ICT Security Engineer (Network Architecture, Network Security, WLC Design, SD-WAN, IPSec VPN, DHCP Snooping)

Responsibilities • Design, deploy, and optimize highly scalable enterprise networks utilizing advanced routing protocols and multi-vendor hardware like Cisco, Huawei, Aruba and Maipu. • Configure and administer FortiGate firewalls, including security policies, traffic controls and security profiles. • Implement end-to-end SD-WAN across multi-ISP environments, complex firewall policies, deep-packet/certificate inspection, WAF, and secure remote access (SSL VPN). • Architect and secure campus wireless networks using centralized WLC designs. • Manage Cisco switching and network segmentation, including VLAN configuration and access controls. • Implement network security measures such as ACLs, 802.1X authentication, RADIUS, DHCP Snooping and Dynamic ARP Inspection. • Monitor network and security events, investigate connectivity or security issues, and provide L2/L3 technical support. • Support the deployment and maintenance of wireless network infrastructure and secure access solutions. • Perform network troubleshooting, security hardening and infrastructure improvement activities. • Maintain technical documentation and support handover and knowledge-sharing activities. Requirements • 7+ years of experience in Network Engineering, Network Security with good experience in Network Architecture. • Strong hands-on experience with FortiGate firewall administration and network security policies. • Proven experience with FortiGate, Check Point, Palo Alto etc for Firewall and security appliances. • Proven experience in SD-WAN and IPSec/SSL VPN implementation and support. • Hands-on experience in Cisco switching, VLANs and network segmentation. • Experience with network security technologies such as ACLs, RADIUS, 802.1X, DHCP Snooping, Dynamic ARP Inspection, STP, HSRP, VRRP, and QoS. • Expertise in AC/WLC design, AP deployments, SSID 802.1X with dynamic VLAN mapping, and RSSI tuning for seamless roaming across Ruijie, Ubiquiti, Aruba and Maipu hardware. • Experience in routing protocols, particularly OSPF and BGP. • Experience working with multi-vendor network and security environments. • Relevant certifications such as CCNA, CCNP or Fortinet certifications will be an advantage. • Availability to provide on-call standby support during weekends, as required.