Senior Network Security Engineer - CISCO Firewall

As a Senior Network Engineer, you will produce detailed network architecture designs and implement network systems to meet the data communication needs as required.

Responsibilities

Design and Document Preparation:

• Provide networking expertise, revise solution architecture drawings and diagrams

• Prepare the design documents including Low Level Design (LLD) documents for OPS Network and SMRC Network, firewalls configuration, IDS/IPS and hardening states.

• Prepare ITD (Test procedure) document for OPS Network and SMRC Network

· Prepare new or update all the relevant documents (e.g. Maintenance or User Manual, Config / Rollback / Troubleshoot Procedure) required for the OPS Network (FMC, FTD (firewalls)) and SMRC Network (OFL+ONL)

Integration Support:

• Support configuration changes to system platforms in factory and customer sites.

• Work on the configurations of interfaces, zones, firewall policies, IPS, application filtering for single firewall (Offline)

• Support the integration of Offline HSE and Offline Remote Site Switches with Offline SMRC Servers e.g. PIM/PAM, SNMS/SMS/NMS/LMS, RADIUS, NTP, SIEM etc (Offline)

• Support the integration of Online AMTS New HSE & Remote sites switches with Offline SMRC Servers e.g. PIM/PAM, SNMS/SMS/LMS, RADIUS, NTP, SIEM etc. (Offline)

• Assist in the SMRC network configuration, Integration, testing, verification and troubleshooting of the following technology used in SMRC Network (Online SMRC)

• Work on the configuration, integration, testing, verification and troubleshooting of Online OPS Network selected firewalls / external interfaces (particularly from the Firewall application content inspection (Layer 4 through Layer 7)) (OPS Network)

• Configure, optimize and test the transparent firewall failover functionality running in HA and standalone mode with online interfaces for the traffic impact (OPS Network)

• Support External Support Platform (ESP) setup, including network platform configuration & Integration (Layer 2 and Layer 3) of switch, configure firewall with S2S VPN, DMZ, NAT and Internet using ACL policies, IPS policies, URL & Content filtering policies, VPN policies, NAT policies, hardening of switch and firewall as per the hardening guideline

• Provide troubleshooting support during online deployment & integration (OPS Network)

Hardening Support:

• Assist on the hardening of Online / Offline SMRC network equipment and firewalls

• Assist on the hardening of Online / offline OPS firewalls (OPS Network).

• Troubleshoot / fix any operational / unknown issues occurs in the environment due to the hardening configuration on network devices (Offline, Online SMRC)

• Support in case any issue with hardening of online firewalls / any operational issue occurs due to the hardening of online network devices (OPS Network)

Requirements

· Degree in Electrical / Electronic / Telecommunications Engineering

· Minimum 5 years of experience working in the relevant field/industry

· At least cat 2 security clearance

· Strong advantage on following Professional qualifications:

Ø Cisco Certified Networking Associate (CCNA), Cisco Certified Networking Professional (CCNP), Cisco Certified Design Associate (CCDA)

Ø Huawei Certified ICT Associate (HCIA), Huawei Certified ICT Professional (HCIP)

Ø Or other vendor specific courses, such as Juniper Certified Internet Expert (JNCIE)

· Professional knowledge and experience in network detailed design and implementations

Ø On technologies including SDH, MPLS-TP, IP, IP/MPLS, Ethernet etc,

Ø Cable network design (fibre, copper, structured cabling),

Ø 4G/5G/Wifi network design,

Ø Infra design (Virtualisation, VMWare, Windows, Linux, IT services),

Ø Cybersecurity implementation (Hardening, FW, AV,…),

Ø Scripting (python, …),

Ø Network detailed design, administration, troubleshooting, capacity optimization,

Ø Network security design and implementation.

· Demonstrating a degree of initiative, and resourcefulness in solving problems

· Resourceful and analytical in design activities, ability to use pertinent data for meticulous recommendations