments (financial services a plus).
• Active hands-on in configuration, troubleshooting, upgrades and migrations.
• Strong in BGP, OSPF, VLANs, spanning tree, QoS, multicast.
• Experience with Azure networking: VNet, hub-spoke, ExpressRoute, VPN, NSG/ASG.
• Experience with WAN: SD-WAN, MPLS, internet edge design, international connectivity.
• IaC/automation: Python, Ansible, Terraform.
• Strong monitoring, logging, and flow analysis skills.
• End-to-end network implementations across multiple locations.
• Willingness for after-hours changes and on-call rotation.

Responsibilities

• Design, implement, and support enterprise network infra (LAN/WAN, data centre, cloud).
• Own network architecture decisions; ensure secure, scalable, highly available solutions.
• Configure and troubleshoot routing, switching across enterprise platforms.
• Manage next-gen firewall policies, NAT, IPS, remote access, and governance.
• Design Azure networking solutions: VNet, hub-spoke, ExpressRoute, Firewall, NSG/ASG.
• Deliver multi-site network transformation projects and cutovers.
• Perform advanced troubleshooting with packet captures and traffic analysis.
• Develop and improve automation capabilities using Python, Ansible, Terraform.
• Monitor performance, analyse traffic, and improve reliability.
• Participate in change activities and escalation/on-call support.

Skills

Network architecture

Enterprise routing & switching

Network automation

Azure networking

WAN/LAN design

Troubleshooting

Communication

Education

CCNP Enterprise

CCIE

AZ-700

Tools

Python

Ansible

Terraform

Job description

Role Overview

We are seeking an experienced Senior Network Engineerto design, build, operate, and enhance enterprise network infrastructure within a complex and highly regulated environment. The successful candidate will be a hands-on technical expert with strong architecture and engineering capabilities, responsible for delivering secure, resilient, and scalable network solutions across on-premise and cloud environments.

This role requires someone who remains deeply technical, with proven experience in network architecture, troubleshooting, automation, and large-scale infrastructure transformation. Candidates whose recent experience is focused primarily on governance, strategy, or team management without hands-on engineering exposure will not be suitable.

Key Responsibilities

• Design, implement, and support enterprise network infrastructure, including LAN/WAN, data centre, cloud, and global connectivity environments.
• Own network architecture and technical design decisions, ensuring solutions are secure, scalable, highly available, and aligned with business requirements.
• Configure, troubleshoot, and optimise routing and switching technologies across enterprise-grade platforms.
• Manage next-generation firewall solutions, including security policies, NAT, IPS, remote access, and firewall governance.
• Design and support Azure networking solutions, including virtual networks, hub-and-spoke architectures, ExpressRoute, VPN Gateway, Azure Firewall, and network security controls.
• Deliver network transformation projects, including multi-site deployments, migrations, upgrades, and major infrastructure cutovers.
• Perform advanced troubleshooting using packet capture, traffic analysis, and structured fault isolation across the full network stack.
• Develop and improve network automation capabilities using tools such as Python, Ansible, and Terraform.
• Monitor network performance, analyse traffic flows, and improve reliability through proactive capacity and performance management.
• Participate in change activities, after-hours implementations, and escalation support when required.

Requirements

• Minimum 8 years of hands-on network engineering experience, with at least 3 years owning network architecture and design responsibilities.
• Experience working within financial services or other highly regulated environments is highly advantageous.
• Must be actively involved in network engineering activities today, including configuration, troubleshooting, optimisation, and infrastructure upgrades.
• Strong expertise in enterprise routing and switching technologies, including BGP, OSPF, VLANs, spanning tree, QoS, and multicast.
• Proven experience designing and operating next-generation firewall platforms, including security policies, ruleset management, NAT, IPS, and secure remote access solutions.
• Strong knowledge of Azure networking services, including: Virtual Networks (VNet), Hub-and-spoke network architecture, ExpressRoute, VPN Gateway, Azure Firewall, Network Security Groups (NSG) and Application Security Groups (ASG)
• Experience with wide area network technologies, including SD-WAN, MPLS, internet edge design, carrier management, and international connectivity solutions.
• Strong understanding of core network services, including: - DNS, - DHCP, - IP Address Management (IPAM), - DNS security solutions, - Enterprise wireless network design and RF planning
• Excellent troubleshooting skills with hands-on experience in: Packet capture and network traffic analysis, Latency and jitter investigation, Layer 1–7 fault isolation
• Experience implementing network automation and infrastructure-as-code using technologies such as Python, Ansible, or Terraform.
• Strong experience with enterprise network monitoring, logging, and flow analysis platforms.
• Proven track record delivering end-to-end network implementations, including large-scale builds, migrations, and cutovers across multiple locations.
• Willingness to support planned after-hours changes and participate in an escalation/on-call rotation.
• Strong communication skills with the ability to explain technical solutions, risks, and business impact to both technical and non-technical stakeholders.

Preferred Qualifications

• CCNP Enterprise, CCIE, or equivalent senior-level networking certification.
• Microsoft Certified: Azure Network Engineer Associate (AZ-700).
• Vendor-specific firewall certifications (e.g., Palo Alto, Fortinet, Check Point) are advantageous.

EA License no.: 16S8066 I Reg no.: R1110125

Only shortlisted applicants will be notified.