Network and Security Engineer/ Manager (Rayong: MNC) - Up to 140k THB/ Month

Salary: ฿95,000 – ฿140,000 per month

Location: Rayong, 5 days onsite
Scope: IT Network Infrastructure | Enterprise Environment

Role Nature: Individual contributor/ stand-alone role - report to Manager based in Europe,
collaborate closely with Infrastructure Manager in Thailand (colleague).

A global industrial technology leader is looking for a senior-level engineer to take ownership of high-availability enterprise network and security infrastructure with the primary focus on Rayong site, and flexible to later cover multi-sites according to the assignments.

What this role isn't and what it is:

❌ This is not a coordinator type or SI roles, nor it suits if you purely have non-in-house experience managing vendors.

✅ Working/ Having recently worked within the manufacturing site(s) itself as the internal network security engineer.

This is a pure hand-on technical, in-house role(you won't have to manage the budget, nor the OPEX, CAPEX - as this is pure engineer work). This person will understand the network architecture design diagram from the global, optimization, and working 100% technical hand-on (*individual contributor role/ no direct report) within a global IT Security & Technical Services organization.

If you are the person others escalate complex network issues to - read on.

Your Mission

You will ensure the integrity, performance, and security of a large-scale enterprise network serving the primary (Rayong) and possibly later on multiple sites.

You will design, implement, secure, optimize, and continuously improve a mission-critical network and security infrastructure environment.

You will act as a technical authority for LAN and Network Security locally, working closely with local-based multinational colleagues, regional, and global teams while being based in, Rayong, Thailand.

What You’ll Own

• Design and implement secure, high-availability LAN/WAN architectures

• Lead network security initiatives (firewall, segmentation, DMZ, access governance)

• Optimize performance through monitoring, tuning, and tech refresh programs

• Drive cost-efficient architecture decisions

• Define safeguards to protect enterprise data flows

• Manage access control policies in compliance with corporate security standards

• Build monitoring dashboards (performance, security, availability, traffic flow)

• Handle incident resolution, escalations, and on-call support

• Provide remote support for site implementations globally

• Maintain and upgrade technical documentation

You will operate as a hands-on technical person (improve security with network being involved), not just a ticket processor, and this is not a troubleshooting role.

…………………..

*Core Technical Requirements: You’re solid in:

• Cisco Switch

• Palo Alto

As one of the main tasks are configurating Cisco and Firewall

Technical Environment (Enterprise-Grade)

You should be deeply comfortable with:

Networking

• Cisco switching (C9200, C9300, C9500, 2960X, 4500X, Nexus 9K)

• Cisco ACI (Data Center)

• WAN technologies: MPLS, OSPF, BGP, VRF

• Riverbed Steelhead (WAN optimization)

Wireless

• Cisco WLC, Meraki

• AP 2802i, 3802i

Security

• Palo Alto Firewalls (+++)

• GlobalProtect VPN

• F5 / Citrix Netscaler (reverse proxy, load balancing)

• DMZ architecture

Infrastructure & Services

• Infoblox (External DNS)

• Windows DNS

• Azure / AWS / OCI networking fundamentals

• SolarWinds

• ITIL framework

• Basic telephony (3CX, Teams)

If you have worked in multi-site, manufacturing enterprise architecture, you will feel right at home here.

…………………..

What Makes You a Strong Fit

• 5+ years in IT, including 3-5+ years focused on Network & Security engineering

• Strong Cisco expertise (advanced level expected)

• Solid Palo Alto experience

• Comfortable working with already designed architecture from the global

• Experience in enterprise or multinational environments within manufacturing sector

• Fluent in Thai and English

• Able to work onsite in Rayong 5 days a week, flexible to later work with multi-sites after Rayong site assignment is done

• Calm and structured under pressure

• If knows AD, Cloud - will help in understanding the work when collaborating with other teams (monitoring network on Cloud), however, there’s the existing Cloud team so you don’t need to be well-versed on Cloud

Preferred Certifications:

• CCNP (Routing & Switching / Security / Wireless)

• CCNA

Education:

• Engineering degree or Master’s in Network / Security / IT or relevant education background

…………………..

Why This Role Could be for You:

• Influence enterprise level network standards (current headcounts is around 3,000 – 3,500 people and plan to grow to 7,000 in 2027)

• Work within a global Center of Excellence structure

• Drive modernization and optimization projects

• Operate in a technically mature enterprise environment