Network Engineer - Campus and NAC
Network engineer owning end-to-end design, build and lifecycle of an enterprise campus network, Wi-Fi 6 wireless, SD-WAN and NAC platforms (Cisco ISE, Forescout) supporting a banking client in Singapore. Hands-on on-site role: Catalyst 9K refreshes, site deployments, surveys and ITIL-governed changes.
- Compensation
- SGD 7K–SGD 10K / mo
- Location
- Singapore
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- 6+ years
- Category
- Network engineering
- Posted
Skills
Must have
- Bachelor's degree in Computer Science, Information Technology, or related discipline
- 6-10 years of hands-on experience in enterprise campus network engineering
- Proven implementation expertise with Cisco Catalyst 9K switching in large-scale enterprise environments
- Strong background in enterprise wireless design (Cisco, Juniper, Aruba, or Meraki) and proficiency with wireless survey tools (Ekahau or equivalent)
- Advanced expertise in Cisco ISE (802.1X/MAB, profiling, posture, guest, and TACACS+ policy design)
- Familiarity with Forescout (eyeSight/eyeControl) and multi-platform NAC coexistence strategies
- Hands-on SD-WAN design and deployment experience (Cisco Catalyst SD-WAN/Viptela, Meraki, or similar)
- Experience interfacing with Singapore telecom carriers
- Strong analytical, troubleshooting, and collaborative communication skills
Nice to have
- Experience with Cisco Catalyst Centre (DNAC), Meraki, Aruba, or Juniper wireless platforms
- Prior experience within financial services or other highly regulated sectors
- Certifications such as Cisco CCNP Enterprise, Cisco SISE / CCNP Security, Forescout Certified Associate/Professional, or CWNA/CWDP
Full description
About the Role
We are seeking a Network Engineer (Campus and NAC) to join our dynamic infrastructure team supporting a premier banking and financial services institution in Singapore. In this role, you will lead the end-to-end design, build, and lifecycle engineering of our enterprise campus network, wireless architecture, WAN/SD-WAN, and Network Access Control (NAC) platforms.
As an on-site technical authority, you will spearhead hands-on implementations, hardware refreshes, wireless validation surveys, new site deployments, and data center cage installations. You will serve as the primary engineering escalation point for complex access and campus networking challenges.
Responsibilities
- Campus & Wireless Engineering: Design and implement Cisco Catalyst 9K campus switching standards, hardware refreshes, software upgrades, and network segmentation. Engineer enterprise Wi-Fi 6/6E controller architectures and SSID/RF designs, and conduct predictive and validation surveys.
- Hands-on Implementation: Lead on-site deployments, structured cabling coordination, equipment migrations, and data centre cage infrastructure work.
- Network Access Control (NAC): Architect and configure Cisco ISE policies (802.1X, MAB, device profiling, posture assessment, guest access, and TACACS+ device administration).
- Forescout & Coexistence: Design Forescout eyeSight classification, eyeControl actions, and ensure comprehensive visibility over agentless, IoT, and OT devices. Define and maintain seamless coexistence designs between Cisco ISE and Forescout to prevent policy conflicts.
- WAN, SD-WAN & Governance: Design enterprise SD-WAN topologies, site templates, and rollout strategies. Manage new circuit implementations and service modifications directly with local telecommunications carriers.
- Compliance & ITIL Change Management: Author engineering designs and implementation plans adhering to strict ITIL change management processes. Support regulatory audit requirements (e.g., technology risk management frameworks) with robust access control and change evidence documentation.
Requirements
- Bachelor’s degree in Computer Science, Information Technology, or a related discipline.
- 6 to 10 years of hands-on professional experience in enterprise campus network engineering.
- Proven implementation expertise with Cisco Catalyst 9K switching in large-scale enterprise environments.
- Strong background in enterprise wireless design (Cisco, Juniper, Aruba, or Meraki) and proficiency with wireless survey tools (Ekahau or equivalent).
- Advanced expertise in Cisco ISE (802.1X/MAB, profiling, posture, guest, and TACACS+ policy design).
- Familiarity with Forescout (eyeSight/eyeControl) and demonstrated understanding of multi-platform NAC coexistence strategies.