Network Engineer L1/L2 (1-year renewable contract) #IAC
Summary
Designs and manages LAN/WAN infrastructure, including Aruba switching, VLANs, and layer 3 routing, while administering Fortinet/MikroTik firewalls, VPNs, DNS/DHCP/IPAM, and cloud networking. Focuses on security, performance monitoring, and incident support using tools like Cisco DNA Centre and Terraform.
Job Responsibilities
- Design and manage LAN and WAN topology — Aruba switching, VLAN provisioning and layer 3 routing
- Manage Fortinet and MikroTik firewall policies — rule lifecycle, NAT, CVE patching and security profiles
- Configure and maintain SSL VPN and client VPN services; manage user profiles and monitor tunnel health
- Manage DNS zones, DHCP scopes and IP address management across all environments
- Configure and maintain load balancer rules, health checks and listener configuration
- Manage cloud networking across all provider environments — security groups, routing and cloud VA firewalls
- Operate and maintain anti-DDoS appliances and cloud DDoS mitigation services
- Monitor network performance and availability using Cisco DNA and Cisco Thousand Eyes
- Monitor QoS and conduct regular performance and policy reviews; produce trend analysis reports
- Maintain network security posture; respond to security anomalies and policy violation alerts
- Participate in the change advisory process for all network changes and maintain audit records
- Maintain network documentation, configuration runbooks and topology diagrams
- Provide Level 2/3network incident support and coordinate with vendors where required
- Any other ad-hoc duties as assigned by supervisor
Requirements
- Degree in IT or related discipline
- LAN and WAN — switching, VLAN management, trunking, Spanning Tree and layer 3 routing
- Aruba switching — configuration, VLAN provisioning, port management and policy management
- Firewall management — Fortinet FortiGate and MikroTik; policy creation, NAT and security profiles
- VPN — SSL VPN and client VPN gateway configuration, profile management and monitoring
- DNS, DHCP and IPAM — zone management, scope configuration and IP address lifecycle
- Load balancing — rule configuration, health check management and listener lifecycle
- Cloud networking — virtual networks, security groups, NSG, cloud VA firewall and routing
- Cloud network virtual appliance firewalls — deployment, policy management and monitoring
- Anti-DDoS — on-premises DDoS appliance and cloud-native DDoS mitigation management
- Network monitoring — Cisco DNA Centre and Cisco Thousand Eyes for visibility and synthetic testing
- QoS monitoring — quality of service configuration, monitoring and performance trend analysis
- Network security support — posture monitoring, CVE patching and security policy compliance
- Infrastructure as code — Terraform and Ansible for network configuration management
- Performance and policy review — regular network performance analysis and policy optimisation
Interested applicants, please email your resume to Andre Chua Jing Ming
Email: andrechua@recruitexpress.com.sg
CEI Reg No: R1989053
EA Licence No: 99C4599
Recruit Express Pte Ltd