Security Network Engineer

Top 3 reasons to join us

• Competitive salary
• Full statutory insurance
• Professional, international working environment

Job description

About Safetrust

Safetrust is building the future of identity.

Imagine a world where your phone, wearable, or digital credential becomes your secure key—unlocking buildings, systems, and experiences seamlessly across physical and digital environments.

That’s what we do.

Our platform combines IoT devices, mobile credentials, and cloud-native architecture to power secure access for Fortune 200 companies and global enterprises.

As we evolve from a hardware-centric model to a platform and services-driven business, marketing plays a critical role in shaping how the market understands—and adopts—Safetrust.

About the role

The Security & Network Engineer is responsible for the design, deployment, and ongoing operation of the network and security infrastructure across Safetrust's Vietnam sites. This includes the Q7 factory deployment, which features Cisco Firepower next-generation firewalls, Catalyst switching, and a layered network architecture supporting both office and manufacturing environments. 

This role works closely with the IT Operations & Access Management Manager, the Global IT Admin, and the Security & Compliance team to ensure the local environment meets Safetrust's global security standards, including alignment with NIST and other compliance frameworks. 

Key Responsibilities

Network Engineering & Operations

• Design, deploy, and maintain Cisco switching infrastructure across Vietnam sites, including core, distribution, and access layers. 
• Configure, harden, and operate Cisco Firepower next-generation firewalls, including high-availability pair configuration where applicable. 
• Plan and implement VLAN segmentation, routing, VPN connectivity to the US headquarters, and secure remote access for employees. 
• Monitor network performance and capacity, troubleshoot incidents, and lead root-cause analysis for network and connectivity issues. 
• Maintain accurate, version-controlled configuration backups and network diagrams. 

Security & Compliance

• Implement and maintain firewall rules, access policies, intrusion prevention, and content filtering aligned with Safetrust security standards. 
• Support the Security & Compliance team in NIST-aligned controls, vulnerability management, and audit readiness. 
• Participate in incident response activities for network and security events. 
• Review and harden configurations on switches, firewalls, and access points before they are placed into production. 

Collaboration & Documentation

• Work with the Global IT Admin and counterparts in other regions to ensure consistent network standards across Safetrust locations. 
• Produce clear technical documentation, including network designs, runbooks, and standard operating procedures.
• Contribute network and security asset records into the IT Asset Management (ITAM) framework and CMDB. 
• Coordinate with vendors and local Cisco partners on procurement, support contracts, and complex deployments. 

Wireless and emerging needs

• Plan and deploy enterprise wireless infrastructure to support office, factory, and guest networks. 
• Support the integration of Safetrust's own access management products into the corporate environment where applicable. 

Your skills and experience

Skills & Experience

• Bachelor's degree in Computer Science, Information Technology, Network Engineering, or a related field, or equivalent practical experience. 
• 4+ years of hands-on experience administering enterprise network infrastructure, with strong Cisco focus. 
• Demonstrated experience with Cisco firewall platforms — Firepower (FTD/FMC), ASA, or equivalent next-generation firewall technology. 
• Solid working knowledge of Cisco Catalyst switching, including VLAN, trunking, spanning tree, link aggregation, and inter-VLAN routing. 
• Experience with site-to-site VPN, remote access VPN, and secure connectivity between distributed offices. 
• Strong understanding of TCP/IP, routing protocols, DHCP, DNS, NAT, and network security fundamentals. 
• Working English communication skills, both written and verbal, sufficient for collaboration with the US headquarters and other regional teams. 

Success Profile

The ideal candidate:

• Brings a measured and methodical approach to changes in production environments, prioritizing thoughtful design and thorough review over rushed deployments. 
• Is comfortable raising concerns about scope, risk, or readiness, and proactively offer constructive, solution-oriented alternatives. 
• Demonstrates strong written documentation practices, ensuring clarity, consistency, and knowledge sharing across the team. 
• Is collaborative and willing to mentor and support  junior team members. 
• Is highly self-sufficient, able to work independently across time zones with minimal oversight while maintaining alignment with team priorities.

Why you'll love working here

• Competitive salary based on experience and performance
• Daily lunch provided at the office
• Free coffee, tea, and refreshments
• Full statutory insurance (social, health, unemployment)
• Annual health check-up and paid annual leave
• Professional, international working environment