Senior Network Security Architect – Zero Trust

Hong Kong Exchanges and Clearing Limited (HKEX); Greater London; On-site; GBP 90,000 - 120,000; Full time

Job summary

London Metal Exchange, part of HKEX, seeks a Senior Network Security Specialist to design, implement and govern the network security controls across on‑premises, cloud, and containerised environments. You will drive the Zero Trust roadmap, define security standards, and ensure robust protection for LAN, WAN, data centres and campus networks.

You will collaborate with Information Security and Platform teams, lead complex troubleshooting, and provide 3rd‑line escalation support as required.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or related field, or equivalent.
• Industry certifications (e.g., PCNSE, NSE, CCNP Security, CISSP) or substantial real-world experience.
• ITILv3 processes knowledge is an advantage.

Responsibilities

• Design, implement and govern network security controls across on‑prem, cloud and containerised environments.
• Lead micro‑segmentation and Zero Trust network architectures with identity‑aware access.
• Act as technical authority for Fortinet, Palo Alto Networks and Zscaler platforms.
• Develop designs and artefacts, support audits and regulatory obligations.
• Mentor engineers and collaborate with cross‑functional teams to embed security by design.

Skills

Zero Trust

Network security

Firewalls

PAN-OS

Fortinet

Palo Alto

Zscaler

Kubernetes

IaC automation

Education

Bachelor's degree in CS/IT

ITIL foundations

Security certifications

Tools

PAN-OS

FortiGate

FortiManager

FortiAnalyzer

ZIA

ZPA

Zero Trust Exchange

Job description

London Metal Exchange, part of HKEX, seeks a Senior Network Security Specialist to design, implement and govern the network security controls across on‑premises, cloud, and containerised environments. You will drive the Zero Trust roadmap, define security standards, and ensure robust protection for LAN, WAN, data centres and campus networks.

You will collaborate with Information Security and Platform teams, lead complex troubleshooting, and provide 3rd‑line escalation support as required.