FINEXUS Group Hiring! Full Time Senior Network Engineer in Federal Territory - Ricebowl

Why This Role Matters

Finexus operates mission-critical infrastructure that underpins Malaysia’s financial ecosystem. Our networks enable secure, high-availability transaction processing, data centre operations and regulatory-compliant environments.

As a Senior Network Engineer, you are the technical owner of how our core network is designed, run and recovered. Your work directly affects uptime, incident resolution, architecture quality and our readiness for PCI and Bank Negara audits.

About the Role

You will manage and improve our on-premises and data centre network across corporate, development, UAT and production environments, including secure connectivity to hybrid and cloud services. The role combines hands-on operations with design responsibility, automation and technical leadership. You will work closely with the Network Engineer Lead and junior engineers, and partner with the Security, Infrastructure, Application, Cloud and Compliance teams.

Expected Outcomes:

• Secure, resilient and highly available enterprise networks.

• Complex incidents resolved with minimal supervision, with clear root cause and follow-up.

• Network architecture that is documented, redundant and continuously improved.

• Standardised, partly automated network operations.

• Clean, on-time audit evidence for PCI-DSS, ISO/IEC 27001, SOC 2 and BNM RMiT.

• Junior engineers who are guided, coached and well supported on escalations.

Key Responsibilities:

• Network Architecture and Improvement

• Design, enhance and optimise network architecture for high availability, resilience and scalability across data centre, DR and branch sites.

• Evaluate and recommend improvements to topology, segmentation and security controls.

• Research and evaluate new network devices and tools, and run proof-of-concept work where it improves reliability or efficiency.

• Drive automation and standardisation using scripting and configuration tools such as Python and Ansible. Terraform is an advantage.

Network Operations and Implementation:

• Manage and maintain corporate, development, UAT and production networks, including ISP links, firewalls, switches, routers and VPN connectivity.

• Configure and manage:

– Firewalls: policies, port access, routing and NAT

– Switches: VLANs, LAG, STP and ACLs

– Routers and routing protocols such as BGP and OSPF

• Run vulnerability management for network devices, including firmware, signature and security updates.

• Configure and support site-to-site IPSec VPN and SD-WAN or multi-WAN tunnels (for example SpeedFusion), and manage remote access VPN accounts.

• Maintain an accurate network asset inventory and configuration baseline.

• Oversee physical network installation and cabling work carried out by vendors or facilities teams, and perform hands-on work where needed during maintenance windows.

Troubleshooting and Monitoring:

• Lead troubleshooting of complex issues such as packet loss, routing failures, timeouts and connectivity disruptions.

• Use diagnostic tools including ping, telnet, traceroute, nslookup/dig, tcpdump and Wireshark.

• Design, configure and improve monitoring and alerting using SNMP and monitoring platforms.

Operations Readiness and Support:

• Provide 24x7 support on a rotational basis and act as the escalation point for major incidents.

• Support after-hours and weekend activities, including network maintenance and upgrades, high-severity incident resolution, and production go-live deployments.

Business Continuity and Disaster Recovery

• Provide technical leadership in BCP and DR planning and testing.

• Ensure network readiness, redundancy and rapid recovery during DR tests and real incidents.

Security and Compliance:

• Manage and support network-related security services including DNS, reverse proxy and Anti-DDoS solutions.

• Support certifications, audits and due diligence reviews covering PCI-DSS, PCI-3DS, PCI-PIN, ISO/IEC 27001, ISO 9001, SOC 2 and BNM RMiT.

• Prepare, review and validate audit evidence and compliance documentation.

Collaboration and Technical Leadership

• Coordinate with application and infrastructure teams on connectivity, performance and compliance requirements.

• Serve as technical escalation point and mentor for Network Engineers.

• Maintain documentation, SOPs and change management discipline.

• Pursue ongoing training and professional certifications such as CCNP.

Key Requirements:

Qualification

• Diploma or higher in Computer Science, Computer Networking, Software Engineering or a related discipline

.

Experience:

• At least 5 years of hands-on networking experience in enterprise or data centre production environments.

• Proven experience managing and troubleshooting enterprise firewalls, switches, routers, VPNs, routing protocols and network monitoring.

• Demonstrated ability to design and support highly available network environments, including redundancy and failover.

• Experience supporting audits in a regulated environment such as banking, payments or a certified data centre, against at least one of PCI-DSS, ISO/IEC 27001, SOC 2 or BNM RMiT.

Technical Skills:

• Strong proficiency in:

– Network troubleshooting and monitoring

– IP addressing, VLANs, BGP/OSPF and NAT

– IPSec VPN and SNMP

– Network architecture and design principles

• Hands-on experience with enterprise-grade firewalls, switches and routers from vendors such as Fortinet, Palo Alto, Cisco, Juniper or Aruba.

• Scripting skills and an automation mindset (for example Python or Ansible).

• Experience with Infrastructure-as-Code tools such as Terraform is an advantage.

Certifications:

• CCNA or equivalent is required.

• CCNP or an equivalent professional-level or vendor certification (for example Fortinet NSE 4 or above, or PCNSE) is strongly preferred.

Competencies:

• Strong ownership, initiative and problem-solving ability.

• Clear communication and effective stakeholder coordination.

• Ability to plan, prioritise and manage operational schedules.

• Able to work independently and lead technical initiatives.

• Commitment to continuous learning.