Senior Network Engineer

About the Role
We are looking for a Senior Network Engineer (L3) to take full technical ownership of our physical Data Centre (DC) operations, enterprise network routing, and perimeter network security. Following our infrastructure restructuring, this role focuses deeply on DC-to-DC connectivity, high-availability switching/routing, FortiGate firewall management, and supporting regular regulatory network drills (SBV & PCI DSS). Reporting to the Head of Infrastructure, you will ensure zero-downtime operations for core network pathways.
What You Will Do
Data Centre & Network Operations: Own end-to-end management of physical Data Centre (DC) network devices, racks, structured cabling, WAN links, and hardware maintenance schedules.
Enterprise Routing & Switching: Maintain and optimize core routing and switching topologies (BGP, OSPF, VLANs, VXLAN, Spanning Tree) across Data Centers, Hangout/office sites, and cloud edge connectivity.
Perimeter Security & Firewalls: Execute firewall policy definitions, NAT/VPN configurations, and zero-downtime firmware upgrades for FortiGate enterprise firewalls and Network Access Control (NAC).
Network DR & Regulatory Drills: Orchestrate cross-site network failover strategies and execute regular Disaster Recovery (DC-DR) network drills in compliance with State Bank of Vietnam (SBV) regulations (RTO < 2 hours).
SSL & Payment Certificate Management: Manage annual VISA ACS and SSL/TLS certificate renewals to ensure seamless network transaction processing without service errors.
L3 Escalation & Helpdesk Support: Serve as the Level-3 escalation point for complex network/connectivity incidents forwarded from internal IT Helpdesk specialists.
What We Are Looking For
Must-have
3-5 years of hands-on experience in enterprise network engineering, Data Centre operations, and network security.
Solid expertise in FortiGate Firewalls (FortiOS), IPsec VPNs, NAT, and Network Access Control (NAC).
Strong mastery of core networking protocols: BGP, OSPF, MPLS, VLANs, Subnetting, and Spanning Tree.
Direct hands-on experience in managing physical Data Centre hardware, ISP links, and cross-connects.
Proven track record in executing zero-downtime maintenance and network DR failover drills.
Familiarity with PCI DSS network compliance mandates and SBV regulatory standards.
Nice to have
Relevant certifications: Fortinet NSE 4/7, CCNP Enterprise/Security.
Basic scripting (Python/Bash) for network monitoring automation.
Why Join Us
Define the engineering foundations behind one of Vietnam's leading digital banks.
Work alongside Kredivo Group's regional Platform Engineering team (Vietnam, Indonesia, Singapore).
Hybrid model: 4 days HCMC office, 1 day work from home.