A. Network Architecture & Design Authority

• Define target-state and reference architectures for APAC network services, covering data centre, campus, branch, WAN/SD-WAN, Internet gateways, cloud connectivity, wireless, remote access, network security, load balancing, and core network services.

• Produce and govern high-level and low-level designs, engineering standards, approved technology patterns, configuration baselines, and lifecycle roadmaps.

• Lead design reviews and provide technical assurance for strategic projects, major changes, new site onboarding, technology refresh, migrations, and service introductions.

• Ensure designs address availability, scalability, security, operability, capacity, disaster recovery, regulatory requirements, and support-model readiness from inception.

B. Instrumentation, Observability & SLOs

• Define network SLIs, SLOs, error budgets, reliability KPIs, and service-health measures for critical connectivity and security services.

• Architect end-to-end telemetry across network devices, controllers, security platforms, synthetic monitoring, flow data, logs, events, configuration state, and user-experience indicators.

• Establish actionable dashboards, intelligent alerting, dependency visibility, baseline performance, and early-warning thresholds that reduce noise and improve fault isolation.

• Own the technical reliability reporting framework and use evidence from service performance, incidents, capacity, and availability to prioritise engineering improvements.

C. Automation, Infrastructure as Code & Self-Healing

• Design and develop automation for provisioning, configuration validation, compliance checks, inventory, software lifecycle, change pre-checks and post-checks, backup, recovery, and operational reporting.

• Build reusable automation and Infrastructure-as-Code patterns using Python, Ansible, APIs, Git-based workflows, and suitable orchestration platforms.

• Engineer closed-loop or human-approved auto-remediation for repeatable failure conditions, with appropriate security controls, auditability, rollback, and exception handling.

• Promote test-driven network automation, peer review, version control, reusable modules, and standard engineering pipelines across network services.

D. Reliability, Resilience & Capacity Engineering

• Perform reliability and failure-mode analysis for critical network services, identifying single points of failure, hidden dependencies, convergence risks, and operational weaknesses.

• Design and validate high-availability, disaster-recovery, failover, redundancy, traffic-engineering, and service-continuity patterns through regular testing and evidence-based improvement.

• Lead capacity planning using utilisation trends, peak and percentile analysis, growth forecasts, service criticality, and agreed engineering headroom.

• Optimise routing, switching, wireless, security-policy enforcement, application delivery, and network performance to improve stability, scalability, and user experience.

E. Problem Management & Technical Escalation

• Act as the L3 architecture and engineering escalation point for complex, recurring, or cross-domain network reliability issues.

• Lead technical root-cause analysis and blameless post-incident reviews, converting findings into durable architecture, automation, monitoring, process, and documentation improvements.

• Analyse incident patterns, change failures, configuration drift, vulnerabilities, technical debt, and operational toil to eliminate systemic causes rather than repeat manual recovery.

• Partner with Network Operations, Regional NOC, Security, Infrastructure, Application, Cloud, and vendor teams to resolve dependencies and drive corrective actions to closure.

F. Security, Risk, Governance & Lifecycle

• Embed security-by-design, least privilege, segmentation, secure management access, configuration compliance, logging, and resilience controls into network architecture.

• Support technical risk assessments, audit responses, exception reviews, and remediation plans with clear evidence, compensating controls, ownership, and target-state recommendations.

• Govern network hardware and software lifecycle, including standards, version strategy, vulnerability remediation, end-of-sale/end-of-support planning, and technology refresh priorities.

• Ensure architecture and engineering deliverables comply with enterprise policies, change-management requirements, applicable regulatory expectations, and internal control frameworks.

G. Technical Leadership & Capability Development

• Mentor network engineers and SRE practitioners in architecture, automation, observability, reliability engineering, troubleshooting, and documentation disciplines.

• Define reusable playbooks, design templates, engineering checklists, test plans, and operational acceptance criteria for consistent delivery across APAC.

• Facilitate architecture forums, technical reviews, proof-of-concepts, and knowledge-sharing sessions to improve engineering standards and reduce key-person dependency.

• Engage technology vendors and internal stakeholders to evaluate solutions, validate roadmaps, and ensure that investments support the target network architecture.

• Bachelor’s degree in Computer Science, Information Technology, Engineering, Telecommunications, or a related discipline.

• Minimum 8–12 years of experience in network architecture, network engineering, infrastructure/platform engineering, Site Reliability Engineering, or network operations, including substantial experience in complex enterprise environments.

• Demonstrable experience designing resilient data centre, campus, branch, WAN/SD-WAN, Internet, cloud connectivity, wireless, and network-security solutions.

• Strong knowledge of routing and switching, BGP, OSPF, QoS, multicast, high availability, network segmentation, VPN, DNS/DHCP/IPAM, load balancing, and network access control.

• Hands-on automation experience using Python, Ansible, REST APIs, Git, data formats such as JSON/YAML, and Infrastructure-as-Code or orchestration practices.

• Strong experience with observability, telemetry, SNMP, syslog, flow analytics, synthetic monitoring, dashboards, alerting, SLIs/SLOs, error budgets, and capacity engineering.

• Experience with enterprise network and security technologies such as Cisco, Palo Alto Networks, Fortinet, F5, Meraki, Zscaler, and Cisco ISE, or equivalent platforms.

• Strong problem-management, troubleshooting, packet-analysis, RCA, post-incident review, risk assessment, and technical documentation capabilities.

• Experience in banking, financial services, or another regulated environment preferred; knowledge of MAS TRM and relevant regional regulatory requirements is advantageous.

• Preferred certifications include CCNP/CCIE, vendor security or cloud-networking certifications, Python/Ansible automation credentials, SRE/DevOps qualifications, and ITIL.