Network Engineer - Campus and NAC

About the Role

We are hiring a Network Engineer (Campus and NAC) to join our infrastructure team supporting a leading banking and financial services organization in Singapore. In this position, you will own the end-to-end design, build, and lifecycle engineering of our enterprise campus network, wireless architecture, WAN/SD-WAN, and Network Access Control (NAC) platforms.

Acting as an on-site technical authority, you will deliver hands-on implementations, manage hardware refresh activities, perform wireless validation surveys, lead new site deployments, and support data centre cage installations. You will also function as the primary engineering escalation point for complex access and campus networking issues.

Responsibilities

• Campus & Wireless Engineering: Design and implement Cisco Catalyst 9K campus switching standards, including hardware refreshes, software upgrades, and network segmentation. Build enterprise Wi-Fi 6/6E controller architectures and SSID/RF designs, and perform predictive as well as validation surveys.
• Hands-on Implementation: Lead on-site deployments, coordinate structured cabling activities, oversee equipment migrations, and support data centre cage infrastructure work.
• Network Access Control (NAC): Design and configure Cisco ISE policies covering 802.1X, MAB, device profiling, posture assessment, guest access, and TACACS+ device administration.
• Forescout & Coexistence: Create Forescout eyeSight classification and eyeControl actions, ensuring full visibility across agentless, IoT, and OT devices. Establish and maintain coexistence designs between Cisco ISE and Forescout to avoid policy conflicts.
• WAN, SD-WAN & Governance: Develop enterprise SD-WAN topologies, site templates, and rollout strategies. Handle new circuit implementations and service modifications directly with local telecommunications carriers.
• Compliance & ITIL Change Management: Produce engineering designs and implementation plans in line with strict ITIL change management processes. Assist with regulatory audit requirements (e.g., technology risk management frameworks) through effective access control and change evidence documentation.

Requirements

• Bachelor's degree in Computer Science, Information Technology, or a related discipline.
• 6 to 10 years of hands-on professional experience in enterprise campus network engineering.
• Demonstrated implementation experience with Cisco Catalyst 9K switching in large-scale enterprise environments.
• Strong knowledge of enterprise wireless design (Cisco, Juniper, Aruba, or Meraki) and capability with wireless survey tools (Ekahau or equivalent).
• Advanced proficiency in Cisco ISE (802.1X/MAB, profiling, posture, guest, and TACACS+ policy design).
• Awareness of Forescout (eyeSight/eyeControl) and demonstrated understanding of multi-platform NAC coexistence strategies.
• Hands-on experience in SD-WAN design and deployment (Cisco Catalyst SD-WAN/Viptela, Meraki, or similar), along with experience working with Singapore telecom carriers.
• Strong analytical, troubleshooting, and teamwork-focused communication skills.

Good-to-Have Qualifications

• Experience with Cisco Catalyst Centre (DNAC), Meraki, Aruba, or Juniper wireless platforms.
• Prior experience working within financial services or other highly regulated industry environments.
• Professional certifications such as Cisco CCNP Enterprise, Cisco SISE / CCNP Security, Forescout Certified Associate/Professional, or CWNA/CWDP.