VP/SVP, Network Security Engineer, Technology Group

GIC is one of the world’s largest sovereign wealth funds. With over 2,000 employees across 11 locations around the world, we invest in more than 40 countries globally across asset classes and businesses. Working at GIC gives you exposure to an extraordinary network of the world’s industry leaders. As a leading global long-term investor, we Work at the Point of Impact for Singapore’s financial future, and the communities we invest in worldwide.

Technology Group

Our Technology Group (TG) builds and runs the technology behind GIC's investment and corporate activities. Within TG, Infrastructure & Cybersecurity Engineering designs, engineers and operates the networks, hosting platforms and security services that keep GIC secure, resilient and ready for the future

About the team

The Network Security Engineering team designs and engineers the network security controls that protect GIC's data centres, offices, cloud environments and remote users: firewalls, segmentation, secure access and network access control.

What impact can you make in this role?

As a Network Security Engineer, you will own the architecture and engineering of GIC's network security controls end to end. You will turn security policy and regulatory requirements into resilient, well-automated controls, and make segmentation and zero trust practical across a hybrid, multi-vendor estate.

What will you do as an VP/SVP, Network Security Engineer?

• Design, build and evolve GIC's firewall estate (internet perimeter, data centre and internal segmentation firewalls), including high-availability design, rule-base architecture and platform lifecycle across a multi-vendor environment.
• Own the network segmentation and zero trust model across data centre, campus and cloud, defining zones, trust boundaries and enforcement points with the Transport, Cloud and Cybersecurity teams.
• Engineer secure access services, including SASE/SSE, secure web gateway and zero trust network access (e.g., Zscaler ZIA/ZPA, Prisma Access or equivalent), and their integration with SD-WAN and remote access.
• Own network access control policy (802.1X, posture, profiling and dynamic segmentation), working with Transport on edge implementation and with Network Services on the platform.
• Run the firewall and security-policy lifecycle with rigour: rule review and recertification, change risk assessment and policy automation to reduce manual effort and error.
• Engineer intrusion prevention, DDoS protection, encrypted traffic inspection and internet edge security, and set the security policies and standards that Cloud Networking implements for cloud-native controls.
• Define network security baselines and hardening standards (device hardening, management-plane protection, cryptographic standards such as IPsec and MACsec) and verify compliance across the estate.
• Map network controls to MAS TRM, CSA CCoP and NIST CSF requirements, provide evidence for audits, and partner with the Security Operations Centre on network telemetry for detection and response.
• Hand new controls and platforms over to Network Operations (and the SOC where relevant) against agreed acceptance criteria, with early-life support until sign-off.

What qualifications or skills should you possess in this role?

• Typically 8+ years in network or network security engineering, including at least 4 years owning enterprise firewall and segmentation design.
• Strong enterprise networking experience across routing, switching and WAN in large, multi-site environments (BGP, OSPF, IPsec, NAT, DNS), with a working understanding of DC fabric and cloud segmentation constructs (e.g., VRFs, ACI contracts, security groups).
• Deep hands-on expertise with next-generation firewall platforms (e.g., Palo Alto Networks, Fortinet, Check Point or Cisco) at enterprise scale, including HA, routing integration and policy design.
• Practical experience delivering SASE/SSE or ZTNA solutions and network access control (e.g., Cisco ISE, Aruba ClearPass or equivalent).
• Experience automating firewall and security tasks through vendor APIs using Python or Ansible.
• Ability to balance security with operability, and to explain risk and trade-offs clearly to engineers, risk partners and senior stakeholders.

Nice to have

• CCNP / CCIE Security, PCNSE, CISSP or equivalent; vendor SASE certifications.
• Experience with firewall policy management tooling and micro-segmentation.
• Experience in financial services, with working knowledge of MAS TRM and CSA CCoP

What success looks like in your first 12 months?

• A documented, agreed segmentation and zero trust model is in place, with a prioritised roadmap and measurable progress on enforcement across DC, campus and cloud.
• Firewall rule bases are reviewed and recertified on a defined cycle, stale and over-permissive rules are measurably reduced, and most standard changes are automated.
• Network security controls are mapped to regulatory requirements, with audit evidence available on demand.
• New security controls are accepted by Operations at first handover, with runbooks and monitoring in place from day one.

Why join us?

• Work on technology that helps safeguard Singapore's reserves for future generations.
• Own meaningful problems at enterprise scale, with the autonomy to shape how they are solved.
• Join a collaborative team that values technical depth, continuous learning and doing things properly.

Work at the Point of Impact
We need to be forward-looking to attract the right people to help us become the Leading Global Long-term Investor. Join our ambitious, agile, and diverse teams - be empowered to push boundaries and pursue innovative ideas, share your views, and be heard. Be anchored on our PRIME Values: Prudence, Respect, Integrity, Merit and Excellence, which guides us in how we make our day-to-day decisions. We strive to inspire. To make an impact.

GIC is a Great Place to Work

At GIC, our offices are vibrant hubs for ideation, professional growth, and interpersonal connection. At the same time, we believe that flexibility allows us to do our best work and be our best selves. Thus, our teams come into the office four days per week to harness the benefits of in-person collaboration, but have the flexibility to choose which days they work from home and adjust this arrangement as situational needs arise.

GIC is an equal opportunity employer
As an employer, we passionately believe every individual brings with them unique diversity of thought and perspectives to meaningfully enrich perspectives of GIC teams to drive competitive performance. An inclusive environment yields exceptional contribution.

Learn more about our Technology Group here: