Senior Network Security Engineer - CISCO Firewall

ANOTECH ENERGY SINGAPORE PTE. LTD.; Singapore; On-site; SGD 80,000 - 120,000; Full time

Job summary

A leading company in energy services is seeking a Senior Network Engineer. The successful candidate will be responsible for the design and implementation of advanced network systems, ensuring robust communication infrastructure and adhering to high security standards. With a strong focus on cable network design, cybersecurity measures, and integration support, this role requires a proactive individual with relevant experience and qualifications.

Qualifications

• Minimum 5 years of experience in the relevant field/industry.
• At least cat 2 security clearance required.
• Demonstrating initiative and resourcefulness in problem solving.

Responsibilities

• Produce detailed network architecture designs and implement network systems.
• Support configuration changes and assist in the integration and testing of network equipment.
• Troubleshoot operational issues related to network devices.

Skills

Network detailed design

Troubleshooting

Analytical skills

Scripting

Cybersecurity implementation

Education

Degree in Electrical / Electronic / Telecommunications Engineering

Tools

Cisco Certified Networking Associate (CCNA)

Cisco Certified Networking Professional (CCNP)

Cisco Certified Design Associate (CCDA)

Huawei Certified ICT Associate (HCIA)

Huawei Certified ICT Professional (HCIP)

Job description

As a Senior Network Engineer, you will produce detailed network architecture designs and implement network systems to meet the data communication needs as required.

Responsibilities

Design and Document Preparation:

• Provide networking expertise, revise solution architecture drawings and diagrams

• Prepare the design documents including Low Level Design (LLD) documents for OPS Network and SMRC Network, firewalls configuration, IDS/IPS and hardening states.

• Prepare ITD (Test procedure) document for OPS Network and SMRC Network

· Prepare new or update all the relevant documents (e.g. Maintenance or User Manual, Config / Rollback / Troubleshoot Procedure) required for the OPS Network (FMC, FTD (firewalls)) and SMRC Network (OFL+ONL)

Integration Support:

• Support configuration changes to system platforms in factory and customer sites.

• Work on the configurations of interfaces, zones, firewall policies, IPS, application filtering for single firewall (Offline)

• Support the integration of Offline HSE and Offline Remote Site Switches with Offline SMRC Servers e.g. PIM/PAM, SNMS/SMS/NMS/LMS, RADIUS, NTP, SIEM etc (Offline)

• Support the integration of Online AMTS New HSE & Remote sites switches with Offline SMRC Servers e.g. PIM/PAM, SNMS/SMS/LMS, RADIUS, NTP, SIEM etc. (Offline)

• Assist in the SMRC network configuration, Integration, testing, verification and troubleshooting of the following technology used in SMRC Network (Online SMRC)

• Work on the configuration, integration, testing, verification and troubleshooting of Online OPS Network selected firewalls / external interfaces (particularly from the Firewall application content inspection (Layer 4 through Layer 7)) (OPS Network)

• Configure, optimize and test the transparent firewall failover functionality running in HA and standalone mode with online interfaces for the traffic impact (OPS Network)

• Support External Support Platform (ESP) setup, including network platform configuration & Integration (Layer 2 and Layer 3) of switch, configure firewall with S2S VPN, DMZ, NAT and Internet using ACL policies, IPS policies, URL & Content filtering policies, VPN policies, NAT policies, hardening of switch and firewall as per the hardening guideline

• Provide troubleshooting support during online deployment & integration (OPS Network)

Hardening Support:

• Assist on the hardening of Online / Offline SMRC network equipment and firewalls

• Assist on the hardening of Online / offline OPS firewalls (OPS Network).

• Troubleshoot / fix any operational / unknown issues occurs in the environment due to the hardening configuration on network devices (Offline, Online SMRC)

• Support in case any issue with hardening of online firewalls / any operational issue occurs due to the hardening of online network devices (OPS Network)

Requirements

· Degree in Electrical / Electronic / Telecommunications Engineering

· Minimum 5 years of experience working in the relevant field/industry

· At least cat 2 security clearance

· Strong advantage on following Professional qualifications:

Ø Cisco Certified Networking Associate (CCNA), Cisco Certified Networking Professional (CCNP), Cisco Certified Design Associate (CCDA)

Ø Huawei Certified ICT Associate (HCIA), Huawei Certified ICT Professional (HCIP)

Ø Or other vendor specific courses, such as Juniper Certified Internet Expert (JNCIE)

· Professional knowledge and experience in network detailed design and implementations

Ø On technologies including SDH, MPLS-TP, IP, IP/MPLS, Ethernet etc,

Ø Cable network design (fibre, copper, structured cabling),

Ø 4G/5G/Wifi network design,

Ø Infra design (Virtualisation, VMWare, Windows, Linux, IT services),

Ø Cybersecurity implementation (Hardening, FW, AV,…),

Ø Scripting (python, …),

Ø Network detailed design, administration, troubleshooting, capacity optimization,

Ø Network security design and implementation.

· Demonstrating a degree of initiative, and resourcefulness in solving problems

· Resourceful and analytical in design activities, ability to use pertinent data for meticulous recommendations