Senior/Executive Network Engineer – AFC Infrastructure

About the role

The Land Transport Authority (LTA) is seeking a Senior/Executive Network Engineer to design, implement and support the network infrastructure behind Singapore's Automatic Fare Collection (AFC) system. The engineer works on public-facing rail and bus ticketing infrastructure, taking solutions from design through installation, testing, commissioning and ongoing improvement.

Key responsibilities

• Design practical, secure and resilient AFC networks covering LAN, WAN, WLAN, fibre and connectivity across on-premises, datacentre and cloud environments.
• Turn project and operational needs into network designs, equipment specifications, IP plans, security controls, configuration standards and implementation or rollback plans.
• Install, configure, integrate and commission network equipment, servers and related infrastructure in test and live environments.
• Plan and carry out network changes, upgrades, migrations and technology refreshes, including patches, firmware and software updates, with minimal disruption to ticketing services.
• Monitor network and system health, investigate alerts and incidents, troubleshoot faults and implement lasting fixes.
• Maintain security controls such as firewalls, network access control, endpoint protection, secure access and network segmentation.
• Maintain backups of critical configurations and data, test restoration and recovery, and support disaster-recovery exercises.
• Keep network diagrams, configuration records, procedures, test results and troubleshooting guides up to date.
• Work with project teams, system engineers, cybersecurity specialists, operators, vendors and service providers, and look for ways to automate routine work and standardise configurations.
• Support planned cutovers, maintenance and onsite incident recovery outside normal office hours when required.

Required profile

• Knowledge in Engineering, Computer Science, Information Systems or a related field.
• At least 3 years of experience designing and implementing IT/OT networks.
• CCNA certification preferred.
• Ability to work independently as well as a team player.

Required skills

• Common network protocols such as TCP/IP, HTTP/S, FTPS and SFTP, and the OSI model.
• IP addressing, CIDR, subnets, firewalls, routers, MPLS and availability zone design in cloud and hybrid environments.
• Network security, identity and access management, data protection, encryption, vulnerability management and threat detection and response.
• Experience with Linux, Windows or AIX, and cloud environments such as AWS or Azure is an added advantage.
• Bonus: familiarity with Singapore's Government Commercial Cloud on AWS, DevSecOps, CI/CD, containerisation (ECS, EKS), serverless systems or data streaming pipelines.