Senior Network Engineer, NSCC

A*STAR - Agency for Science, Technology and Research; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

A*STAR - Agency for Science, Technology and Research seeks a hands-on Senior Network Engineer to design and operate enterprise-scale networks and security infrastructures in Singapore. You will implement architecture, capacity planning, and modernization initiatives, while supporting Check Point and Palo Alto firewalls and VPNs.

You will collaborate with cybersecurity and IT teams to deliver secure, resilient solutions and manage technology refreshes, migrations, and incident response in a

Qualifications

• Degree or higher in Computer Engineering, IT, CS or related field.
• Minimum 5 years in enterprise network and security engineering.
• CCNA/CCNP or higher certification.
• Firewall certifications (Check Point, Palo Alto or equivalent).
• Strong TCP/IP, routing, switching, VLANs, DNS, DHCP, VPN and security tech knowledge.

Responsibilities

• Design and implement enterprise network architectures and capacity plans.
• Support firewalls, VPNs, NDR systems, and access controls.
• Troubleshoot Check Point and firewall policies, NAT, clustering, and monitoring.
• Manage Extreme Networks switches/routers and Aruba wired/wireless infra.
• Collaborate with cybersecurity and infra teams on secure, resilient solutions.
• Lead network/security projects, technology refreshes, and migrations.

Skills

Cisco/Extreme/Aruba

Layer 2/3 switching

OSPF/BGP/VRRP

Network monitoring tools

Check Point Firewall

Palo Alto Firewall

VPN (IPSec/SSL)

Training/Certification

Education

Degree in Computer Engineering / IT / CS

Tools

Check Point

Palo Alto

Extreme Networks

HPE Aruba

Job description

Job Description

• Perform network architecture design, capacity planning, technology evaluation, and infrastructure modernization initiatives.
• Manage and support network security solutions, including firewalls, VPNs, NDR systems, and network access controls.
• Administer and troubleshoot Check Point firewalls, security policies, NAT, VPN, clustering, and security monitoring.
• Manage and support Extreme Networks switches, routers, fabric solutions, and network management platforms.
• Manage and support HPE Aruba wired and wireless network infrastructures.
• Work with Managed Service provider to support network and security incidents, service requests, and problem management, patching activities.
• Lead network troubleshooting and root-cause analysis for production issues.
• Develop and maintain network diagrams, operational procedures, technical documentation, and design standards.
• Collaborate with cybersecurity, infrastructure teams to deliver secure and resilient solutions.
• Initiate network/security infrastructure projects, technology refreshes, migration activities, and operational improvements.
• Assist in IT audit, develop and update SOP related to Network, Security domain.

Key Responsibilities

The Senior Network Engineer Shall

• Perform network architecture design, capacity planning, technology evaluation, and infrastructure modernization initiatives.
• Manage and support network security solutions, including firewalls, VPNs, NDR systems, and network access controls.
• Administer and troubleshoot Check Point firewalls, security policies, NAT, VPN, clustering, and security monitoring.
• Manage and support Extreme Networks switches, routers, fabric solutions, and network management platforms.
• Manage and support HPE Aruba wired and wireless network infrastructures.
• Work with Managed Service provider to support network and security incidents, service requests, and problem management, patching activities.
• Lead network troubleshooting and root-cause analysis for production issues.
• Develop and maintain network diagrams, operational procedures, technical documentation, and design standards.
• Collaborate with cybersecurity, infrastructure teams to deliver secure and resilient solutions.
• Initiate network/security infrastructure projects, technology refreshes, migration activities, and operational improvements.
• Assist in IT audit, develop and update SOP related to Network, Security domain.

Requirements

Technical Skills Requirements

The Candidate Shall Demonstrate Experience In

Network Infrastructure

• Cisco, Extreme Networks, Aruba, or equivalent enterprise networking technologies.
• Layer 2 and Layer 3 switching.
• OSPF, BGP, VRRP, and dynamic routing protocols.
• Campus, data centre, and enterprise network architecture.
• Network monitoring and performance management tools.

Security Technologies

• Check Point Firewall.
• Palo Alto Firewall.
• Network segmentation and Zero Trust principles.
• VPN technologies (IPSec and SSL VPN).
• Security policy design and administration.
• Network access control and authentication technologies.

Wireless Technologies

• Wireless network design and deployment.
• Wireless security and performance optimization.

Preferred Qualifications

The candidate shall possess:

• Degree in Computer Engineering, Information Technology, Computer Science, or a related discipline.
• Minimum 5 years' experience in enterprise network and security engineering.
• Cisco Certified Network Associate (CCNA), Cisco Certified Network Professional (CCNP) certification or higher.
• Firewall certification from one of the following:
  • Check Point Certified Security Administrator (CCSA) / CCSE
  • Palo Alto Networks Certified Network Security Administrator (PCNSA) / PCNSE
  • Equivalent industry-recognized firewall certification
• Proven experience supporting enterprise network environments.
• Strong working knowledge of TCP/IP, routing and switching, VLANs, DNS, DHCP, VPN, and network security technologies.
• ITIL Foundation Certification

Desirable Experience

• High-Performance Computing (HPC) network environments.
• Spine-leaf architecture.
• Data centre networking.
• 100GbE, 400GbE, InfiniBand, or other high-speed networking technologies.
• DWDM (Dense Wavelength Division Multiplexing).
• BGP routing in enterprise, ISP, or research network environments.
• Cloud networking (AWS, Azure, Google Cloud).
• Network automation and Infrastructure-as-Code.
• Security Operations Centre (SOC) and Network Operations Centre (NOC) environments.

Personal Attributes

The Successful Candidate Shall Demonstrate

• Strong analytical and problem-solving skills.
• Excellent verbal and written communication skills.
• Ability to work independently and under pressure.
• Strong sense of ownership and accountability.
• Positive attitude and customer-oriented mindset.
• Strong team-player with the ability to collaborate effectively across business, technical, application, marketing teams.

Ideal Candidate Profile

The ideal candidate is a hands-on Senior Network Engineer capable of architecting and operating enterprise-scale network and security infrastructures, with strong expertise in Check Point firewalls, Extreme Networks, HPE Aruba, routing, switching, wireless technologies, and high-speed networks, coupled with the operational maturity required to support Enterprise/HPC environments. Experience with BGP, DWDM, data centre networking, and HPC environments will be highly advantageous.