Senior Infrastructure Engineer

About the Bank:
We are a growing regional digital bank group and are revolutionizing financial banking services across Southeast Asia. Our mission is to unlock big dreams and drive financial inclusion throughout the region. As a regional digital bank, we have the right foundation—data, technology, and trust—because we are Built With Heart. We believe that real impact starts with real people. If you're ready to Own The Mission and help us shape the future of Digital banking, we invite you to join us.
Responsibilities
Evaluate, design, build and deploy IT infrastructure services using leading edge technologies that are highly available, scalable and secure.
Own day-to-day enterprise network, internet and VPN operations for the Bank's Singapore and India offices (remotely), ensuring service reliability and timely issue resolution.
Lead troubleshooting and recovery for network, VPN and voice incidents, coordinating escalations, root cause analysis and preventive actions with clear documentation.
Plan, test and execute upgrades/patches for Cisco ISE, ASA, Switches, WLC and Fortigate firewalls, with risk assessment, validation and rollback plans under change management guidelines.
Develop and maintain automation scripts (Python or Bash) to streamline repetitive network operations and minimise manual network BAU ops, including patch orchestration, TLS/SSL certificate tracking and renewal, vulnerability scan scheduling and remediation ticketing, and configuration compliance/drift detection against approved baselines.
Implement and troubleshoot AWS cloud networking, including VPC configurations, Security Groups and site-to-site VPN tunnels, in collaboration with infrastructure/SRE and security teams.
Lead scoped network initiatives from planning through implementation and handover, providing technical guidance and sharing knowledge with team members.
Create and maintain technical documentation for infrastructure on processes, procedures, plans and configurations, including network topology diagrams, device inventory, IP address management (IPAM) and runbooks for automated workflows.
Ensure standards and procedures are in place to effectively manage the infrastructure services for network, voice and telecommunication devices, in line with MAS regulatory requirements for a licensed bank.
Own network change planning and review RFCs through change management and ITIL processes, coordinating dependencies and stakeholder communications.
Coordinate with vendors for incident escalation, break-fix and hardware support.
Drive network security hardening and remediation, and coordinate audit evidence collection for network-related controls.
Willing to be on stand-by and contactable after off-hours to support any outages or major incidents.
Requirements
At least 5 years of relevant experience in enterprise network or IT infrastructure services, with demonstrated ownership of complex incidents and infrastructure changes.
Proficient in network, VPN, virtual machines, with practical experience configuring and troubleshooting Cisco networking devices and/or Fortigate firewalls (CLI proficiency essential).
Ability to independently manage and maintain IT and cloud network infrastructure, exercising sound technical judgment and escalating risks appropriately.
Familiar in SaaS or cloud-based environments.
Experience in scripting languages (Python and/or Bash) to automate operations and reduce manual network BAU tasks.
Strong analytical, hands-on and problem-solving skills.
Able to work in a fast-paced environment, communicate technical decisions clearly, coordinate stakeholders and share practical knowledge with colleagues.