Role Overview

  • Position: Senior On-Premise Network & Security Engineer

  • Engagement Model: Dedicated Resource / Full-Time Outsourcing


I. Job Purpose

The Senior On-Premise Network & Security Engineer will be responsible for designing, deploying, configuring, and securing Physical Networks, Multi-Site Edge Environments, and On-Premise Data Centers for distributed AI inference solutions. You will directly solve complex connectivity challenges across Air-Gapped (Offline) environments, private multi-office connections, and critical infrastructure requiring strict enterprise-grade security.

Key Responsibilities

  1. On-Premise & Data-Centre Network Infrastructure:

    • Configure and maintain physical hardware devices: Physical Switches, Routers, and Enterprise Firewalls (Cisco, Fortinet, Palo Alto, Juniper, etc.).

    • Manage core networking fundamentals: TCP/IP, Routing Protocols (OSPF, BGP, Static Routing), Switching, VLAN Tagging, LACP, and Network Segmentation to reduce the blast radius across local data centers.

  2. Secure Connectivity & Multi-Site Deployments:

    • Design and establish secure Site-to-Site IPsec VPN Tunnels and TLS/mTLS configurations connecting remote office sites (e.g., Hong Kong, Singapore), offshore facilities (Oil & Gas), or on-premise hardware to edge nodes.

    • Configure networking setups tailored for specialized scenarios: Construction sites, Defense/Government air-gapped systems, and private network topologies.

  3. Linux & Container/Kubernetes Networking:

    • Manage Linux networking stack (Iptables, IPvs, Network Namespaces, Tunneling) and integrate network layers with Kubernetes CNI plugins (Calico, Cilium, Flannel, etc.) hosted on physical edge hardware/GPUs.

    • Perform deep-packet troubleshooting and network optimization for high-throughput, low-latency distributed inference workloads.

  4. Advanced Infrastructure & Security Compliance:

    • Implement robust network isolation, Access Control Lists (ACLs), Firewall policies, and Zero-Trust access mechanisms.

    • Collaborate with client engineering teams to integrate hardware edge appliances into existing enterprise network architectures.


II. Candidate Requirements

1. Core Qualifications (Must-Have):

  • Experience: 5+ years of hands-on experience in Enterprise / Data-Centre Networking and Physical Hardware Configuration.

  • Core Network & Security Stack: Strong background in TCP/IP, Routing, Switching, VLANs, VPNs, Firewalls, Network Segmentation, and TLS/mTLS.

  • System & Container Networking: Solid experience with Linux networking and Kubernetes networking (CNI).

  • Hardware & Protocols: Hands-on expertise configuring physical enterprise devices (Cisco IOS, Fortinet FortiOS, Palo Alto, Juniper, etc.).

  • Language Proficiency: Advanced English communication skills—ability to lead technical discussions, explain architecture decisions, and troubleshoot directly with international CTOs and Lead Engineers.

2. Preferred Qualifications (Nice-to-Have / Bonus):

  • Experience with Multi-site Edge Environments or Private Networks.

  • Hands-on exposure to SD-WAN, Private 5G, or GPU / High-Performance Data-Centre Networking.

  • Relevant industry certifications: CCNA / CCNP (Routing & Switching / Security), NSE (Fortinet), CKA, or equivalent credentials.


III. WORKING TIME & PLACE

- Working Time: Check in 8am-9am, check out 17h15-18h15

- Sông Đà Building, Phạm Hùng Street, Mỹ Đình, Nam Từ Liêm, Hà Nội


IV. CONTACT

- Email: [email protected] 

- Fanpage: https://www.facebook.com/tuyendung.ntqsolution

- Website: https://career.ntq.com.vn/