Job Summary:

We are seeking a highly skilled Network & Cybersecurity Engineer with experience in securing enterprise and government infrastructures, including IM8-aligned environments. The ideal candidate will have hands-on expertise in managing firewalls, performing vulnerability assessments, and implementing secure hybrid (on-prem/cloud) network solutions. Strong knowledge of incident response, system hardening, risk management, and audit support is essential.

Responsibilities:

Deploy, configure, and manage enterprise-grade firewalls including Palo Alto, FortiGate, and SonicWall across hybrid infrastructures.

Design secure routing and switching architectures using protocols such as OSPF, BGP, and VLAN segmentation.

Perform IOC scanning, VAPT, and root cause analysis for cybersecurity incidents.

Administer compliance and system hardening following IM8 and CIS Benchmarks on both Windows Server and Linux systems.

Implement secure remote access solutions (SSL/IPSec VPNs) and manage authentication through AD, RADIUS, and TACACS+.

Monitor and analyze logs using SIEM platforms (e.g., FortiSIEM, AWS CloudWatch) and implement threat detection workflows.

Coordinate with internal stakeholders, clients, and 3rd-party vendors to support project delivery, audit readiness, and risk governance.

Support infrastructure and compliance audits with Singapore Government, KPMG, and PwC.

Lead cybersecurity initiatives for LTA projects such as Passenger Information Display System (PIDS) and Parking Guidance System (PGS).

Maintain asset inventories, monitor EOL/EOS devices, and enforce baseline standards for firmware and software.

Requirements

Minimum 5 years of experience in enterprise network security engineering

Palo Alto Certified (PCNSE) with strong working knowledge of FortiGate and Cisco security solutions.

Experience with IM8/CIS compliance, VAPT, IOC scanning, and forensic investigations

Proficiency in routing/switching protocols (OSPF, BGP, EIGRP, MPLS)

Experience with identity and access control systems, including 802.1X and LDAP integrations

Hands-on experience with SIEM tools, NAC solutions, and monitoring frameworks

Familiarity with AWS cloud environments (VPC, IAM, hybrid network security) and AWS Certified mandatory.

Proven experience in managing government or high-security infrastructure projects

Preferred CCNA and CCNP Certified

Must be willing to work in rotational shifts and provide weekend support as needed.