CODE88

Overview of job

Job Purpose: 

The Network Engineer L2 has an expert understanding of Security and IP Network functions such as extensive and expert knowledge in Security, MPLS, Internet, Ethernet, Wireless and Monitor tools. He/she performs tasks associated with the maintenance, installation, and change. The Network Engineer will also drive infrastructure automation, connectivity optimization, and operational excellence across multiple environments.

Responsibilities:

Network Setup & Maintenance

• Design, implement, and maintain cloud and on-premise network infrastructure (VPCs, routing, firewall, switches, access point, subnets, VPNs, and connectivity).
• Manage routers, switches, and wireless systems to ensure stable and efficient network operations.
• Use automation tools and Infrastructure as Code (IaC) to simplify network provisioning and management.
• Monitor performance and optimize bandwidth, routing, and uptime across all environments.

Security & Cloud Integration

• Implement and maintain secure connectivity between cloud and office environments.
• Manage network security controls, including firewall rules, VPN access, and access control policies.
• Oversee configuration of CDN, DNS, Reverse proxy and load balancing for reliable and fast content delivery.
• Ensure proper setup of Web Application Firewalls (WAF) and basic DDoS prevention measures to protect business systems.

Policy & Compliance

• Develop and maintain network and security policies aligned with company standards and compliance requirements.
• Support implementation of the Information Security Management System (ISMS) in line with ISO 27001.
• Promote network and security awareness within the organization through documentation and guidance.
• Participate in audits and reviews to maintain compliance and operational excellence

Collaboration, Documentation & Continuous Improvement

• Work closely with Systems, DevOps, and Security teams to deliver secure and scalable network solutions.
• Maintain up-to-date documentation, including topology diagrams and configuration records.
• Support network expansion projects, migrations, and performance enhancement initiatives.
• Collaborate with external vendors and partners for infrastructure improvements and service reliability.

(*) BONUSES & REWARDS

• Competitive Salary
• 13th Month Salary & Performance Bonus 
• Employee of the Year Award

(*) TRAINING & DEVELOPMENT

• In-house & Overseas Training
• Full reimbursement for international Technical Certification 
• Global career opportunity

(*) ANNUAL PAID LEAVES

• Vacation Leave: 12 days per year
• Medical Leave: 8 days per year
• 1 extra seniority day for every 3 years of service

(*) HEALTHCARE

• Annual Routine Check-up
• Premium Healthcare Insurance 
• Comprehensive Insurance

(*) WELLNESS AND LEISURE ACTIVITIES

• Annual Team Building
• Soccer & Badminton Club and Sports activities
• Entertainment activities: Music band, Karaoke & Play-station time
• Celebrations special events: Birthdays, Christmas, New Year/Year-end Party.

(*) PERKS

• Fruits Days Twice a Month
• Unlimited snacks & beverages

Skills & Qualifications: 

• Communicate effectively in English, both oral and written form. 
• Provides quality customer service above else; ensures an understanding between customer and IT to help providing workable solutions. 
• Customer oriented mind-set with good ability to manage customer expectations. 
• Clear communication with other IT teams (both written and verbal).

Knowledge & Experience: 
• Network Devices: Firewalls and Routers (Cisco ASA / Juniper Systems), Cisco Switches Peplink, A10, F5 load balancers, Nginx, Wireless Networks
• AnyConnect VPN, IPSec site-to-site VPN 
• DLP, Antispam, Endpoint Security, Squid Proxy, IPS/IDS Solutions 
• Has good knowledge of Cloud (AWS) network and security 
• CDN and Anti-DDoS Protection

• Familiar with ISO 27000 Series 
• Background with security standards, controls/countermeasures, risk and vulnerability assessments, security, and other frameworks such as ITIL 
• Experience on Linux 
• Experience on Gitlab, Ansible, Terraform is optional