Senior Network Project Engineer

DATA CONNECT TECHNOLOGIES PTE. LTD.; Singapore; On-site; SGD 70,000 - 90,000; Full time

Job summary

DATA CONNECT TECHNOLOGIES PTE. LTD. in Singapore is seeking an experienced Network Security Engineer to lead the delivery of network and security projects. The candidate will design secure architectures and implement automation scripts for efficiency.

This role requires expertise in networking protocols such as BGP and OSPF, experience with firewalls including Palo Alto and Fortinet, and strong troubleshooting skills. Join us to enhance our operational capabilities and secure our network services.

Qualifications

• Strong knowledge in networking protocols (BGP, OSPF) and WAN technologies (MPLS, SD-WAN).
• Experience implementing security measures and management of firewalls.
• Proficient in scripting for automation of deployment and monitoring.

Responsibilities

• Lead end-to-end delivery of network and security projects.
• Design scalable and secure network architectures.
• Implement and manage security frameworks and compliance measures.
• Develop automation scripts for efficient deployment and monitoring.

Skills

Networking Design

Security Implementation

Automation Scripting (Python, Bash, Ansible)

Troubleshooting

Tools

Palo Alto Networks

Fortinet

Check Point

NetGain Systems

Job description

Key Responsibilities

1. Project Delivery & Implementation

• Lead end-to-end delivery of network and security projects (LAN, WAN, DC, Hybrid Cloud)

• Execute deployment, configuration, migration, and cutover activities

• Develop MOPs, implementation plans, and rollback procedures

• Ensure smooth transition from project delivery to managed services/NOC operations

2. Network Design & Architecture

• Design scalable, resilient, and secure network architectures (Campus, Data Centre, Multi-site)

• Produce HLD and LLD documentation

• Implement segmentation, zoning, and high-availability (HA) designs

• Support hybrid environments integrating on-prem and cloud

3. Monitoring, Observability & NetGain Integration

• Deploy and integrate monitoring platforms such as NetGain Systems (Cloud Vista, EMedge)

• Configure SNMP, credential polling, and telemetry collection across network and server infrastructure

• Define alert thresholds, policies, and tuning strategies aligned with operational baselines

• Integrate monitoring with incident workflows and escalation models in NOC environments

4. Security Implementation

• Implement and manage firewalls (e.g., Palo Alto Networks, Fortinet, Check Point)

• Configure VPNs, NAT, IDS/IPS, and Zero Trust access controls

• Support SIEM integration (e.g., QRadar) and log forwarding strategies

• Ensure compliance with security frameworks (e.g., ISO 27001)

5. Managed Services & NOC Alignment

• Align project deliverables with managed services operating models (L1/L2/L3 support)

• Define monitoring KPIs, SLAs, and alerting thresholds for steady-state operations

• Support onboarding of devices into NMS platforms and ensure observability readiness

• Work closely with NOC teams for knowledge transfer and operational acceptance

6. Automation & Optimization

• Develop automation scripts (Python, Bash, Ansible) for:

  • Configuration deployment

  • Monitoring onboarding

  • Health checks and reporting

• Improve operational efficiency through automation of repetitive tasks

• Integrate APIs from network devices and monitoring tools where applicable

7. Troubleshooting & Performance Optimization

• Provide L3 support for complex network and security issues

• Conduct root cause analysis (RCA) and implement preventive improvements

• Perform failover testing, performance tuning, and validation

8. Documentation & Reporting

• Maintain detailed network diagrams and system documentation

• Prepare project status reports, risk logs, and technical write-ups

• Deliver as-built documentation and operational handover materials

Technical Requirements

Core Networking

• Routing & Switching (BGP, OSPF, VLANs, STP)

• WAN technologies (MPLS, SD-WAN, IPsec VPN)

• Data Centre networking (VXLAN, Spine-Leaf architecture)

Security

• Firewalls: Palo Alto Networks, Fortinet, Check Point

• IDS/IPS, NAT, segmentation, hardening

• Secure access and Zero Trust concepts

Monitoring & NMS

• NetGain Systems Cloud Vista / EMedge (preferred)

• SNMP (v2c/v3), Syslog, NetFlow

• Experience with tools like ManageEngine, SolarWinds (optional)