ICT Security Engineer (Network Architecture, Network Security, WLC Design, SD-WAN, IPSec VPN, DHCP Snooping)

Responsibilities

• Design, deploy, and optimize highly scalable enterprise networks utilizing advanced routing protocols and multi-vendor hardware like Cisco, Huawei, Aruba and Maipu.
• Configure and administer FortiGate firewalls, including security policies, traffic controls and security profiles.
• Implement end-to-end SD-WAN across multi-ISP environments, complex firewall policies, deep-packet/certificate inspection, WAF, and secure remote access (SSL VPN).
• Architect and secure campus wireless networks using centralized WLC designs.
• Manage Cisco switching and network segmentation, including VLAN configuration and access controls.
• Implement network security measures such as ACLs, 802.1X authentication, RADIUS, DHCP Snooping and Dynamic ARP Inspection.
• Monitor network and security events, investigate connectivity or security issues, and provide L2/L3 technical support.
• Support the deployment and maintenance of wireless network infrastructure and secure access solutions.
• Perform network troubleshooting, security hardening and infrastructure improvement activities.
• Maintain technical documentation and support handover and knowledge-sharing activities.

Requirements

• 7+ years of experience in Network Engineering, Network Security with good experience in Network Architecture
• Strong hands-on experience with FortiGate firewall administration and network security policies.
• Proven experience with FortiGate, Check Point, Palo Alto etc for Firewall and security appliances.
• Proven experience in SD-WAN and IPSec/SSL VPN implementation and support.
• Hands-on experience in Cisco switching, VLANs and network segmentation.
• Experience with network security technologies such as ACLs, RADIUS, 802.1X, DHCP Snooping, Dynamic ARP Inspection, STP, HSRP, VRRP, and QoS
• Expertise in AC/WLC design, AP deployments, SSID 802.1X with dynamic VLAN mapping, and RSSI tuning for seamless roaming across Ruijie, Ubiquiti, Aruba and Maipu hardware
• Experience in routing protocols, particularly OSPF and BGP.
• Experience working with multi-vendor network and security environments.
• Relevant certifications such as CCNA, CCNP or Fortinet certifications will be an advantage.
• Availability to provide on-call standby support during weekends, as required.