Lead Network Engineer (SD-WAN)
Job Title: Lead Network Engineer (SD-WAN)
Project Scope: Greenfield SD-WAN rollout across 478 bank branches & offices
Location: Klang Valley, Malaysia (full-time onsite)
Reporting To: Bank’s Infrastructure Project Manager / IT Delivery Head
Job Summary
A leading Malaysian bank urgently requires a Lead Network Engineer (SD-WAN) to drive the end‑to‑end technical delivery of a high‑stakes SD‑WAN migration covering 478 sites. You will lead a team of 4 network engineers, produce Low‑Level Designs (LLD) and cutover runbooks, and execute off‑hours migrations. This is a contract role with mandatory onsite presence in Klang Valley and frequent overnight/weekend cutovers. Banking compliance, change management rigor, and vendor‑agnostic technical leadership are non‑negotiable.
Key Responsibilities
- Design & Documentation – Translate High‑Level Design (HLD) into Low‑Level Design (LLD) with device‑level configurations, IP schemes, QoS policies, and security templates.
- Runbook Preparation – Create detailed, step‑by‑step cutover runbooks validated against bank’s change control board (CAB) requirements.
- Migration Execution – Hands‑on lead for SD‑WAN migration/cutover events (off‑hours, weekends), ensuring minimal disruption to banking operations.
- Team Leadership – Supervise 4 network engineers, assign tasks, review LLDs/runbooks, and serve as technical escalation point.
- Vendor & Technology Agility – Final SD‑WAN platform (Cisco or Fortinet) to be decided by bank. Must design and operate with equal proficiency on either stack.
- Compliance & Risk – Adhere to BNM risk management in IT guidelines, bank’s internal security policies, and strict change management protocols. Document all changes and post‑cutover validation.
- Stakeholder Coordination – Work with bank’s network operations, security team, and project management to align migration windows and site readiness.
Mandatory Requirements
- Minimum 5–6 years of hands-on network engineering, with at least 2 years focused on SD-WAN deployments (migration, cutover, troubleshooting)
- Active CCNP Enterprise (or CCNP Service Provider) OR Fortinet NSE 7 (SD-WAN track) certification required at start
- Proven experience in at least one major SD-WAN platform (Cisco Viptela/Catalyst SD-WAN or Fortinet FortiGate SD-WAN); must be ready to work with either
- Demonstrated ability to write LLDs and cutover runbooks for multi-site (100+ locations) migrations
- Prior experience in banking, financial services, or similarly regulated environment (change control, audit trails, segregated networks)
- Full-time onsite in Klang Valley; mandatory off-hours cutovers (nights, weekends) – no exceptions
Nice‑to‑Have
- Dual certification (both CCNP + NSE7)
- Experience migrating from legacy MPLS/IPSEC to SD‑WAN for 200+ sites
- Familiarity with bank’s legacy routing (EIGRP/OSPF/BGP) and security zones
- Scripting (Python/Ansible) for pre‑validation or post‑cutover checks
- Prior contract role in Malaysian banking project with similar scale
Working Conditions
- Work schedule – Standard business hours for planning; cutovers exclusively off‑hours (e.g., 8:00 PM – 2:00 AM or weekends). Compensatory time off (CTO) as per bank policy.
- Environment – Onsite at bank’s Klang Valley offices, data centres, and branch sites. No remote provision for cutovers.
- Pressure & compliance – High‑stakes, zero‑tolerance for unapproved changes. Regular internal and external audits.
Job Types: Full-time, Contract
Contract length: 12 months
Pay: RM7,000.00 - RM10,000.00 per month
Benefits:
- Health insurance
- Opportunities for promotion
- Professional development
Application Question(s):
- When can you start if you are being hired?
- How much is your expected basic salary?
- Are you Malaysian?
Work Location: In person