Role Overview
As a Network Engineer, you will take ownership of our enterprise, data center, and Operational Technology (OT) network infrastructure, with a strong focus on Fortinet security architecture. You will lead and mentor the network engineering team, act as the senior technical escalation point, and drive the design, security, and performance of mission-critical network environments.
What you will do
In this role, you will:
•   Lead and mentor the network engineering team (L1/L2), overseeing daily operations, workload allocation, and technical escalations.
•   Own the design, deployment, and optimization of our Fortinet security architecture, including FortiGate, FortiManager, FortiAnalyzer, FortiAP, and FortiSwitch.
•   Serve as the senior escalation point (L3) for complex network and security incidents, driving root-cause analysis and resolution.
•   Define network architecture and standards across enterprise, data center, and OT environments, ensuring scalability, resilience, and security.
•   Drive network security initiatives, including segmentation, hardening, firewall policy governance, and SD-WAN/VPN architecture.
•   Manage vendor and partner relationships for Fortinet and other network technologies, including licensing, support, and renewals.
•   Lead change management, capacity planning, and disaster recovery/business continuity planning for the network environment.
•   Partner cross-functionally with security, infrastructure, and OT teams to ensure secure and seamless IT/OT integration.
•   Ensure compliance with internal security policies, audit requirements, and industry best practices.
•   Develop and maintain documentation, SOPs, and a knowledge base to support consistent, high-quality network operations.

Mandatory Requirement
Candidates must be experts in Fortinet technology and hold either an NSE3 or NSE4 certification.

What you will bring
The top candidate will have the following skills:
•   5-6 years of hands-on experience in network engineering, with a track record of taking ownership of complex network environments.
•   Expert-level, hands-on expertise in Fortinet technology, including FortiGate, FortiManager, FortiAnalyzer, SD-WAN, and ZTNA — candidates must be experts in Fortinet technology and hold either an NSE3 or NSE4 certification.
•   Proven experience leading or mentoring a network engineering team, with strong ownership of escalations and outcomes.
•   Strong understanding of network protocols, including BGP, OSPF, VLANs, STP, and QoS.
•   Experience with OT networks and industrial communication protocols, and securing IT/OT integration points.
•   Working knowledge of VPN, IPsec, SD-WAN, and enterprise firewall policy management.
•   Strong stakeholder management and communication skills, with the ability to represent the network function to leadership and cross-functional teams.
•   Ability to work under pressure in mission-critical, fast-paced environments, and lead incident response when required.
•   Fluent in English (written and spoken); proficiency in Mandarin and/or Bahasa Malaysia is preferred.
Ideally you have:
•   A Bachelor's degree in Computer Science, Information Technology, Electronics, or a related field.
•   Additional certifications such as Cisco CCNP, CISSP, or other advanced network/security certifications.
•   Data Center-related certifications like DCNID or DCNP.
•   Prior experience in an MSP, systems integrator, or multi-client environment.

Job Description
Role Overview
As a Network Lead, you will take ownership of our enterprise, data center, and Operational Technology (OT) network infrastructure, with a strong focus on Fortinet security architecture. You will lead and mentor the network engineering team, act as the senior technical escalation point, and drive the design, security, and performance of mission-critical network environments.
What you will do
In this role, you will:
•   Lead and mentor the network engineering team (L1/L2), overseeing daily operations, workload allocation, and technical escalations.
•   Own the design, deployment, and optimization of our Fortinet security architecture, including FortiGate, FortiManager, FortiAnalyzer, FortiAP, and FortiSwitch.
•   Serve as the senior escalation point (L3) for complex network and security incidents, driving root-cause analysis and resolution.
•   Define network architecture and standards across enterprise, data center, and OT environments, ensuring scalability, resilience, and security.
•   Drive network security initiatives, including segmentation, hardening, firewall policy governance, and SD-WAN/VPN architecture.
•   Manage vendor and partner relationships for Fortinet and other network technologies, including licensing, support, and renewals.
•   Lead change management, capacity planning, and disaster recovery/business continuity planning for the network environment.
•   Partner cross-functionally with security, infrastructure, and OT teams to ensure secure and seamless IT/OT integration.
•   Ensure compliance with internal security policies, audit requirements, and industry best practices.
•   Develop and maintain documentation, SOPs, and a knowledge base to support consistent, high-quality network operations.

Mandatory Requirement
Candidates must be experts in Fortinet technology and hold either an NSC3 or NSC4 certification.
What you will bring
The top candidate will have the following skills:
•   7-10+ years of hands-on experience in network engineering, with a track record of taking ownership of complex network environments.
•   Expert-level, hands-on expertise in Fortinet technology, including FortiGate, FortiManager, FortiAnalyzer, SD-WAN, and ZTNA — candidates must be experts in Fortinet technology and hold either an NSC3 or NSC4 certification.
•   Proven experience leading or mentoring a network engineering team, with strong ownership of escalations and outcomes.
•   Strong understanding of network protocols, including BGP, OSPF, VLANs, STP, and QoS.
•   Experience with OT networks and industrial communication protocols, and securing IT/OT integration points.
•   Working knowledge of VPN, IPsec, SD-WAN, and enterprise firewall policy management.
•   Strong stakeholder management and communication skills, with the ability to represent the network function to leadership and cross-functional teams.
•   Ability to work under pressure in mission-critical, fast-paced environments, and lead incident response when required.
•   Fluent in English (written and spoken); proficiency in Mandarin and/or Bahasa Malaysia is preferred.

Ideally you have:
•   A Bachelor's degree in Computer Science, Information Technology, Electronics, or a related field.
•   Additional certifications such as Cisco CCNP, CISSP, or other advanced network/security certifications.
•   Data Center-related certifications like DCNID or DCNP.
•   Prior experience in an MSP, systems integrator, or multi-client environment.

When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the Tech Aalto Privacy Policy, a copy of which is published at Tech Aalto’s website (https://www.techaalto.com/privacy/)
Confidentiality is assured, and only shortlisted candidates will be notified for interviews.

Network Engineer/ Network Lead - NSE