{"id":2626634,"url":"https://alion.io/job/evernet-systems-senior-network-systems-engineer","title":"Senior Network & Systems Engineer","company":{"id":3903462,"name":"Evernet Systems","domain":"evernet.com.sg","url":"https://alion.io/company/evernet-systems","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Networking","role_family":"Networking","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":{"label":"SGT","utc_offset_min":8,"utc_offset_max":8},"hiring_geo_confidence":"explicit","locations":["Singapore"],"countries":["SG"],"hiring_countries":["SG"],"hiring_countries_total":1,"salary":{"min":6000,"max":7500,"currency":"SGD","period":"month","gross":true,"usd_annual":69996},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Azure","optional":false},{"name":"Crowdstrike","optional":false},{"name":"DHCP","optional":false},{"name":"DNS","optional":false},{"name":"FortiGate","optional":false},{"name":"Hyper-V","optional":false},{"name":"ITIL","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Office","optional":false},{"name":"PowerShell","optional":false},{"name":"VLAN","optional":false},{"name":"VMWare","optional":false},{"name":"VPN","optional":false},{"name":"Windows Server","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-15T00:00:00Z","employer_posted_date":null,"last_verified_at":"2026-10-15T00:00:00Z","board_verified":false,"closed_at":null,"days_open":1,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":1},"description":"You are the senior hands-on engineer for networks and servers across Evernet's clients, within the scope, service levels and runbooks Evernet sets. When a network or server problem goes beyond our L1 and L2 engineers, it comes to you, and you see it through to the fix. In a Sev 1 you lead the technical response, remotely or on site. You decide whether a non-standard change is safe, you design networks and server set-ups at the scale of small and mid-size businesses, and you deliver projects. You set the standards our engineers work to, you watch for vendor security advisories before they become incidents, and you teach the engineers around you. Our clients' service levels range from business hours to 24x7. The role stops at people management, scheduling and client communication, which belong to the Service Delivery Manager, and at pricing, scope and spend, which need approval.\nKey responsibilitiesEscalations and major incidents\nTake network and server escalations from the L1 and L2 engineers and the NOC through to the fix. When it reaches you, it is yours\nLead the technical response in a Sev 1, remotely or on site\nOpen vendor TAC cases at any hour, and own them until they close\nFind the root cause of repeat faults, and see the preventive action through\nChanges and design\nReview and approve non-standard changes on networks and servers before they run: a backup first, a rollback plan and a check afterwards\nStop a change that is not safe, and say what would make it safe\nDesign networks and server set-ups for small and mid-size businesses: multi-site firewalls, VLAN plans, VPN and SD-WAN, server and virtualisation builds\nReview Microsoft 365 tenant-wide changes, such as Conditional Access policies and mail flow, when asked to\nStandards, documentation and vulnerability response\nWrite and maintain Evernet's baselines for firewall, switch and server configuration, and check that clients' estates meet them\nKeep runbooks and IT Glue records current. Update a runbook within five business days of a new kind of fix\nTrack security advisories from firewall and network vendors. Assess each critical one against our clients' equipment, and get exposed devices patched or mitigated under change control\nKeep the record of vendor support for critical client equipment current, and raise gaps with the Service Delivery Manager\nSecurity incidents\nContain the incident technically, following the security runbook: isolate hosts, block traffic at the firewall, disable accounts\nWork with the managed detection and response (MDR) security operations centre, which investigates\nGive the Service Delivery Manager the technical facts for client communication\nProjects\nDesign and deliver small and mid-size infrastructure projects yourself: firewall and switch replacements, new sites and office moves, server and virtualisation migrations, backup deployments and security hardening\nOn larger projects, own the technical design, approve the changes and be present for key cutovers, while L2 engineers deliver under your technical direction\nScope and estimate the technical work on projects you will deliver\nProjects take about 30 to 40% of your time, in weeks when you are not on call. Incidents come first\nCoaching\nCoach the L1 and L2 engineers on networks and servers: work faults with them, review their changes and explain your reasoning\nGrow what the L2 engineers can close without you\nSkills requiredSkills (required)\nFirewalls: enterprise next-generation firewalls, such as Palo Alto Networks and Fortinet FortiGate. Policies, NAT, site-to-site and remote-access VPN, security profiles, and HA pairs, including failover that does not behave. Expert in at least one platform, and willing to learn others\nSwitching and routing: VLANs, trunks, spanning tree, link aggregation, stacked or redundant switches, static routing, and dynamic routing at a working level\nServers: Windows Server, Active Directory, DNS, DHCP and Group Policy; virtualisation on Hyper-V or VMware; backup and restore, for example with Veeam\nMicrosoft 365 at L2 level: Entra ID users, groups and MFA; Exchange Online mail flow; Intune basics\nSecurity: hardening firewalls and servers (admin access, MFA on remote access, least-privilege rules), and patching against published vulnerabilities\nTroubleshooting: from evidence, using logs, counters and packet captures\nChange control: standard, emergency and planned changes, each with a backup taken first and a rollback ready\nSkills (preferred)\nHands-on with more than one firewall platform\nSD-WAN and wireless design\nFailover clustering, and SAN or NAS storage\nMicrosoft 365 security: Conditional Access and Defender\nEndpoint detection and response and MDR services, such as CrowdStrike or Huntress\nMSP tools such as HaloPSA, NinjaOne, LogicMonitor and IT Glue\nPowerShell or other scripting\nBehaviours\nClear spoken and written English, because you explain faults to clients and the NOC by phone, often at night, and write the ticket notes, designs and runbooks other engineers work from\nCalm and clear with client staff during an incident, including on site at night\nThe behaviours below are pass or fail:\nYou write it down. The fix, the reasoning and the vendor case number go on the HaloPSA ticket, and the runbook is updated. If only you know it, it is not done.\nYou back up before you change, and follow change control. No quiet changes.\nYou say no to an unsafe change, whoever wants it tonight, and say what would make it safe.\nYou call early. Open the vendor case before the clock runs out. Staying stuck on a Sev 1 in silence is a fail.\nYou teach rather than take over. Outside a Sev 1, an engineer who brings you a problem leaves knowing more.\nYou answer when you are on call. Cannot cover a week? Swap it before it starts.\nYou keep to the access controls. Remote work on client systems goes only through the route each client requires. You never switch off MFA or open admin access to make a job easier.\nCertificationsRequired: none. We judge your skills by what you have done and by a practical test at interview.\nPreferred:\nCisco CCNA or CCNP Enterprise\nFortinet NSE 4 or higher. A Fortinet Certified Professional (FCP) from the FortiGate or FortiOS Administrator exam now shows as NSE 4\nPalo Alto Networks Network Security Professional, Next-Generation Firewall Engineer, or an active PCNSA or PCNSE\nA Microsoft associate certification, such as Azure Administrator (AZ-104), Endpoint Administrator (MD-102), Identity and Access Administrator (SC-300) or Windows Server Administrator\nVeeam Certified Engineer (VMCE)\nITIL 4 Foundation\nExperience and educationHands-on infrastructure experience across networks and servers, typically five years or more. We judge it by what you have done:you have led the technical response to a Sev 1 or P1 and restored serviceyou have been the engineer your team turned to when others were stuckyou have delivered an infrastructure project, such as a firewall or switch replacement or a server migration, with a change and rollback plan\nHelps, not required:MSP experience, looking after many client estates at oncework on 24x7 service levelscoaching engineers\nA degree is not required\nWorking conditionsLocation: based in Singapore, because you go on site for faults that cannot be fixed remotely and for project work, across Singapore.\nWorking hours: weekdays 09:00–18:00 SGT, when clients, the Service Delivery Manager and the engineers work.\nOn call, on a rota with the other engineers, including nights, weekends and public holidays, because clients on 24x7 service levels need a fast restore:technical on call: you answer the NOC within 15 minutes and work the fault remotelyonsite responder: you reach the site within 60 minutes at night when the fault needs handssenior on call: second line behind the technical on call for Sev 1s on clients with 24x7 service levels, answering within 30 minutesHow a night call-out is recovered the next day: to be confirmed.\nSite work: at client sites across Singapore. A driving licence is not required.\nAccess: you reach client systems remotely only through Evernet's Singapore jump host or VDI, plus any further controls a client requires.\nScreening: some clients require security screening and a confidentiality undertaking before you work on their sites or systems. You must be able to pass it where a client requires it.\nRight to work: you need the right to work in Singapore, or must be eligible for a work pass.\nPay and benefitsA quarterly performance bonus, tied to the role's measures and to the projects you deliver\nAn on-call allowance and call-out pay\nA full-time, permanent role\nAbout EvernetEvernet Systems is a managed service provider headquartered in Singapore, serving small and mid-size businesses across a range of industries. Our mission is to be the most valuable IT partner to our clients, delivering Managed IT, Secure IT and AI-augmented productivity. We are moving from a traditional MSP to a Managed Intelligence Provider (MIP), and we work with a growth mindset: 1% better every day.\nOur brand promise: Productivity and Peace of Mind, Delivered.\nOur core values. We are a lean team, and six values guide how we work:\nWin-Win-Win or No Deal. Every decision must be a win for the customer, for Evernet and for the team. If it cannot be, we walk away.\nCommunicate Clearly, with Empathy and Compassion. We give context, listen before we respond, and seek to understand before we act.\nBehave Like a Winner - Take Ownership and Be Accountable. Full responsibility for our tasks and decisions. No blame, no excuses. We win or we learn.\nGrowth Mindset with 1% Daily Improvement. Continuous learning and small improvements, every day.\nPractise Zero Trust Towards IT Security. Every access request is verified. Security is a culture, not just technology.\nLeverage AI Tools to Boost Productivity. We learn and apply AI in our daily work. It is how we work, not an option.\nEvernet Systems is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.\nHow to applyApply through the link in this advert: https://evernet.com.sg/careers \nYour application is held in our recruiting system and handled in line with Singapore's Personal Data Protection Act. If your experience matches, we will invite you to a short first-round call.\nSkills\nengineering training, Fortinet, Microsoft Office, Conditional Access, SD-WAN, firewall software, Failover Clustering, Endpoint Management, CCNA, CCNP, PowerShell, SAN, Microsoft Certified Solutions Associate, Nas Storage, Itil Foundation, Salesforce Administrator","description_format":"text","description_chars":10604,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Continuous learning"],"hiring_locations":[{"name":"Singapore","iso":"SG","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Managed IT Services (MSP)","AI Consulting & Integration"],"lifecycle":[{"event":"open","at":"2026-10-15T14:28:15Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":1,"expected_fill_days":35,"reasons":["seen:1","win:early"],"computed_at":"2026-10-16T02:45:13Z"},"pay":{"stated_usd_annual":69996,"is_top_pay":false},"html_url":"https://alion.io/job/evernet-systems-senior-network-systems-engineer","json_url":"https://alion.io/job/evernet-systems-senior-network-systems-engineer.json","meta":{"generated_at":"2026-10-16T02:45:13Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4160,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3903462},"rest":"https://alion.io/mcp/rest/get_company?id=3903462"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fevernet-systems-senior-network-systems-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fevernet-systems-senior-network-systems-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fevernet-systems-senior-network-systems-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/evernet-systems-senior-network-systems-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fevernet-systems-senior-network-systems-engineer"}]}