The posting
GIC is one of the world’s largest sovereign wealth funds. With over 2,000 employees across 11 locations around the world, we invest in more than 40 countries globally across asset classes and businesses. Working at GIC gives you exposure to an extraordinary network of the world’s industry leaders. As a leading global long-term investor, we Work at the Point of Impact for Singapore’s financial future, and the communities we invest in worldwide.
Technology Group We experiment, design, and lead a 24×7 global business where we support core capabilities in asset management, trading, investment operations, and risk management. We deliver secure, reliable, and integrated solutions, and provide insights on new, and emerging technologies.
Infrastructure & Cybersecurity Resilience (ICR) We design, build, and secure the technology foundations that power GIC’s global investment operations. We aim to deliver resilient, scalable, and secure infrastructure that empowers our people and businesses to perform securely, efficiently, and effectively.
What impact can you make in this role?
The AVP/VP, Network Engineer is responsible for the design, engineering, and delivery of network infrastructure across all GIC data centres and office sites globally. This hands-on technical role owns the architecture and build of Data Centre, Campus, and WAN/SD-WAN networks across a multi-vendor estate, and applies network automation to improve consistency, scalability, and delivery velocity. The role partners closely with Network Operations, Security, and other infrastructure engineering teams to translate business and technical requirements into resilient, secure, and standardised network solutions.
This is an individual-contributor technical role. In addition to deep hands-on engineering across Data Centre Networks, Campus Networks (wired and wireless), and SD-WAN, the role engages vendors and product principals to drive feature enhancements and influence product roadmaps, and requires the ability to develop, read and make edits to automation code (Ansible), backed by sound knowledge of financial-sector security and compliance requirements.
What will you do as an AVP/VP, Network Automation and Reliability Engineer?
Network Engineering & Solution Design Leadership
- Lead the design and engineering of network solutions across Data Centre, Campus, and WAN/SD-WAN domains, ensuring scalability, resilience, security, and performance.
- Produce high-quality low-level and high-level designs (HLDs/LLDs), standards, and reference architectures aligned to financial-industry best practices.
- Act as the technical authority and design-approval reviewer for network changes and new builds, ensuring engineering rigour and adherence to architectural standards.
- Partner with Network Operations, Security, and other infrastructure engineering teams to translate requirements into deployable, well-documented solutions.
Core Engineering Responsibilities
Data Centre Networks
- Design, build, and evolve data centre fabrics using EVPN/VXLAN, Cisco ACI, and modern spine-leaf architectures across a multi-vendor estate (e.g., Cisco, Arista, Juniper). Engineer multi-tenancy, segmentation, and high-availability designs, including integration with load balancers (e.g., F5 LTM/GTM) and L4–L7 services. Define oversubscription, capacity, and failure-domain strategies to support trading and critical workloads.
Campus Networks
- Engineer enterprise campus LAN and wireless solutions (routing, switching, Wi-Fi 6/7 with a managed controller ecosystem) using standardised, templated designs across sites of varying size. Implement access security and segmentation (802.1X, NAC, zoning) in collaboration with Security teams. Ensure resilient, performant designs for corporate connectivity.
SD-WAN, WAN & Secure Connectivity
- Design and deliver SD-WAN and WAN solutions, including overlay transport, application-aware routing, secure connectivity, and cloud on-ramp, using leading platforms (e.g., Cisco Catalyst SD-WAN/Viptela, Fortinet, Versa, VMware VeloCloud, or equivalent). Embed Zero Trust and SASE principles into WAN and remote-access designs (e.g., Zscaler ZIA/ZPA, Prisma Access, or equivalent). Lead WAN modernisation and migration efforts (e.g., MPLS to SD-WAN) with structured, low-risk transition plans. Engineer secure interconnectivity between data centres, campus sites, and cloud providers.
Network Automation (Ansible)
- Develop new, read, interpret, and make edits to existing Ansible playbooks, roles, and Jinja2 templates to support network provisioning, configuration management, and compliance. Maintain and extend standardised configuration templates, and use automated validation within delivery workflows. Apply automation to drive configuration consistency, support drift detection, and reduce manual TOIL across the network estate. (Preferred) Familiarity with adjacent automation/IaC tooling — Python scripting, Terraform, YAML, and CI/CD pipelines (Git-based) — to support scalable, repeatable delivery.
Security & Resilience Integration
- Embed security baselines, hardening standards, and segmentation into all network designs. Engineer for high availability, redundancy, and compliance with internal RTO/RPO and resilience targets.
Project Delivery & Lifecycle Management
- Lead engineering delivery for network projects from design through build, testing, and handover to operations.
- Develop detailed test plans, simulation/validation approaches, implementation steps, and rollback strategies for high-risk changes.
- Maintain comprehensive design documentation, build guides, and as-built records to meet operational and audit expectations.
Observability, Performance & Troubleshooting
- Design and apply network observability — telemetry, monitoring, flow analytics, and dashboards — to provide visibility across DC, campus, and WAN.
- Provide advanced troubleshooting and root cause analysis (RCA) for complex, cross-domain network issues, including performance optimisation.
- Establish baselines and proactive alerting to detect and pre-empt performance degradation.
Vendor & Product Engagement
- Engage vendors and product principals to evaluate technologies and influence feature enhancements and product roadmaps aligned to the firm’s network strategy.
- Provide structured technical feedback, raise and track enhancement and defect requests, and validate fixes and new features through proofs-of-concept and testing.
- Maintain strong working relationships with OEMs and partners to support technical escalations, product lifecycle planning, and assessment of emerging technologies.
Collaboration & Standards
- Work closely with the Network Operations team to ensure solutions are operable, monitored, and supportable, and to incorporate operational feedback into designs.
- Define and maintain engineering standards, design templates, and gold-standard configuration baselines.
- Act as a senior technical escalation point for complex network issues and share engineering knowledge across teams.
Governance, Risk & Compliance
- Ensure all network designs and changes adhere to internal controls, security baselines, and regulatory frameworks (MAS-TRM, CSA CCoP, and NIST CISF guidelines).
- Support internal/external audits with design documentation, technical evidence, and explanations of network controls and configurations.
What qualifications or skills should you possess in this role?
- Education: Bachelor’s degree in Information Technology, Computer Science, Engineering, or equivalent experience.
- Experience: 8–12 years of experience in Network Engineering, with at least 3–5 years in a senior design/engineering capacity—preferably in the financial industry. (AVP candidates: 6–10 years with demonstrated hands-on engineering depth.)
Technical Expertise:
- Data Centre Networks (EVPN/VXLAN, Cisco ACI, spine-leaf, F5 LTM/GTM) across a multi-vendor estate (Cisco, Arista, Juniper)
- Enterprise Campus Networks (routing, switching, Wi-Fi 6/7 and wireless controller ecosystems)
- SD-WAN design and delivery on leading platforms (e.g., Cisco Catalyst SD-WAN/Viptela, Fortinet, Versa, VMware VeloCloud) and WAN technologies
- Zero Trust / SASE and network security (segmentation, NAC, IDS/IPS, firewalls; e.g., Zscaler or Prisma Access or Netskope)
- Working ability to create, read and edit network automation code, primarily Ansible (playbooks, roles, Jinja2 templates), with version control (Git)
- (Preferred) Adjacent automation/IaC — Python, Terraform, YAML, CI/CD pipelines
- Strong knowledge of networking protocols (BGP, OSPF, MPLS, IPsec, DNS, DHCP, QoS)
- Network observability and monitoring tooling (telemetry, flow analytics, dashboards)
- Cloud Networking (AWS, GCP, Azure)
- Certifications (preferred):
- Professional certifications such as CCNP/CCIE (Enterprise or Data Center); relevant security or SD-WAN vendor certifications
- Familiarity with ITIL, NIST CSF, and financial-sector risk frameworks
- Comfortable reading and modifying automation scripts (Ansible, Python) to improve consistency and reduce operational risk
Soft Skills
- Strong technical depth with the ability to lead complex network design and delivery end-to-end as an individual contributor.
- Excellent analytical, problem-solving, and root-cause-analysis skills, with clear communication for both technical and executive audiences.
- Ability to engage and influence vendors and product principals to shape enhancements and roadmaps.
- Collaborative mindset with the ability to influence across architecture, operations, and compliance teams.
Work at the Point of Impact We need to be forward-looking to attract the right people to help us become the Leading Global Long-term Investor. Join our ambitious, agile, and diverse teams - be empowered to push boundaries and pursue innovative ideas, share your views, and be heard. Be anchored on our PRIME Values: Prudence, Respect, Integrity, Merit and Excellence, which guides us in how we make our day-to-day decisions. We strive to inspire. To make an impact.
GIC is a Great Place to Work
At GIC, our offices are vibrant hubs for ideation, professional growth, and interpersonal connection. At the same time, we believe that flexibility allows us to do our best work and be our best selves. Thus, our teams come into the office four days per week to harness the benefits of in-person collaboration, but have the flexibility to choose which days they work from home and adjust this arrangement as situational needs arise.
GIC is an equal opportunity employer As an employer, we passionately believe every individual brings with them unique diversity of thought and perspectives to meaningfully enrich perspectives of GIC teams to drive competitive performance. An inclusive environment yields exceptional contribution.
Learn more about our Technology Group here: https://gic.careers/group/technology-group/
You can apply directly through our recruitment portal at: https://careers.gic.com.sg/job-invite/17255/
