Senior Network Engineer L3 (1-year renewable contract) IAC

Job Responsibilities

• Design and manage LAN and WAN topology - Aruba switching, VLAN provisioning and layer 3 routing
• Manage Fortinet and MikroTik firewall policies - rule lifecycle, NAT, CVE patching and security profiles
• Configure and maintain SSL VPN and client VPN services manage user profiles and monitor tunnel health
• Manage DNS zones, DHCP scopes and IP address management across all environments
• Configure and maintain load balancer rules, health checks and listener configuration
• Manage cloud networking across all provider environments - security groups, routing and cloud VA firewalls
• Operate and maintain anti-DDoS appliances and cloud DDoS mitigation services
• Monitor network performance and availability using Cisco DNA and Cisco Thousand Eyes
• Monitor QoS and conduct regular performance and policy reviews produce trend analysis reports
• Maintain network security posture respond to security anomalies and policy violation alerts
• Participate in the change advisory process for all network changes and maintain audit records
• Maintain network documentation, configuration runbooks and topology diagrams
• Provide Level 2/3network incident support and coordinate with vendors where required
• Any other ad-hoc duties as assigned by supervisor

Requirements

• Degree in IT or related discipline
• LAN and WAN - switching, VLAN management, trunking, Spanning Tree and layer 3 routing
• Aruba switching - configuration, VLAN provisioning, port management and policy management
• Firewall management - Fortinet FortiGate and MikroTik policy creation, NAT and security profiles
• VPN - SSL VPN and client VPN gateway configuration, profile management and monitoring
• DNS, DHCP and IPAM - zone management, scope configuration and IP address lifecycle
• Load balancing - rule configuration, health check management and listener lifecycle
• Cloud networking - virtual networks, security groups, NSG, cloud VA firewall and routing
• Cloud network virtual appliance firewalls - deployment, policy management and monitoring
• Anti-DDoS - on-premises DDoS appliance and cloud-native DDoS mitigation management
• Network monitoring - Cisco DNA Centre and Cisco Thousand Eyes for visibility and synthetic testing
• QoS monitoring - quality of service configuration, monitoring and performance trend analysis
• Network security support - posture monitoring, CVE patching and security policy compliance
• Infrastructure as code - Terraform and Ansible for network configuration management
• Performance and policy review - regular network performance analysis and policy optimisation

Interested applicants, please email your resume to Andre Chua Jing Ming

Email: [HIDDEN TEXT]

CEI Reg No: R1989053

EA Licence No: 99C4599

Recruit Express Pte Ltd