Senior Network Security Engineer - CISCO Firewall

As a Senior Network Engineer, you will produce detailed network architecture designs and implement network systems to meet the data communication needs as required.

Responsibilities Design and Document Preparation: • Provide networking expertise, revise solution architecture drawings and diagrams • Prepare the design documents including Low Level Design (LLD) documents for OPS Network and SMRC Network, firewalls configuration, IDS/IPS and hardening states. • Prepare ITD (Test procedure) document for OPS Network and SMRC Network · Prepare new or update all the relevant documents (e.g. Maintenance or User Manual, Config / Rollback / Troubleshoot Procedure) required for the OPS Network (FMC, FTD (firewalls)) and SMRC Network (OFL+ONL) Integration Support: • Support configuration changes to system platforms in factory and customer sites. • Work on the configurations of interfaces, zones, firewall policies, IPS, application filtering for single firewall (Offline) • Support the integration of Offline HSE and Offline Remote Site Switches with Offline SMRC Servers e.g. PIM/PAM, SNMS/SMS/NMS/LMS, RADIUS, NTP, SIEM etc (Offline) • Support the integration of Online AMTS New HSE & Remote sites switches with Offline SMRC Servers e.g. PIM/PAM, SNMS/SMS/LMS, RADIUS, NTP, SIEM etc. (Offline) • Assist in the SMRC network configuration, Integration, testing, verification and troubleshooting of the following technology used in SMRC Network (Online SMRC) • Work on the configuration, integration, testing, verification and troubleshooting of Online OPS Network selected firewalls / external interfaces (particularly from the Firewall application content inspection (Layer 4 through Layer 7)) (OPS Network) • Configure, optimize and test the transparent firewall failover functionality running in HA and standalone mode with online interfaces for the traffic impact (OPS Network) • Support External Support Platform (ESP) setup, including network platform configuration & Integration (Layer 2 and Layer 3) of switch, configure firewall with S2S VPN, DMZ, NAT and Internet using ACL policies, IPS policies, URL & Content filtering policies, VPN policies, NAT policies, hardening of switch and firewall as per the hardening guideline • Provide troubleshooting support during online deployment & integration (OPS Network) Hardening Support: • Assist on the hardening of Online / Offline SMRC network equipment and firewalls • Assist on the hardening of Online / offline OPS firewalls (OPS Network). • Troubleshoot / fix any operational / unknown issues occurs in the environment due to the hardening configuration on network devices (Offline, Online SMRC) • Support in case any issue with hardening of online firewalls / any operational issue occurs due to the hardening of online network devices (OPS Network)

Requirements · Degree in Electrical / Electronic / Telecommunications Engineering · Minimum 5 years of experience working in the relevant field/industry · At least cat 2 security clearance · Strong advantage on following Professional qualifications: Ø Cisco Certified Networking Associate (CCNA), Cisco Certified Networking Professional (CCNP), Cisco Certified Design Associate (CCDA) Ø Huawei Certified ICT Associate (HCIA), Huawei Certified ICT Professional (HCIP) Ø Or other vendor specific courses, such as Juniper Certified Internet Expert (JNCIE) · Professional knowledge and experience in network detailed design and implementations Ø On technologies including SDH, MPLS-TP, IP, IP/MPLS, Ethernet etc, Ø Cable network design (fibre, copper, structured cabling), Ø 4G/5G/Wifi network design, Ø Infra design (Virtualisation, VMWare, Windows, Linux, IT services), Ø Cybersecurity implementation (Hardening, FW, AV,…), Ø Scripting (python, …), Ø Network detailed design, administration, troubleshooting, capacity optimization, Ø Network security design and implementation. · Demonstrating a degree of initiative, and resourcefulness in solving problems · Resourceful and analytical in design activities, ability to use pertinent data for meticulous recommendations