Kerja Sepenuh Masa, Network Engineer di LPS - Maukerja

Role Summary:

The Network Engineer (L2 - L3 Level) will be responsible for the implementation, administration, operational support, troubleshooting, optimization, and technical design of enterprise network infrastructure.

Key responsibilities include:

• Serve as the L3 escalation point for network incidents and complex technical issues escalated by L1/L2 support teams.
• Perform advanced troubleshooting of network connectivity, latency, packet loss, routing, switching, firewall connectivity, DNS, load-balancing, and hybrid-cloud connectivity issues.
• Perform detailed troubleshooting using tools and techniques such as packet captures, traceroute, routing-table analysis, interface statistics, flow analysis, and network monitoring platforms.
• Perform configuration, implementation, upgrade, migration, and troubleshooting activities for enterprise network infrastructure.
• Review existing network configurations and identify performance, resilience, security, capacity, and configuration improvements.
• Support Incident, Problem, Change, and Request Management processes and provide technical inputs for major incidents and problem investigations.
• Conduct RCA for recurring or major network incidents and recommend preventive measures.
• Prepare and review Change Requests, implementation plans, validation plans, rollback plans, and risk assessments for network changes.
• Support network patching, firmware upgrades, vulnerability remediation, and technology lifecycle/EOS/EOL activities.
• Conduct pre- and post-change validation and ensure services are restored and operating normally.
• Support infrastructure projects including network refreshes, migrations, cloud onboarding, new system deployments, and data centre changes.
• Produce and maintain network diagrams, configuration documents, SOPs, troubleshooting guides, IP addressing records, and operational documentation.
• Work closely with cybersecurity teams on network segmentation, firewall requirements, vulnerability findings, security hardening, and remediation activities.
• Coordinate with OEMs and technology vendors for complex technical issues and drive cases through to resolution.
• Provide technical guidance to L1/L2 engineers and conduct knowledge transfer and operational handover where required.
• Provide technical consultancy and architecture recommendations to improve scalability, security, resilience, operational efficiency, and cost optimization.
• Conduct architecture reviews and technology evaluations for network modernisation initiatives.
• Architecture review, HLD/LLD design, technical consultancy, and network transformation planning responsibilities.

Requirements:

• Minimum 8–10 years of experience in enterprise network engineering, with strong hands-on experience providing L3 technical support, implementation, troubleshooting, and network design.
• At least 5 years of experience in complex enterprise or data centre network environments, preferably supporting business-critical infrastructure.
• Proven experience implementing, operating, troubleshooting, and supporting large-scale on-premises enterprise networks, including campus LAN/WAN, data centres, Internet edge, DMZ, and wireless environments.
• Strong experience acting as the L3 escalation point for complex network incidents, performance issues, connectivity failures, routing problems, and infrastructure changes.
• Experience supporting hybrid network environments integrating on-premises infrastructure with GCC/GCC+ and public cloud platforms such as Microsoft Azure and AWS.
• Strong understanding of data centre networking, including core/distribution/access architecture, network segmentation, redundancy, resiliency, and high availability.
• Experience with hybrid connectivity technologies including ExpressRoute, Site-to-Site VPN, MPLS, SD-WAN, and AWS Direct Connect or equivalent technologies.
• Experience performing network migrations, technology refreshes, upgrades, capacity expansion, vulnerability remediation, and lifecycle management.
• Experience supporting major incidents and performing root cause analysis (RCA) and implementing corrective and preventive actions.
• Experience working with Singapore Government agencies or Statutory Boards is highly desirable.
• Familiarity with Singapore Government ICT, cybersecurity, change-management, and cloud governance requirements is an advantage.
• Ability to provide technical guidance and mentoring to L1/L2 engineers and coordinate with infrastructure, security, cloud, application, and vendor teams.

Technical Expertise:

Candidates should have strong hands-on knowledge in:

Enterprise & Data Centre Networking

• Campus LAN/WAN
• Data Centre Networks
• Core, Distribution and Access Switching
• Enterprise Wireless
• Internet Edge and DMZ
• Network Segmentation
• High Availability and Redundancy
• Load Balancers and Reverse Proxies
• IP Address Management (IPAM)
• DNS/DHCP
• Network Monitoring and Performance Management

Hybrid Cloud Networking

• GCC / GCC+
• Microsoft Azure Networking
• AWS Networking
• ExpressRoute
• AWS Direct Connect
• Site-to-Site VPN
• Azure Firewall
• Azure Application Gateway
• Azure WAF / WAF Policies
• Network Security Groups (NSG)
• Azure Front Door
• Azure Virtual WAN
• VNet/VPC Peering
• Transit/Hub-and-Spoke Networking
• DNS and Hybrid Name Resolution
• Cloud routing and connectivity troubleshooting

Routing & Switching

• OSPF
• BGP
• VRRP/HSRP
• VLAN / Trunking
• STP/RSTP/MSTP
• VXLAN
• QoS
• MPLS
• IPv4/IPv6
• NAT
• Route redistribution and route filtering

Troubleshooting Capability:

The candidate should be capable of independently troubleshooting complex issues involving routing convergence, asymmetric routing, BGP/OSPF adjacency, VLAN/trunking, packet drops, MTU/MSS, latency, DNS resolution, NAT, VPN tunnels, hybrid-cloud routing, load balancers, firewall paths, and application connectivity.

For an L3 Engineer, I would specifically avoid making “network architecture governance” and “technical consultancy” the primary responsibility. The person can certainly contribute to design reviews, but the core expectation should be: hands-on SME + escalation engineer + complex troubleshooting + implementation/change ownership + RCA/problem management.

#LPS