Senior Network Security Engineer — Zero Trust

GIC Private Limited; Singapore; On-site; SGD 180,000 - 260,000; Full time

Job summary

GIC Private Limited is seeking a VP/SVP Network Security Engineer to own the architecture and engineering of network security controls end to end across a hybrid, multi-vendor estate.

You will turn security policy and regulatory requirements into automated, resilient controls, driving segmentation and zero trust across data centres, campus and cloud. The role requires deep firewall expertise, SASE/SSE delivery, and strong collaboration with risk and operations.

Qualifications

• 8+ years in network or network security engineering, including at least 4 years owning enterprise firewall and segmentation design.
• Strong enterprise networking experience across routing, switching and WAN in large, multi-site environments with cloud segmentation constructs.
• Deep hands-on expertise with next-generation firewall platforms at enterprise scale, including HA and policy design.
• Practical experience delivering SASE/SSE or ZTNA solutions and network access control.
• Experience automating firewall and security tasks through vendor APIs using Python or Ansible.

Responsibilities

• Design, build and evolve GIC's firewall estate across multi-vendor environments.
• Own network segmentation and zero trust model across data centre, campus and cloud.
• Engineer secure access services (SASE/SSE, ZTNA) and integration with SD-WAN and remote access.
• Own network access control policy (802.1X, posture, profiling, dynamic segmentation).
• Run firewall and security-policy lifecycle with review, risk assessment and automation.

Skills

Firewall architecture

ZTNA/SASE

Network segmentation

Zero trust

Python/Ansible

Tools

Palo Alto Networks

Fortinet

Check Point

Cisco

Job description

GIC Private Limited is seeking a VP/SVP Network Security Engineer to own the architecture and engineering of network security controls end to end across a hybrid, multi-vendor estate.

You will turn security policy and regulatory requirements into automated, resilient controls, driving segmentation and zero trust across data centres, campus and cloud. The role requires deep firewall expertise, SASE/SSE delivery, and strong collaboration with risk and operations.