Senior Network Engineer

About

Liquid Group is a FinTech payments services group based in Singapore. Liquid empowers and connects businesses and individuals to make transactions in a smart, secure, and cost-effective way, anywhere in the world.

We operate a regional payment network that enables cross-border QR payment services for e-wallet operators, banks, and merchants. We also provide white-label solutions to accelerate the development and adoption of mobile payments for our business partners.

We work collaboratively and adaptively, exploring innovative ideas and solving challenging problems to develop our products. Together, we ensure efficiency, security, and convenience for our partners and customers.

Job Scope

• Design, build, implement, configure, and manage enterprise networking infrastructure within AWS cloud environments.
• Own network infrastructure throughout its lifecycle, from initial setup and production deployment to monitoring, upgrades, troubleshooting, and ongoing maintenance.
• Deploy, configure, and manage Check Point, Fortinet FortiGate, and Palo Alto Networks firewalls in AWS environments.
• Configure and maintain firewall policies, NAT rules, routing, security zones, access controls, and VPN connectivity.
• Perform firewall patching, firmware upgrades, vulnerability remediation, configuration backups, and lifecycle management.
• Design, implement, and manage AWS networking components, including:
• VPCs, public and private subnets, and route tables
• Internet Gateways and NAT Gateways
• Security Groups and Network ACLs
• VPC Peering and Transit Gateway
• Load Balancers
• Site-to-Site VPN and private connectivity
• Set up, configure, and manage AWS Direct Connect, including Direct Connect Gateway, Virtual Interfaces, BGP configuration, routing, redundancy, failover, and VPN backup connectivity.
• Establish and maintain secure connectivity between AWS environments and external partners, service providers, financial networks, and third parties.
• Troubleshoot complex networking issues involving routing, firewalls, VPNs, connectivity, latency, packet loss, DNS, and application performance.
• Monitor network availability, utilisation, performance, security, and capacity to ensure reliable operations.
• Conduct network security assessments, firewall rule reviews, and access control reviews.
• Plan and execute network upgrades, migrations, and architecture improvements.
• Support Disaster Recovery (DR) planning, testing, and failover exercises.
• Maintain network architecture diagrams, firewall documentation, routing information, configuration records, and operational runbooks.
• Prepare implementation plans, rollback procedures, test plans, and validation steps for production network changes.
• Collaborate closely with Cloud, DevOps, Security, SOC, Application, and external vendor teams.
• Provide production support and participate in an on-call rotation.

Requirements

• At least 7 years of hands-on experience in Network Engineering, Cloud Networking, or Network Security.
• Proven experience designing and building AWS network environments from the ground up.
• Strong hands-on experience with Check Point firewalls.
• Strong hands-on experience with Fortinet FortiGate firewalls.
• Experience with Palo Alto Networks firewalls.
• Strong hands-on experience in AWS networking design, implementation, and operations.
• Proven experience implementing and managing AWS Direct Connect.
• Strong understanding of the following networking technologies and concepts:
• AWS VPC architecture and subnetting
• Transit Gateway and Direct Connect
• Site-to-Site VPN and BGP
• Routing, NAT, and DNS
• Security Groups and Network ACLs
• Load Balancers and network segmentation
• Experience designing and implementing high availability, redundancy, and failover solutions.
• Proven ability to troubleshoot complex cloud networking and third-party connectivity issues.
• Strong understanding of network security principles, firewall governance, and access control.
• Experience supporting business-critical production environments.

Preferred Qualifications

• AWS Certified Advanced Networking - Specialty certification.
• Check Point CCSA or CCSE certification.
• Fortinet FCP or relevant NSE certification.
• Palo Alto Networks PCNSA or PCNSE certification.
• Experience in fintech, banking, payments, or other regulated industries.
• Experience with network automation using Terraform, Ansible, or Python.

Key Skills

AWS Networking | Network Design & Implementation | AWS Direct Connect | Check Point | Fortinet FortiGate | Palo Alto Networks | VPC | Transit Gateway | BGP | Site-to-Site VPN | Firewall Management | Network Security | High Availability | Cloud Connectivity | Disaster Recovery | Production Support