Network Security Engineer (Firewall – Check Point, Palo Alto & Fortinet)

Network Security Engineer (Firewall – Check Point, Palo Alto & Fortinet)

Location: Changi, Singapore

Employment Type: 12-Month Renewable Contract

Experience: 4+ years in Network Security / Firewall Engineering

Job Summary

We are seeking an experienced and hands-on Network Security Engineer (L2/L3) to support and maintain enterprise firewall and network security infrastructure. The role involves firewall operations, incident resolution, firewall OS upgrades, technology refresh projects, routing configuration, VPN administration, and security compliance.

The ideal candidate will have strong technical experience with Check Point, Palo Alto, and Fortinet firewalls, along with practical knowledge of BGP, OSPF, and IPsec VPN technologies.

Key Responsibilities

• Provide L2/L3 operational support for enterprise firewall infrastructure.

• Administer, configure, maintain, and troubleshoot Check Point, Palo Alto, and Fortinet firewalls.

• Perform firewall OS upgrades, security patching, and firmware maintenance.

• Support firewall migration, technology refresh, and infrastructure upgrade projects.

• Configure and troubleshoot BGP, OSPF, and static routing.

• Manage and troubleshoot Check Point IPsec VPN connectivity.

• Implement firewall security policies, rule changes, and configuration updates.

• Investigate incidents, perform root cause analysis, and resolve complex network security issues.

• Support firewall high availability, failover, and disaster recovery testing.

• Monitor firewall performance, availability, capacity, and security compliance.

• Collaborate with network, infrastructure, cybersecurity, application, and vendor teams.

• Maintain technical documentation, operational procedures, and incident reports.

• Participate in scheduled overnight maintenance, weekend implementations, and emergency support.

• Identify automation opportunities and drive operational improvements.

Requirements

• Diploma or Degree in Information Technology, Computer Science, Network Engineering, or a related discipline.

• Minimum 5 years of relevant experience in Network Security or Firewall Engineering, with L2/L3 operational support exposure.

• Hands-on experience administering and troubleshooting enterprise firewalls, particularly Check Point, Palo Alto, and Fortinet.

• Practical experience performing firewall OS upgrades, migrations, and technology refresh activities.

• Strong understanding of TCP/IP networking, BGP, OSPF, and static routing.

• Experience configuring and troubleshooting Check Point IPsec VPN.

• Knowledge of firewall policies, NAT, high availability, failover, and network security best practices.

• Ability to troubleshoot complex firewall and network connectivity issues independently.

• Experience supporting enterprise or financial services infrastructure environments is advantageous.

• Relevant certifications such as Check Point CCSA/CCSE, Palo Alto PCNSA/PCNSE, Fortinet NSE/FCP/FCSS, or CCNA/CCNP would be advantageous.

• Willingness to support night, weekend, and after-hours maintenance activities when required.
  

  Employment Type: 12-Month Renewable Contract

  
  Interested candidates are kindly requested to email their CV with their experience to sandeep.sringeripai@global.ntt

  We look forward to your application!