VP/SVP, Cloud/Network Engineer, Technology Group

GIC is a leading global investment firm established in 1981 to manage Singapore’s foreign reserves. As a disciplined, long-term investor, we invest across a wide range of asset classes, including equities, fixed income, private equity, real estate and infrastructure, with investments in over 40 countries. Headquartered in Singapore, we have 11 offices in key financial cities worldwide.

Technology Group Our Technology Group (TG) builds and runs the technology behind GIC’s investment and corporate activities. Within TG, Infrastructure & Cybersecurity Engineering designs, engineers and operates the networks, hosting platforms and security services that keep GIC secure, resilient and ready for the future.

About The Team The Cloud Networking team designs and engineers the connectivity between GIC’s public cloud environments, AWS Outposts, data centres and global network. We build the secure, resilient and automated network foundations our cloud platforms and investment teams rely on.

What impact can you make in this role? As a Cloud Network Engineer, you will own the design and engineering of GIC’s cloud and hybrid networks: landing-zone architecture in AWS (and increasingly Azure), AWS Outposts in our data centres, and the hybrid edge where cloud meets our WAN. You will deliver the network as code and set the patterns platform and application teams build on.

What will you do as a VP/SVP, Cloud/Network Engineer?

• Design, build and evolve GIC’s cloud network architecture, primarily on AWS (VPC design and IP strategy, Transit Gateway, PrivateLink, ingress and egress patterns), extending consistent patterns to Azure where required.
• Own AWS Outposts networking: rack uplinks and LAGs into the data centre network, service link and local gateway design, BGP peering, customer-owned IP pools and connectivity to the parent AWS Region, working with Transport and Cloud Platform.
• Own the hybrid edge: Direct Connect (and ExpressRoute where applicable), edge and colocation routing, BGP policy, redundancy and tested failover between cloud, data centres and the WAN.
• Engineer cloud DNS and hybrid name resolution (Route 53 Resolver, private hosted zones) in line with the enterprise DNS architecture owned by Network Services.
• Deliver all cloud network changes as code using Terraform, Git-based CI/CD and policy-as-code guardrails, on the shared automation platform run by Network Services.
• Define landing-zone networking patterns and reference architectures with Cloud Platform, Network Security and Architecture, and act as design authority for cloud network changes.
• Implement cloud network security controls (security groups, NACLs, cloud firewalls, centralised inspection, encryption in transit) to the policies and standards set by Network Security.
• Build cloud network observability (flow logs, reachability analysis, alerting), manage capacity and cost, act as senior escalation point for hybrid issues, and produce design and audit evidence aligned to MAS TRM.
• Hand every build over to Network Operations against agreed acceptance criteria (monitoring, runbooks, as-built records and knowledge transfer), with early-life support until sign-off

What qualifications or skills should you possess in this role?

• Typically 8+ years in network engineering, including at least 3 years designing and running AWS networking in an enterprise environment.
• Strong enterprise networking experience: routing and switching in large, multi-site data centre and WAN environments (BGP, OSPF, VLANs / VRFs, LACP, high availability) as the foundation for your cloud work.
• Deep hands-on expertise with AWS networking services (VPC, Transit Gateway, Direct Connect, Route 53, PrivateLink, AWS Network Firewall / Gateway Load Balancer or equivalent).
• A practical understanding of how AWS Outposts connects to an on-premises network (service link, local gateway, BGP), or equivalent hybrid infrastructure experience you can apply quickly.
• Proven delivery of network infrastructure as code with Terraform and Git-based pipelines, plus scripting in Python.
• Solid understanding of cloud network security (segmentation, centralised versus distributed inspection, zero trust) and the ability to explain designs and trade-offs to technical and non-technical stakeholders.

Nice to have

• CCNP / CCIE Enterprise/Data Centre/Service Provider.
• AWS Certified Advanced Networking – Specialty; Azure Network Engineer Associate …