Network Engineer - Campus and NAC

About the Role

We are seeking a Network Engineer (Campus and NAC) to join our dynamic infrastructure team supporting a premier banking and financial services institution in Singapore. In this role, you will lead the end-to-end design, build, and lifecycle engineering of our enterprise campus network, wireless architecture, WAN/SD-WAN, and Network Access Control (NAC) platforms.

As an on-site technical authority, you will spearhead hands-on implementations, hardware refreshes, wireless validation surveys, new site deployments, and data center cage installations. You will serve as the primary engineering escalation point for complex access and campus networking challenges.

Responsibilities

• Campus & Wireless Engineering: Design and implement Cisco Catalyst 9K campus switching standards, hardware refreshes, software upgrades, and network segmentation. Engineer enterprise Wi-Fi 6/6E controller architectures and SSID/RF designs, and conduct predictive and validation surveys.
• Hands-on Implementation: Lead on-site deployments, structured cabling coordination, equipment migrations, and data centre cage infrastructure work.
• Network Access Control (NAC): Architect and configure Cisco ISE policies (802.1X, MAB, device profiling, posture assessment, guest access, and TACACS+ device administration).
• Forescout & Coexistence: Design Forescout eyeSight classification, eyeControl actions, and ensure comprehensive visibility over agentless, IoT, and OT devices. Define and maintain seamless coexistence designs between Cisco ISE and Forescout to prevent policy conflicts.
• WAN, SD-WAN & Governance: Design enterprise SD-WAN topologies, site templates, and rollout strategies. Manage new circuit implementations and service modifications directly with local telecommunications carriers.
• Compliance & ITIL Change Management: Author engineering designs and implementation plans adhering to strict ITIL change management processes. Support regulatory audit requirements (e.g., technology risk management frameworks) with robust access control and change evidence documentation.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, or a related discipline.
• 6 to 10 years of hands-on professional experience in enterprise campus network engineering.
• Proven implementation expertise with Cisco Catalyst 9K switching in large-scale enterprise environments.
• Strong background in enterprise wireless design (Cisco, Juniper, Aruba, or Meraki) and proficiency with wireless survey tools (Ekahau or equivalent).
• Advanced expertise in Cisco ISE (802.1X/MAB, profiling, posture, guest, and TACACS+ policy design).
• Familiarity with Forescout (eyeSight/eyeControl) and demonstrated understanding of multi-platform NAC coexistence strategies.
• Hands-on experience in SD-WAN design and deployment (Cisco Catalyst SD-WAN/Viptela, Meraki, or similar) alongside experience interfacing with Singapore telecom carriers.
• Strong analytical, troubleshooting, and collaborative communication skills.

Good-to-Have Qualifications

• Experience with Cisco Catalyst Centre (DNAC), Meraki, Aruba, or Juniper wireless platforms.
• Prior working experience within financial services or other highly regulated industry sectors.
• Professional certifications such as Cisco CCNP Enterprise, Cisco SISE / CCNP Security, Forescout Certified Associate/Professional, or CWNA/CWDP.

Skills

Analytical Approach, Cisco Network Security, SD-WAN, Network Engineering, CCNP, Cisco SD-WAN, Cisco, Aruba Wireless, Switching, Cisco Meraki, Cisco Switches, Data Center Architecture, TACACS