Senior Network Engineer

Company:

Sopra Steria is a listed European tech leader specializing in Consulting, Digital Services, and Software. With 60,000 employees worldwide across Europe, North America and Asia, Singapore serves as the HQ for our APAC operations. We focus on delivering Infrastructure, Cloud and Cybersecurity services across the region.

We are looking for a Senior Network Engineer to assist one of our key clients in Singapore. This is a great opportunity for Network Engineers who enjoy hands-on work, solving real-world challenges, and being involved in end-to-end project implementation.

Responsibilities:

Design and Document Preparation:

• Provide networking expertise, revise solution architecture drawings and diagrams
• Prepare the design documents including Low Level Design (LLD) documents for OPS Network and SMRC Network, firewalls configuration, IDS/IPS and hardening states.
• Prepare ITD (Test procedure) document for OPS Network and SMRC Network
• Prepare new or update all the relevant documents (e.g. Maintenance or User Manual, Config/Rollback/Troubleshoot Procedure) required for the OPS Network (FMC, FTD (firewalls)) and SMRC Network (OFL+ONL)

Integration Support:

• Support configuration changes to system platforms in factory and customer sites.
• Work on the configurations of interfaces, zones, firewall policies, IPS, application filtering for single firewall (Offline)
• Support the integration of Offline HSE and Offline Remote Site Switches with Offline SMRC Servers e.g. PIM/PAM, SNMS/SMS/NMS/LMS, RADIUS, NTP, SIEM etc (Offline)
• Support the integration of Online AMTS New HSE & Remote sites switches with Offline SMRC Servers e.g. PIM/PAM, SNMS/SMS/LMS, RADIUS, NTP, SIEM etc. (Offline)
• Assist in the SMRC network configuration, Integration, testing, verification and troubleshooting of the following technology used in SMRC Network (Online SMRC)
• Work on the configuration, integration, testing, verification and troubleshooting of Online OPS Network selected firewalls / external interfaces (particularly from the Firewall application content inspection (Layer 4 through Layer 7)) (OPS Network)
• Configure, optimize and test the transparent firewall failover functionality running in HA and standalone mode with online interfaces for the traffic impact (OPS Network)
• Support External Support Platform (ESP) setup, including network platform configuration & Integration (Layer 2 and Layer 3) of switch, configure firewall with S2S VPN, DMZ, NAT and Internet using ACL policies, IPS policies, URL & Content filtering policies, VPN policies, NAT policies, hardening of switch and firewall as per the hardening guideline
• Provide troubleshooting support during online deployment & integration (OPS Network)

Hardening Support:

• Assist on the hardening of Online / Offline SMRC network equipment and firewalls
• Assist on the hardening of Online / offline OPS firewalls (OPS Network).
• Troubleshoot / fix if there are any operational / unknown issues occurs in the environment due to the hardening configuration on network devices (Offline, Online SMRC)
• Support in case any issue with hardening of online firewalls / any operational issue occurs due to the hardening of online network devices (OPS Network).
• Maintain and upgrade Client Bank network and connectivity to other CIB offices, regional exchanges, collocation sites and clients
• Provide network design, solution deployment, and technical documentation for network and security related equipment such as LAN, WAN, Firewall, Load Balancer etc.
• Translates business requirements into technical designs that ensure availability, stability, scalability, security and ensure the solutions comply to Bank’s standard
• Participates in coordination with the Central architecture team to various initiatives such as Proof of Concepts, evaluations and tests. Assures those initiatives are coherent with the regional constraints
• Understands the Regional business requirements, translates them and elaborates in coordination with the central engineering teams suitable technical ULL (Ultra-low latency) solutions in line with the Client security Infrastructure standards.
• Gathers all business requirements, defines, documents and communicates solutions to the appropriate parties and implements or oversees implementation of those solutions with the central team

• 3–7 years of hands-on experience in network engineering or network security
• Strong experience with routing, switching, and firewalls (Cisco / Palo Alto / Fortinet)
• Hands-on skills in configuring: VLANs, VPN, ACLs, NAT, DMZ, HA firewalls, IPS/IDS
• Experience preparing LLDs, network diagrams, and technical documentation
• Able to support integration, testing, validation, and troubleshooting in staging and production environments
• Knowledge of tools/services such as RADIUS, NTP, SIEM, PIM/PAM, NMS/LMS
• Strong analytical and problem-solving skills

• Regular team buildings
• 18 leave days / year
• Insurance: GP, Hospitalisation, Dental and Optical
• Annual bonus
• Working hours: from 9am to 6pm, Monday to Friday
• Training and certifications paths