Network Engineer (SD-WAN)
Location: Onsite – Klang Valley
Work Schedule: Full-time onsite + mandatory off-hours cutovers (nights & weekends)
Job Summary
Urgent requirement for a hands‑on Network Engineer (SD‑WAN) to execute a large‑scale SD‑WAN migration across 478 bank branches and offices. You will join a 5‑person engineering team (1 Lead + 4 Engineers) and be responsible for producing Low‑Level Designs (LLD), cutover runbooks, and performing physical/virtual cutovers. The bank will decide whether the SD‑WAN fabric is Cisco (Viptela/Catalyst) or Fortinet (FortiGate SD‑WAN) – you must be ready to work with either vendor. Banking compliance (audit trails, change control, segregated networks) is non‑negotiable.
Key Responsibilities
- Develop Low‑Level Design (LLD) documents from high‑level architecture, covering IP addressing, routing (BGP/OSPF), QoS, security policies, and high availability for each site profile.
- Prepare detailed cutover runbooks per site/batch, including pre‑checks, step‑by‑step migration sequences, rollback procedures, and post‑cutover validation.
- Execute migration/cutover activities during mandatory off‑hours (nights & weekends) for up to 478 sites across Klang Valley and nationwide.
- Troubleshoot SD‑WAN edge connectivity, overlay routing, application steering, and failover scenarios in real‑time during cutovers.
- Adhere strictly to the bank’s change management process – raise change requests, document every action, and ensure audit trail completeness.
- Collaborate with the Lead Network Engineer to align LLDs with bank security policies (e.g., BNM RMiT, PCI DSS if applicable) and network segregation requirements.
- Provide post‑cutover handover to Level 2 support teams, including updated network diagrams and configuration archives.
Requirements (Mandatory)
Experience
- Minimum 5–6 years of hands‑on network engineering, with at least 2 years focused on SD‑WAN deployments (migration, cutover, troubleshooting).
Certification (active at start)
- CCNP Enterprise (or CCNP Service Provider) OR Fortinet NSE 7 (SD‑WAN track).
SD‑WAN Proficiency
- Proven experience in at least one major SD‑WAN platform (Cisco Viptela/Catalyst SD‑WAN or Fortinet FortiGate SD‑WAN).
- Must be ready to work with either Cisco or Fortinet based on the bank’s final vendor decision.
Documentation
- Demonstrated ability to write LLDs and cutover runbooks for multi‑site migrations (100+ locations).
Banking / Finance
- Prior experience in banking, financial services, or similarly regulated environment (change control, audit trails, segregated networks).
Onsite & Hours
- Full‑time onsite in Klang Valley. No remote option for this SOW.
- Mandatory off‑hours cutovers (nights, weekends) – no exceptions.
Nice‑to‑Have
- Experience migrating 200+ sites in a single project.
- Familiarity with Cisco Catalyst Center or FortiManager/FortiAnalyzer.
- Scripting knowledge (Python/Ansible) for configuration validation or pre‑checks.
- Understanding of Malaysian banking regulations (BNM RMiT, PCI DSS, ITRM).
Working Conditions
- Onsite, office‑based in Klang Valley (specific location to be confirmed). Occasional travel to other sites within Klang Valley may be required.
- High‑pressure, compliance‑driven environment – all changes must be approved via the bank’s Change Advisory Board (CAB).
- Contract duration aligned to project SOW (no fixed end date stated; prepare for intensive 3–6 month migration phase).
Job Type: Full-time
Pay: RM5,000.00 - RM6,500.00 per month
Benefits:
- Health insurance
- Opportunities for promotion
- Professional development
Application Question(s):
- What is your expected salary?
- What is your availability period?
Work Location: In person