Network Engineer

We are seeking a proactive and technically proficient L2/L3 Network Engineer to bolster our ICT Infrastructure team in Singapore. In this role, you will be the backbone of our enterprise network operations, ensuring high availability, robust security posture, and optimized performance across our complex LAN, WLAN, and perimeter security environments. You will play a pivotal role in maintaining our multi-vendor architecture—spanning Palo Alto, Check Point, Cisco, and Aruba platforms—while driving continuous improvement in network automation, reliability, and security compliance. Key Responsibilities: 1. Operations, Maintenance & Troubleshooting Provide expert-level L2/L3 incident resolution and root cause analysis (RCA) for complex LAN, WAN, and WLAN network anomalies with minimal disruption to business operations. Execute scheduled maintenance windows, including firmware upgrades, configuration audits, and hardware lifecycle patches across core network infrastructure. Monitor proactive network health metrics, telemetry, and traffic anomalies to identify and mitigate bottlenecks before they impact end-users. 2. Perimeter Security & Firewall Administration Architect, configure, and lifecycle-manage firewalls, leveraging advanced features (e.g., WildFire, URL filtering, Threat Prevention, and site-to-site VPNs). Enforce rigorous zero-trust security postures by designing, reviewing, and auditing firewall access rules and security policies. 3. Core Routing, Switching & Wireless Infrastructure Administer enterprise-grade switching and routing environments, ensuring optimized spanning-tree topologies, VLAN segmentation, and high-availability routing protocols. Maintain and optimize enterprise wireless infrastructure, ensuring seamless roaming and robust coverage. 4. Identity, Access Control & NAC Administer and optimize network access control, RADIUS authentication, profiling, and guest access workflows. Enforce strict endpoint compliance and device posture checks to align with corporate security baselines. 5. Documentation, Automation & Compliance Maintain proper network documentation, including comprehensive topology diagrams, IPAM records, and change management logs. Automate routine operational tasks and reporting scripts (using Python or Ansible) to drive operational efficiency. Ensure all network architectures and operational workflows comply with local regulatory standards, ISO frameworks, and internal security policies. Qualifications & Requirements Experience & Education 3 to 8+ years of hands-on enterprise network engineering and infrastructure operations experience. Proven experience working within multi-site enterprise or regional operations environments based in Singapore. Technical Proficiency & Core Competencies Security Platforms: Advanced proficiency with Palo Alto (PAN-OS) and Check Point security gateways. Routing & Switching: Solid foundation in Cisco Enterprise networks (Catalyst/Nexus switching, BGP/OSPF routing protocols). Network Access Control: Strong working experience with Aruba ClearPass (CPPM) or equivalent enterprise NAC frameworks. Network Services: Deep understanding of DHCP, DNS, IPAM, QoS, TACACS+/RADIUS, and SNMP monitoring suites. Preferred Certifications Cisco: CCNP Enterprise (or CCNA with equivalent deep operational experience). Security: Palo Alto Networks Certified Network Security Administrator/Engineer (PCNSA / PCNSE) or Check Point Certified Security Administrator/Expert (CCSA / CCSE). Wireless/NAC: Aruba Certified ClearPass Professional (ACCP) or Mobility Professional (ACMP). Soft Skills & Mindset Exceptional analytical and systematic troubleshooting methodologies under high-pressure scenarios. Strong cross-cultural communication skills with the ability to collaborate smoothly across regional IT, security, and project management teams.