Network Engineer L2

Position: Network Engineer Level 2

Location: Singapore (Onsite)

Contract Duration: 12 Months (Renewable)

Department: Network Engineering

Role Overview

We are in search of talented and driven Network Engineers at various experience levels to architect, deploy, secure, and manage enterprise networking infrastructure. This position includes responsibilities related to LAN/WAN networking, Aruba switch configuration, administration of Fortinet and MikroTik firewalls, VPN technologies, DNS/DHCP/IPAM management, load balancing, cloud networking, DDoS mitigation, and network security operations.

The successful candidate will apply Infrastructure as Code (IaC) methodologies through tools like Terraform and Ansible to maintain network configurations in a systematic, repeatable, and auditable way. Additionally, you will use advanced monitoring and observability tools such as Cisco DNA Center and Cisco ThousandEyes to ensure the reliability, performance, and security of the network.

Primary Responsibilities

Network Infrastructure Management

• Design, implement, and maintain LAN and WAN systems.
• Configure and manage Aruba switches, including VLANs, trunking, Spanning Tree Protocol (STP), and Layer 3 routing.
• Conduct network capacity planning, optimization, and performance tuning.

Firewall & Security Operations

• Administer Fortinet FortiGate and MikroTik firewalls.
• Establish, review, and maintain security policies, NAT configurations, and security profiles.
• Monitor the network security posture and ensure adherence to security standards.
• Execute CVE remediation, firmware updates, and security patch management.

VPN Management

• Set up and manage SSL VPN and Client VPN services.
• Oversee VPN user profiles, authentication methods, and tunnel monitoring.
• Troubleshoot connectivity and performance challenges.

Core Network Services

• Manage DNS, DHCP, and IP Address Management (IPAM) systems.
• Administer DNS zones, DHCP scopes, reservations, and IP lifecycle processes.
• Ensure the availability and reliability of essential network services.

Load Balancing & Traffic Management

• Configure load balancer listeners, pools, rules, and health checks.
• Monitor application delivery performance and optimize traffic distribution.

Cloud Networking

• Design and oversee networking components within cloud environments.
• Set up virtual networks, routing, security groups, NSGs, and cloud-native firewall solutions.
• Deploy and manage cloud virtual appliance (VA) firewalls.

DDoS Protection & Resilience

• Operate and maintain on-premises DDoS mitigation appliances.
• Oversee cloud-native DDoS protection services.
• Investigate and respond to network attacks and anomalies.

Monitoring & Performance Oversight

• Utilize Cisco DNA Center and Cisco ThousandEyes to monitor network health.
• Track QoS performance metrics and perform trend analysis.
• Generate reports on performance, capacity, and availability.

Automation & Infrastructure as Code

• Develop and sustain Terraform and Ansible automation for network deployments.
• Implement configuration management, compliance validation, and automated provisioning.
• Manage version-controlled infrastructure repositories and audit trails.

Incident & Change Management

• Provide Level 2 and Level 3 support for network incidents and escalations.
• Engage in change advisory board (CAB) processes and network change implementation.
• Collaborate with vendors and internal teams during troubleshooting and maintenance efforts.

Documentation & Compliance

• Maintain network diagrams, architecture documentation, operational runbooks, and standard operating procedures.
• Ensure accurate asset inventories and configuration records.
• Support internal and external audit requirements.

Essential Skills & Competencies

Networking

• Comprehensive understanding of LAN/WAN technologies.
• Experience with VLAN configuration, trunking, STP, and Layer 3 routing.
• Proficient in network troubleshooting and performance analysis.

Switching

• Experience in deploying, configuring, and managing Aruba switches.
• Familiarity with VLAN provisioning and port management.

Firewalls

• Administration of Fortinet FortiGate firewalls.
• Configuration and policy management of MikroTik firewalls.
• Knowledge of NAT, security policies, and threat protection.

VPN Technologies

• Deployment and administration of SSL VPN and Client VPN services.
• Expertise in authentication, profile management, and tunnel monitoring.

Core Services

• Management of DNS, DHCP, and IPAM.
• Expertise in zone administration and IP lifecycle management.

Load Balancing

• Configuration of load balancing policies, listeners, and health checks.
• Optimization of application traffic.

Cloud Networking

• Understanding of virtual networking in public cloud environments.
• Experience with security groups, NSGs, routing, and cloud firewalls.
• Deployment and management of cloud virtual appliances.

Security & DDoS Protection

• Knowledge of network security best practices.
• Experience with DDoS mitigation solutions and incident response.
• Familiarity with vulnerability management and compliance monitoring.

Monitoring & Observability

• Proficient in Cisco DNA Center.
• Experience with Cisco ThousandEyes.
• Knowledge of QoS monitoring and network analytics.

Automation

• Experience with Terraform.
• Proficiency in Ansible.
• Understanding of Infrastructure as Code (IaC) principles.
• Experience with configuration version control and automation workflows.

Preferred Qualifications

• Certifications such as CCNA, CCNP, NSE, Aruba Certified Professional (ACP), or MikroTik certifications.
• Experience in multi-cloud networking environments.
• Knowledge of network security frameworks and compliance standards.
• Familiarity with scripting languages like Python, Bash, or PowerShell.
• Experience in enterprise-scale network operations environments.

Interested applicants may reach out via WhatsApp at +6586533349 (chat only).