Senior Network Security Architect

SAGL CONSULTING PTE. LTD.; Singapore; On-site; SGD 100,000 - 150,000; Full time

Job summary

A leading consulting firm in Singapore is seeking an experienced specialist to define and architect the Network Security strategy, covering firewall design, Zero Trust, and advanced troubleshooting. This role requires expertise in security technologies, leadership in escalations, and a background of 8–15 years in Network Security engineering. The ideal candidate will have a degree in IT/Cybersecurity and preferred certifications like CCIE Security and CISSP. Competitive compensation and an intellectually stimulating environment are offered.

Qualifications

• Preferred certifications: CCIE Security, CISSP, PCNSE, Cloud Security Certifications (AWS/Azure).
• 8–15 years experience in Network Security engineering & architecture roles.

Responsibilities

• Architect secure network designs across on-prem, cloud, and hybrid environments.
• Lead L3/4 escalations, perform deep-dive analysis and root-cause investigations.
• Design and implement policies, segmentation, Zero Trust, and SASE models.
• Evaluate and adopt advanced Network Security technologies and frameworks.
• Provide technical leadership, documentation (HLD/LLD), and mentor engineers.

Skills

Expert in Firewalls: Fortinet

Expert in Firewalls: Cisco

Expert in Firewalls: F5

Expert in Firewalls: Check Point

Cloud security patterns: AWS VPC

Cloud security patterns: Azure VNet

NAC: Cisco ISE

Automation fundamentals: Ansible

Automation fundamentals: Python

SIEM tools: Splunk

SIEM tools: Sentinel

Education

Degree in IT/Cybersecurity or equivalent

Tools

Fortinet

Cisco

F5

Check Point

AWS

Azure

Job description

About the Role

You will define and architect the organisation’s Network Security strategy, covering firewall design, segmentation, Zero Trust, cloud network security, automation, and advanced troubleshooting. Acts as the highest technical escalation point for complex security issues.

Key Responsibilities

• Architect secure network designs across on-prem, cloud, and hybrid environments.

• Lead L3/4 escalations, perform deep-dive analysis and root-cause investigations.

• Design and implement policies, segmentation, Zero Trust, and SASE models.

• Evaluate and adopt advanced Network Security technologies and frameworks.

• Provide technical leadership, documentation (HLD/LLD), and mentor engineers.

Technical Skills

• Expert in Firewalls: Fortinet, Cisco, F5, Check Point.

• Cloud security patterns: AWS VPC, Azure VNet, Transit Gateway, NSGs.

• NAC: Cisco ISE or equivalent.

• IDS/IPS, WAF, VPN concentrators, segmentation (VRF, micro-seg).

• Automation fundamentals: Ansible, Python; SIEM tools (Splunk/Sentinel).

Qualifications

• Degree in IT/Cybersecurity or equivalent.

• Preferred certifications: CCIE Security, CISSP, PCNSE, Cloud Security Certifications (AWS/Azure).

• 8–15 years experience in Network Security engineering & architecture roles.