L2/L3 Network Engineer

Job details: We are hiring L2 and L3 Network Engineers to design, implement and operate the full network stack. The role covers LAN and WAN connectivity, Aruba switching, Fortinet and MikroTik firewall management, SSL and client VPN, DNS/DHCP/IPAM, load balancing, cloud networking, anti-DDoS and network security. You will use infrastructure as code to maintain all configuration in a version-controlled, repeatable and auditable state, and leverage monitoring platforms including Cisco DNA and Cisco Thousand Eyes for continuous visibility. Responsibilities: Design and manage LAN and WAN topology — Aruba switching, VLAN provisioning and layer 3 routing Manage Fortinet and MikroTik firewall policies — rule lifecycle, NAT, CVE patching and security profiles Configure and maintain SSL VPN and client VPN services; manage user profiles and monitor tunnel health Manage DNS zones, DHCP scopes and IP address management across all environments Configure and maintain load balancer rules, health checks and listener configuration Manage cloud networking across all provider environments — security groups, routing and cloud VA firewalls Operate and maintain anti-DDoS appliances and cloud DDoS mitigation services Monitor network performance and availability using Cisco DNA and Cisco Thousand Eyes Monitor QoS and conduct regular performance and policy reviews; produce trend analysis reports Maintain network security posture; respond to security anomalies and policy violation alerts Participate in the change advisory process for all network changes and maintain audit records Maintain network documentation, configuration runbooks and topology diagrams Provide Level 2/3 network incident support and coordinate with vendors where required Job requirements: 2-5 years of relevant experience for L2 Network Engineer. 5-10 years of relevant experience for L3 Network Engineer. Highly preferred for the skillsets: Cisco ACI, Cisco SDA, MPLS, Huawei, Infoblox LAN and WAN — switching, VLAN management, trunking, Spanning Tree and layer 3 routing Aruba switching — configuration, VLAN provisioning, port management and policy management Firewall management — Fortinet FortiGate and MikroTik; policy creation, NAT and security profiles VPN — SSL VPN and client VPN gateway configuration, profile management and monitoring DNS, DHCP and IPAM — zone management, scope configuration and IP address lifecycle Load balancing — rule configuration, health check management and listener lifecycle Cloud networking — virtual networks, security groups, NSG, cloud VA firewall and routing Cloud network virtual appliance firewalls — deployment, policy management and monitoring Anti-DDoS — on-premises DDoS appliance and cloud-native DDoS mitigation management Network monitoring — Cisco DNA Centre and Cisco Thousand Eyes for visibility and synthetic testing QoS monitoring — quality of service configuration, monitoring and performance trend analysis Network security support — posture monitoring, CVE patching and security policy compliance Infrastructure as code — Terraform and Ansible for network configuration management Performance and policy review — regular network performance analysis and policy optimisation Interested applicants please send your resume to venessagoh@recruitexpress.com.sg Venessa Goh Wee Ni R24124686 Recruit Express Pte Ltd EA License No: 99C4599 We regret that only shortlisted candidates will be contacted.