Junior Cloud Network ENgineer

Key Responsibilities

Network Architecture & Design (Azure & Hybrid)

Design, deploy, and manage scalable and secure network architectures in Microsoft Azure, encompassing core Azure networking services such as Azure Virtual Network (VNet), Azure ExpressRoute, Azure Virtual WAN, Azure DNS, Azure Firewall, Azure Application Gateway/Front Door, and Load Balancers

Architect and implement robust hybrid cloud connectivity solutions, including Azure VPN Gateway, ExpressRoute, and site-to-site VPNs

Strategize and optimize network segmentation, IP addressing schemes, and routing policies across both on-premises and Azure environments

Design and implement network solutions tailored for the Singapore Government Commercial Cloud (GCC) framework, adhering to IM8 policies and government security standards

On-Premises Network Operations & Management

Manage, configure, and troubleshoot enterprise-grade network devices including routers (Cisco, Juniper) and switches (Cisco Catalyst/Nexus, Arista)

Work extensively with protocols such as BGP, OSPF, EIGRP, VLANs, STP, HSRP/VRRP, and QoS

Administer and maintain firewalls (Checkpoint, Palo Alto Networks, Cisco ASA) including policies and VPNs

Oversee web proxy solutions (Bluecoat ProxySG, Zscaler)

Manage enterprise wireless networks including WLCs and Access Points

Implement and manage load balancers (F5 BIG-IP, Citrix ADC)

Azure Cloud Network Management

Monitor and optimize Azure network performance and reliability

Troubleshoot complex Azure network issues

Enforce security best practices using NSGs, Defender for Cloud, Azure DDoS Protection, and Front Door WAF

Logging, Alerts & Monitoring

Configure monitoring and alerting using Azure Monitor, Log Analytics, Activity Log, and Resource Health

Use Azure Policy and Azure Resource Graph for compliance checks

Leverage Microsoft Defender for Cloud for threat detection and security posture management

Automation & Optimization

Develop Infrastructure as Code (IaC) using ARM templates, Bicep, and Terraform

Integrate deployments with GitHub CI/CD pipelines

Continuously improve network efficiency, scalability, and security using new Azure and on-prem technologies

Collaboration & Support

Work closely with DevOps, Security, Application, and Infrastructure teams

Collaborate with third-party vendors and service providers

Documentation & Compliance

Maintain detailed network diagrams, configurations, and SOPs

Ensure compliance with industry standards, regulatory requirements, and internal security policies

Adhere to Singapore government policies including IM8 and GCC security requirements

Qualifications & Skills

Bachelor's degree in Computer Science, Information Technology, or related discipline

Minimum 1-2 years of experience in enterprise networking across on-premises and cloud platforms

Strong expertise in router/switch configuration (Cisco, Juniper, Arista)

Advanced routing protocols knowledge (BGP, OSPF, EIGRP)

Hands-on firewall management experience

Experience with proxies and load balancers

Deep knowledge of Azure networking services (VNet, ExpressRoute, Virtual WAN, Firewall, App Gateway, Front Door, NSGs)

Proven hybrid cloud design and implementation experience

Proficiency with Azure Monitor, Log Analytics, Defender for Cloud

Strong experience with Terraform, Bicep, and CI/CD pipelines

Essential: Singapore Government Commercial Cloud (GCC) and IM8 compliance experience

Certifications

Microsoft Certified: Azure Network Engineer Associate

Microsoft Certified: Azure Solutions Architect Expert

Microsoft Certified: Azure Security Engineer Associate

CCNP Enterprise / CCIE / JNCIP / PCNSE