Senior/Executive Network Engineer – AFC Infrastructure

About the role

The Singapore government is seeking a Senior/Executive Network Engineer to design, implement and support the network infrastructure behind the Automatic Fare Collection (AFC) system, which covers public rail and bus ticketing. The engineer takes solutions from design through installation, testing, commissioning and ongoing improvement, working closely with project teams, system engineers, cybersecurity specialists, operators and vendors.

Key responsibilities

• Design practical, secure and resilient AFC networks covering LAN, WAN, WLAN, fibre and connectivity across on-premises, data centre and cloud environments
• Turn project and operational needs into network designs, equipment specifications, IP plans, security controls, configuration standards and implementation or rollback plans
• Install, configure, integrate and commission network equipment, servers and infrastructure in test and live environments
• Plan and carry out network changes, upgrades, migrations and technology refreshes, including patches, firmware and software updates, with minimal disruption to ticketing services
• Monitor network and system health, investigate alerts and incidents, troubleshoot faults and implement lasting fixes
• Maintain security controls such as firewalls, network access control, endpoint protection, secure access and network segmentation
• Maintain backups of critical configurations and data, test restoration and recovery, and support disaster-recovery exercises
• Keep network diagrams, configuration records, procedures, test results and troubleshooting guides up to date
• Automate routine work, standardise configurations and support planned cutovers, maintenance and onsite incident recovery outside normal office hours

Required profile

• Knowledge in Engineering, Computer Science, Information Systems or a related field
• At least 3 years of experience designing and implementing IT/OT networks
• CCNA certification preferred
• Ability to work independently as well as a team player

Required skills

• Common protocols such as TCP/IP, HTTP/S, FTPS, SFTP and the OSI model
• IP addressing, CIDR, subnets, firewalls, routers, MPLS and cloud/hybrid availability zones
• Network security, identity and access management, data protection, encryption, vulnerability management and threat detection
• Bonus: AWS GovCloud familiarity, DevSecOps, CI/CD, containerisation (ECS, EKS), serverless systems or data streaming pipelines