Network Security Specialist

We are seeking an experienced Network Security Specialist to lead the design and implementation of enterprise network security solutions across on‑premises data centers, private cloud environments (VMware NSX‑T), and enterprise perimeter networks. 

This role is design‑ and delivery‑focused, not operations‑focused. The Engineer will architect and implement new security capabilities and major changes, define standards and patterns, and provide technical guidance to a dedicated Network Security team responsible for day‑to‑day platform operations and monitoring. 

The successful candidate will have strong design‑level expertise across Palo Alto Networks, Fortinet, NSX‑T Firewall, SkyHigh (McAfee) Secure Web Gateway, and Cisco AnyConnect VPN on Cisco Firepower, with prior exposure to regulated environments. Experience supporting MAS TRM or BNM RMiT audits is highly preferred. 

1. Network Security Design & Architecture: 
   1. Network Design and evolve end‑to‑end network security solutions covering: 
      • Enterprise data centers 
      • VMware NSX‑T private cloud platforms 
      • Internet edge and DMZ environments 
      • Remote access and third‑party connectivity 
   2. Define and maintain network security design standards and reference architecture for: 
      • Firewall zoning and trust boundaries 
      • Application and environment segmentation 
      • Secure internet access and proxy architecture 
      • VPN and remote access patterns 
   3. Design Zero Trust and segmentation models, including: 
      • East west micro segmentation using NSX T Distributed Firewall 
      • North south enforcement using Palo Alto and Fortinet 

   4. Translate business, security, and regulatory requirements into practical, implementable network security designs. 

      ---

2. Design‑Led Implementation & Delivery: 
   1. Lead and execute design and implementation for: 
      • Firewall architecture changes and new deployments 
      • NSX‑T Firewall policy frameworks and segmentation models 
      • Secure web gateway / proxy architecture enhancements 
      • VPN redesigns and enterprise rollout initiatives 
   2. Drive major initiatives such as: 
      • Firewall refreshes and platform consolidation 
      • Data center and application migrations 
      • Zero Trust and segmentation programmes 

   3. Partner with the Network Security team during deployment and handover to ensure designs are implemented accurately and sustainably. 

      ---

3. Platform Design Ownership 
   1. Next‑Generation Firewalls – Palo Alto & Fortinet 
      • Define standards for: 
        • Firewall zones and policy structure 
        • Rule design methodologies and naming conventions 
        • Security profile strategies (threat prevention, IPS, URL filtering) 
      • Design firewall architectures with high availability, scalability, and resiliency. 
      • Act as design authority for major firewall changes, migrations, and refreshes. 
   2. VMware NSX‑T Firewall 
      • Design micro‑segmentation strategies using NSX‑T Distributed Firewall. 
      • Define security policy models based on dynamic groups, tags, and application context. 
      • Ensure consistency between NSX‑T east‑west controls and north‑south NGFW enforcement. 
      • Support application onboarding and private cloud transformation initiatives. 
   3. Secure Web Gateway / Proxy – SkyHigh 
      • Design enterprise secure web gateway and proxy architectures, including: 
        • Explicit and transparent proxy models 
        • SSL/TLS inspection strategies 
        • Identity and category-based access policies 
      • Balance security requirements with performance, privacy, and regulatory constraints. 
   4. Remote Access VPN 
      • Design Cisco AnyConnect VPN on Cisco Firepower, including: 
        • User, administrator, and third‑party access models 
        • Full vs split tunnel designs 
        • MFA and access segmentation standards 
   5. Advisory & Enablement Support to Operations 
      • Act as design authority and Tier‑4 technical advisor to the Network Security team. 
      • Provide guidance and review for: 
        • Complex or high‑risk changes 
        • Design‑related incidents and root cause remediation 
        • Platform upgrades and architectural enhancements 
      • Develop and maintain: 
        • Architecture diagrams 
        • Design standards and technical playbooks 
        • Implementation and handover documentation 
   6. Governance, Risk & Regulatory Alignment 
      • Ensure security designs align with: 
        • NIST Cybersecurity Framework (CSF) 
        • ISO/IEC 27001 
        • CIS Critical Security Controls 
      • Design network security controls aligned with: 
        • MAS Technology Risk Management (TRM) 
        • BNM Risk Management in Technology (RMiT) 
      • Support internal and external audits by: 
        • Explaining architectural intent and design decisions 
        • Mapping implemented controls to regulatory requirements 
        • Supporting remediation and compensating control design

• 8–12+ years of experience in enterprise network and security engineering. 
• Strong track record in design‑led security implementation roles. 
• Hands‑on design experience with: 
  • Palo Alto Networks firewalls 
  • Fortinet FortiGate 
  • VMware NSX‑T Firewall 
  • SkyHigh / McAfee Secure Web Gateway 
  • Cisco Firepower with AnyConnect 
  • Experience working in regulated or audit‑driven environments. 
• Prior experience supporting regulatory work, ie: MAS TRM audits, and/or BNM RMiT audits and ability to articulate security designs to auditors, risk teams, and regulators would be preferred. 
• Advanced understanding of: 
  • TCP/IP, routing (BGP, OSPF), NAT 
  • Network segmentation and security zoning 
  • Firewall, proxy, and VPN architectures 
• Preferably with certifications in: 
  • Palo Alto PCNSE 
  • Fortinet NSE 6 / NSE 7 
  • VMware VCP NV (NSX T) 
  • Cisco CCNP Security 
  • CISSP (architecture or design focus)

• Champion and embody our Core Values in everyday tasks and interactions.
• Demonstrate high level of integrity and accountability.
• Take initiative to drive improvements and embrace change.
• Take accountability of business and regulatory compliance risks, implementing measures to mitigate them effectively.
• Keep abreast with industry trends, regulatory compliance, and emerging threats and technologies to understand and highlight potential concerns/ risks to safeguard our company proactively.

Founded in 1908, Great Eastern is a well-established market leader and trusted brand in Singapore and Malaysia. With over S$100 billion in assets and more than 16 million policyholders, including 12.5 million from government schemes, it provides insurance solutions to customers through three successful distribution channels – a tied agency force, bancassurance, and financial advisory firm Great Eastern Financial Advisers. The Group also operates in Indonesia and Brunei. The Great Eastern Life Assurance Company Limited and Great Eastern General Insurance Limited have been assigned the financial strength and counterparty credit ratings of "AA-" by S&P Global Ratings since 2010, one of the highest among Asian life insurance companies. Great Eastern's asset management subsidiary, Lion Global Investors Limited, is one of the leading asset management companies in Southeast Asia. Great Eastern is a subsidiary of OCBC, the longest established Singapore bank, formed in 1932. It is the second largest financial services group in Southeast Asia by assets and one of the world’s most highly-rated banks, with an Aa1 rating from Moody’s and AA- by both Fitch and S&P. Recognised for its financial strength and stability, OCBC is consistently ranked among the World’s Top 50 Safest Banks by Global Finance and has been named Best Managed Bank in Singapore by The Asian Banker.