Network and Cybersecurity Engineer

About the company

Romulus Digital is a technology company supporting regional and international organization through digital transformation, enterprise applications, AI-enabled solutions, and specialised technology services.

Your tasks

We are currently seeking an experienced Network and Cybersecurity Engineer to administer, secure, and continuously strengthen the network, endpoint, identity, and messaging environments of our clients, covering firewalls, LAN/WAN and wireless infrastructure, VPN connectivity, endpoint protection, device management, identity and access controls, and email and collaboration security.

As a Network and Cybersecurity Engineer, you will be responsible for the administration, monitoring, and protection of network and security infrastructure, ensuring it remains available, high-performing, compliant, and resilient against cyber threats.

You will work closely with the Server and Application Administrator, service desk, project teams, vendors, and client stakeholders to maintain agreed service levels, respond to security incidents, remediate vulnerabilities, and implement security improvements.

• Administer firewalls, including firewall rule configuration, periodic rule reviews, maintenance, optimisation, and documentation.
• Manage network switches, routers, local area networks, and wireless network infrastructure, including configuration, maintenance, and troubleshooting.
• Configure and administer Virtual Private Network (VPN) connectivity for remote-access and site-to-site connections.
• Monitor network availability and performance, and troubleshoot connectivity, latency, capacity, or bandwidth issues.
• Conduct periodic vulnerability assessments, prioritise findings by risk, and coordinate the timely remediation of identified vulnerabilities.
• Monitor security events and lead or coordinate incident response activities for cybersecurity-related incidents, including containment, investigation, recovery, and post-incident reporting.
• Manage the security patch management programme for network and security devices, including scheduling, testing, deployment, and verification.
• Uphold cybersecurity best practices and monitor compliance with applicable standards, policies, procedures, and contractual requirements.
• Administer and maintain endpoint protection, antivirus, and endpoint detection and response (EDR) solutions across all managed devices, including monitoring, tuning, and response to security alerts.
• Administer mobile device management / unified endpoint management (MDM/UEM) solutions, including device enrolment, compliance policy configuration, and monitoring for Windows, macOS, and Android devices.
• Administer identity and access management controls, including Conditional Access policies and multi-factor authentication (MFA) configuration, for all users and administrative accounts.
• Administer email and collaboration security controls, including anti-phishing, anti-malware, Safe Attachments, and Safe Links protection, for the messaging and collaboration environment.
• Recommend and implement security improvements to strengthen the overall cybersecurity posture of the client environment.
• Coordinate with the Server and Application Administrator on server-related connectivity, hardening, and security matters.
• Escalate significant security risks, incidents, or compliance gaps to service delivery or senior management where necessary.
• Maintain accurate and up-to-date network and security documentation, including network diagrams, firewall rule records, configuration baselines, security policies, and incident response playbooks.
• Prepare periodic reports on network performance, security events, vulnerability status, patch compliance, and endpoint health for service delivery and management review.

Requirements

The role requires strong capabilities in firewall and network administration, VPN configuration, network monitoring, vulnerability management, security event monitoring and incident response, patch management, endpoint protection and EDR, MDM/UEM, identity and access management, email security, and security compliance.

Required Skills & Qualifications

• Minimum 5 years of relevant professional experience in network engineering, network security, or cybersecurity operations within an enterprise or managed-services environment.
• Degree or diploma in Information Technology, Computer Science, Computer Engineering, Cybersecurity, Information Systems, or a related discipline.
• Strong hands-on experience administering next-generation firewalls such as Fortinet, Palo Alto Networks, Cisco, Sophos, or equivalent platforms.
• Proven experience managing switches, routers, LAN, and wireless infrastructure, with solid knowledge of TCP/IP, VLANs, routing protocols, DNS, and DHCP.
• Experience configuring and supporting remote-access and site-to-site VPN connectivity.
• Experience with network monitoring tools and troubleshooting connectivity, latency, capacity, and bandwidth issues.
• Experience conducting vulnerability assessments and coordinating remediation activities.
• Experience in security event monitoring and incident response, including the use of SIEM or security monitoring platforms.
• Hands-on experience administering endpoint protection and EDR solutions such as Microsoft Defender for Endpoint, CrowdStrike, SentinelOne, or equivalent.
• Experience administering MDM/UEM solutions such as Microsoft Intune or equivalent, across Windows, macOS, and Android devices.
• Experience administering Microsoft Entra ID (formerly Azure AD) Conditional Access policies and MFA.
• Experience administering email security controls such as Microsoft Defender for Office 365 or equivalent.
• Sound understanding of cybersecurity frameworks, best practices, and security patch management.
• Strong troubleshooting, analytical, and problem-solving capabilities.
• Ability to produce clear technical documentation, incident reports, and operational reports.
• Good communication skills, with the ability to work effectively with technical teams, vendors, and non-technical users.
• Candidates must be available to work on a shift or roster basis, including weekends and Singapore Public Holidays, and to support after-hours maintenance windows and security incident response where required by operational needs.

Preferred Skills & Qualifications

• Relevant certifications such as CompTIA Security+, CCNA/CCNP, Fortinet NSE, Palo Alto PCNSE, CEH, or CISSP would be beneficial.
• Microsoft security certifications such as Security Operations Analyst (SC-200), Identity and Access Administrator (SC-300), or Endpoint Administrator (MD-102) would be advantageous.
• Experience with Microsoft Sentinel or other SIEM/SOAR platforms.
• Experience with vulnerability scanning tools such as Tenable Nessus, Qualys, Rapid7, or equivalent platforms.
• Familiarity with security frameworks and standards such as NIST CSF, ISO/IEC 27001, CIS Controls, and relevant Singapore requirements such as the PDPA and CSA Cyber Trust / Cyber Essentials marks.
• Experience with network access control, zero-trust architectures, or secure web gateways.
• Scripting and automation skills using PowerShell, Python, or equivalent tools.
• Knowledge of ITIL or structured service-management environments would be advantageous.
• Experience supporting clients under service-level agreements in a managed-services or outsourced IT environment will be preferred.

What we offer

• Opportunity to protect and strengthen network, endpoint, identity, and messaging security across client environments.
• Exposure to enterprise networking, cloud security, Microsoft security technologies, and AI-enabled technology initiatives.
• Work directly with infrastructure, project, and service-delivery stakeholders.
• Competitive compensation aligned with network and cybersecurity experience and capabilities.
• Opportunity to strengthen expertise in security operations, incident response, and cybersecurity governance.
• Collaborative, regional working environment with opportunities for career growth within Romulus Digital.

How to apply

Interested candidates are invited to submit their resume and cover letter to hana.tran@romulus.digital with the subject line Network and Cybersecurity Engineer