Network Security Engineer
On-siteSingapore, Singapore
Singapore, SingaporeOn-siteFull TimeMedium
Full TimeMedium
Job Summary
Design and govern multi-AIDC network security architecture, including segmentation, Zero Trust, and firewall policy lifecycle management. Build automation for network policy drift detection and compliance validation, establishing baselines for lateral-movement detection and edge DDoS protection. Harden high-speed fabric and management-plane networks while mapping controls for SOC2 and ISO 27001 audits. Report detections to SecOps for response and manage access policies through PAM and MFA.
Required Qualifications
- 5+ years in network security engineering
- hands-on cloud / data center network security experience
- Strong command of network segmentation
- Zero Trust
- firewall & security-group policy
- ZTNA (e.g., Zscaler)
- SASE
- Familiar with public / private cloud network security
- VPC/NSG
- security groups
- IaC
- Policy-as-Code
- automation skills
- Terraform
- Ansible
- Python or Go scripting
- Experience with network monitoring
- NDR
- flow analysis
- lateral-movement detection
- Adversarial mindset
- assess architectural weaknesses from an attacker's view
- deliver risk-graded (CRITICAL–LOW) mitigation and detection strategies
- AI data center / GPU cluster networking experience
- familiarity with InfiniBand/RoCE/UFM
- eBPF-based observability
- Tetragon
- Cilium
- Financial-grade / high-compliance industry security background
- CISSP / CCNP Security or equivalent certification
- Working proficiency in both Chinese and English
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.