Senior Network Engineer – HCMC, Vietnam

Job Description: We are seeking a highly experienced Senior Network Engineer to lead enterprise-scale network design, implementation, and operations across CES global sites. This role will be responsible for:

• Network Implementation & Engineering: Lead end-to-end implementation, configuration, upgrades, and migrations of routing and switching infrastructure. Design and maintain multi-site WAN architecture with high availability and redundancy. Architect advanced dynamic routing (BGP, OSPF, EIGRP) in complex environments. Develop and enforce network standards and manage lifecycle projects.
• Security & Firewall Administration: Manage Cisco ASA, Firepower/FMC, Palo Alto NGFWs, and Fortinet platforms. Administer Cisco ISE for NAC, RADIUS/TACACS+, and endpoint profiling. Configure and maintain F5 BIG-IP ADCs and WAFs. Own firewall rule sets, segmentation strategies, and serve as escalation point for security incidents.
• WAN & Connectivity: Manage multi-site WAN topology, VPN infrastructure (site-to-site, DMVPN, remote access), QoS policies, and evaluate SD-WAN solutions.
• Cloud & Hybrid Integration: Integrate on-premises networks with AWS, Azure, and GCP (Transit Gateway, Direct Connect, ExpressRoute, IPsec/VPN). Configure cloud-native networking (VPCs, VNets, routing tables, ACLs). Collaborate on hybrid routing architectures.
• Monitoring & Operations: Monitor performance and availability using enterprise tools. Provide Tier 3 escalation support, root cause analysis, and corrective actions. Maintain documentation (topology diagrams, IPAM, runbooks). Mentor junior engineers and support 24/7 availability through on-call rotation.

Requirements:

• 7+ years of enterprise network engineering experience in multi-site, multi-vendor environments.
• Proven expertise with Cisco ASA, Firepower/FMC, Cisco ISE, and F5 BIG-IP.
• Advanced proficiency in BGP, OSPF, and EIGRP routing protocols.
• Strong WAN architecture and redundancy design experience.
• Hands-on integration with AWS, Azure, and/or GCP hybrid environments (mandatory).
• Familiarity with Palo Alto and Fortinet platforms valued.
• Excellent communication skills, able to engage technical and non-technical stakeholders.
• Client-facing experience in high-pressure situations.
• Bachelor’s degree in IT, Computer Science, or related field preferred; equivalent experience considered.

Preferred Certifications:

• CCNP (Enterprise or Security), CCIE (highly desirable).
• Cisco Firepower Specialist, Cisco ISE Specialist.
• Palo Alto PCNSE.
• F5 Certified Administrator/Technology Specialist.
• Fortinet NSE 4+.

Preferred Skills:

• Experience with SD-WAN (Cisco Viptela, Meraki, Palo Alto Prisma).
• Network automation (Python, Ansible, Terraform).
• Experience in compliance-driven environments (SOC 2, NERC CIP).
• Familiarity with monitoring platforms (SolarWinds, PRTG, Kentik).
• Exposure to Zero-Trust Network Access (ZTNA) or Secure Service Edge (SSE).

Benefits:

• Salary: Negotiable, based on experience and suitability.
• 13th-month salary.
• 12 annual leave days per year.
• Health insurance coverage for employees.
• Additional health insurance support for family members (per company policy).
• Free parking.
• Fitness/gym-related benefits.
• Regular employee engagement and team-building activities.

Location: Doan Van Bo Street, Ward 12, District 4, Ho Chi Minh City, Vietnam