Network Engineer L2

Position: Network Engineer Level 2

Location: Singapore (Onsite)

Contract Duration: 12 Months (Renewable)

Department: Network Engineering

Role Overview

We are on the lookout for experienced and driven Network Engineers at various levels to craft, implement, secure, and manage enterprise-level network infrastructure. This role includes responsibilities in LAN/WAN networking, administration of Aruba switches, Fortinet and MikroTik firewalls, VPN technologies, DNS/DHCP/IPAM management, load balancing, cloud networking, DDoS mitigation, and overall network security operations.

The successful candidate will utilize Infrastructure as Code (IaC) methods with tools such as Terraform and Ansible to ensure that network configurations are maintained in a version-controlled, repeatable, and auditable fashion. You will also employ advanced monitoring and observability tools like Cisco DNA Center and Cisco ThousandEyes to guarantee network reliability, performance, and security.

Primary Responsibilities

Network Infrastructure Oversight

• Design, implement, and oversee LAN and WAN networks.
• Configure and manage Aruba switches, VLANs, trunking, Spanning Tree Protocol (STP), and Layer 3 routing.
• Conduct network capacity planning, optimization, and performance enhancements.

Firewall & Security Management

• Administer Fortinet FortiGate and MikroTik firewalls.
• Draft, review, and maintain security policies, NAT configurations, and security profiles.
• Monitor the security status of the network and ensure adherence to security standards.
• Execute CVE remediation, firmware updates, and security patch management.

VPN Management

• Set up and maintain SSL VPN and Client VPN services.
• Manage VPN user profiles, authentication processes, and tunnel monitoring.
• Troubleshoot connectivity and performance-related issues.

Core Network Services Administration

• Oversee DNS, DHCP, and IP Address Management (IPAM) platforms.
• Manage DNS zones, DHCP scopes, reservations, and IP lifecycle activities.
• Ensure the availability and reliability of essential network services.

Load Balancing & Traffic Control

• Configure load balancer listeners, pools, rules, and health checks.
• Monitor application delivery performance and optimize traffic distribution.

Cloud Networking Management

• Design and manage networking components within cloud environments.
• Set up virtual networks, routing, security groups, NSGs, and cloud-native firewall solutions.
• Deploy and support cloud virtual appliance (VA) firewalls.

DDoS Protection & Resilience Management

• Operate and maintain on-premises DDoS mitigation solutions.
• Manage cloud-native DDoS protection services.
• Investigate and respond to network attacks and irregularities.

Monitoring & Performance Oversight

• Monitor network health through Cisco DNA Center and Cisco ThousandEyes.
• Track QoS performance metrics and conduct trend analyses.
• Generate reports on performance, capacity, and availability.

Automation & Infrastructure as Code Management

• Develop and maintain automation scripts using Terraform and Ansible for network deployments.
• Implement configuration management, compliance validation, and automated provisioning.
• Maintain version-controlled infrastructure repositories and audit trails.

Incident & Change Management

• Provide Level 2 and Level 3 support for network-related incidents and escalations.
• Engage in change advisory board (CAB) processes and oversee network change implementations.
• Coordinate with vendors and internal teams during troubleshooting and maintenance efforts.

Documentation & Compliance Management

• Maintain up-to-date network diagrams, architecture documents, operational runbooks, and standard operating procedures.
• Ensure accurate asset inventories and configuration records.
• Support both internal and external audit requirements.

Essential Skills & Competencies

Networking Knowledge

• In-depth understanding of LAN/WAN technologies.
• Proficient in VLAN configuration, trunking, STP, and Layer 3 routing.
• Expertise in network troubleshooting and performance analysis.

Switching Expertise

• Experience with Aruba switch deployment, configuration, and management.
• VLAN provisioning and port management skills.

Firewall Management

• Administration of Fortinet FortiGate firewalls.
• Configuration and policy management for MikroTik firewalls.
• Knowledge of NAT, security policies, and threat protection.

VPN Technology Proficiency

• Deployment and administration of SSL VPN and Client VPN.
• Expertise in authentication, profile management, and tunnel monitoring.

Core Services Management

• Management of DNS, DHCP, and IPAM systems.
• Zone administration and IP lifecycle management capabilities.

Load Balancing Skills

• Configuration of load balancing policies, listeners, and health checks.
• Application traffic optimization experience.

Cloud Networking Skills

• Understanding of virtual networking concepts in public cloud platforms.
• Knowledge in security groups, NSGs, routing, and cloud firewalls.
• Experience in deploying and managing cloud virtual appliances.

Security & DDoS Mitigation Knowledge

• Familiarity with network security best practices.
• Experience with DDoS mitigation solutions and incident response.
• Vulnerability management and compliance monitoring expertise.

Monitoring & Observability Skills

• Proficiency in using Cisco DNA Center.
• Experience with Cisco ThousandEyes.
• Knowledge of QoS monitoring and network analytics.

Automation Expertise

• Experience with Terraform.
• Proficiency in Ansible.
• Understanding of Infrastructure as Code (IaC) principles.
• Knowledge of configuration version control and automation workflows.

Preferred Qualifications

• Relevant certifications such as CCNA, CCNP, NSE, Aruba Certified Professional (ACP), or MikroTik certifications.
• Experience with multi-cloud networking environments.
• Understanding of network security frameworks and compliance standards.
• Familiarity with scripting languages like Python, Bash, or PowerShell.
• Experience in enterprise-scale network operations settings.

Interested applicants may connect via WhatsApp at +6586533349 (chat only).