Senior Network Engineer ( Datacenter, Security)

Top 3 Reasons To Join Us

13th-month bonus, and performance bonus

Private health insurance package provided

Working hours: 09:00–17:30, Monday to Friday.

The Job

Position Summary

• We are looking for a Network Engineer to operate, secure, and improve enterprise and datacenter network infrastructures.
• The engineer will act as an L3 escalation point, participate in the scheduled On-Call rotation, and may temporarily support shift operations when required due to staffing needs.
• The engineer will work on network design, routing and switching, firewalls, VPN, vulnerability management, DDoS protection, customer migration projects, and L3 technical escalation.

Scope of work:

• Design, implement, and operate Data Center Network architecture utilizing the Leaf-Spine model (Border Leaf, Compute Leaf, BGW-Leaf).
• Improve network security by moving towards a modern identity-based perimeter (Zero Trust) and managing VPN technologies (SD-WAN, SASE, SSL-VPN).
• Track and resolve security advisories/CVEs from vendors (Fortinet, Arista), assess infrastructure impact, and execute firmware upgrades (e.g., FortiOS HA) and vulnerability patching.
• Implement and manage ACLs, storm-control, and STP/BPDU guard on switches to mitigate security risks and control BUM traffic.
• Deploy and manage DDoS protection solutions and propose advanced mitigations.
• Manage hardware lifecycles, replace faulty components, handle Arista switch RMAs, and adhere to EOS Life Cycle Policies.
• Execute network migrations, including IP planning, new topology design, and MPLS channel configurations.
• Draft technical documentation, network diagrams, Request For Change (RFC) forms, and standard operating procedures (SOPs) in English.
• Troubleshoot complex technical issues/incidents.
• Participate in scheduled maintenance windows.

Your Skills and Experience

Skills and Experience:

• Minimum of 3 years’ experience implementing, configuring, and improving computer networks.
• Demonstrated theoretical and operational knowledge in implementing the simplest modern solutions to complex networking and security requirements.
• Demonstrated experience configuring Cisco, Juniper, Arista routers and switches.
• Experience with a range of firewall technologies including FortiGate, CheckPoint, PaloAlto Network firewalls.
• Demonstrated experience creating and documenting easy to follow processes for changing network infrastructure.
• Strong understanding of TCP/IP stack, BGP, OSPF, HSRP, VRFs.
• Experience with IP addressing strategies, SNAT, public/private IP planning, and subnetting.
• Demonstrated experience creating clear network diagrams, RFCs, and easy-to-follow process documentation.
• Excellent analytical, problem-solving, and independent working skills.
• Intermediate to advanced technical English skills for reading advisories, writing RFCs, and communicating with partners.

Preferred Qualifications

• Hands-on experience with VMware NSX-T, including deployment and operation of overlay networking on physical server infrastructure.
• Up to date knowledge of the latest modern trends in networking.
• Ability to quickly learn new or unfamiliar technology and products using documentation and internet resources.
• Ability to work with all levels of staff within and outside of IT and outside the organization.

Why You'll Love Working Here

• Attractive Compensation: Competitive base salary based on your capability, 13th-month bonus, and performance bonus. Annual salary review
• Private health insurance package provided.
• Work-Life Balance: Company trips, team-building events, and internal engagement activities.
• Supportive Culture: Open, collaborative, and friendly working environment with positive and skilled teammates.
• Working hours: 9:00 – 17:30, Monday – Friday
• Working location: Ho Chi Minh Office