Job Summary:

We are looking for Network Engineers with at least 8 years of experience in designing, implementing, and maintaining enterprise-level network infrastructure for one of our key customers in Singapore. The candidate should possess in-depth knowledge and hands-on experience with the following core technologies and their market alternatives: 

(a)   Load Balancers (Core):

F5 BIG-IP: Advanced configuration and management

Alternative products: Citrix ADC (NetScaler), NGINX Plus, HAProxy

Experience in application delivery, SSL offloading, and traffic management 

(b)   Network Routing and Switching (Core):

Cisco: IOS, Nexus series configuration and troubleshooting

Alternative products: Juniper Networks, Arista Networks, HPE (Aruba)

Proficiency in OSPF, BGP, EIGRP, and VLANs 

(c)   Next-Generation Firewalls (Core):

Check Point: Configuration, policy management and threat prevention

Palo Alto Networks: Configuration, policy management and threat prevention

Alternative products: Fortinet FortiGate, Cisco Firepower

Proficient in On-Premise firewall equipment and Cloud firewall instances

Proficient in dynamic routing protocols

Experience in implementing zero-trust network architectures 

(d)   Cloud Network Security (Core):

Azure Firewall: Design and implementation in Azure environments

Alternative products: AWS Network Firewall, Google Cloud Armor

Skilled in cloud-native network security best practices

(e)   Application Gateways (Core):

Azure Application Gateway: Configuration and management

Alternative products: AWS Application Load Balancer, Google Cloud Load Balancing

Experience in web application firewall (WAF) implementation 

(f)    Intrusion Detection Prevention Systems (IDPS):

Implementation and management of IDPS solutions

Experience with products like Check Point, Palo Alto Networks

Alternative products: Fortinet, Cisco Firepower, Suricata

Skilled in configuring, tuning, and maintaining IDPS rules and policies

Proficient in analyzing IDPS logs and responding to security incidents 

(g)   Software-Defined Networking (SDN) (Good to have):

Familiarity with SDN concepts and implementation

Experience with products like Cisco ACI, VMware NSX, or Juniper Contrail

Experience in SDA handling the Cisco UCS and Cluster SDN Controllers

Experience in ACI Configuration and Implementation

Experience in SD-WAN implementation and policy push through Controller.

(h)   Network Monitoring and Analytics (Good to have):

Proficiency in using network monitoring tools (e.g., SolarWinds, PRTG, Nagios)

Experience in network performance analysis and optimisation

Experience in NetFlow tracing and understanding 

(i)    VPN and Remote Access Solutions (Good to have):

Configuring and managing site-to-site and remote access VPNs

Experience with products like Cisco AnyConnect, Palo Alto GlobalProtect

(j)    Network Automation (Good to have):

Scripting skills for network automation (e.g., Python, Ansible)

Experience with network orchestration tools 

(k)   Network Security Protocols (Core):

Deep understanding of IPSec, SSL/TLS, 802.1x

Implementation of network access control (NAC) solutions

Deep understanding and implementation skillset on Tacacs Server.

Required Skills & Qualifications:

Bachelor’s degree in IT, Computer Science, or related field (or equivalent experience).

Minimum of 5 years of hands-on experience.

At least Cisco Certified Network Professional (CCNP)

Experience with deployment and support of Cisco SDWAN, Cisco ACI, F5 load balancers, Checkpoint or Palo Alto Firewalls

Experience with performing CIS hardening on network devices, perform security assessment and remediation.

Familiar with ITIL best practices and processes

Good knowledge of networking (IP addressing, routing, VLANs)

#LPS