Networking and Security Engineer (935B0E9)

Referment; Hong Kong; On-site; HKD 900,000 - 1,500,000; Full time

Job summary

Referment is partnering with a global investment manager to hire a Networking and Security Engineer for its Technology Infrastructure function in Hong Kong. The role blends networking and security, with responsibilities across design, deployment and ongoing operations of a multi-site network and security stack.

You’ll own SD-WAN, firewall, threat detection and incident response, while aligning with regulatory requirements.

Qualifications

• 7+ years in infrastructure, networking and security roles.
• Hands-on Windows Server and Linux (Red Hat/CentOS).
• Strong TCP/IP, VLAN, VPN, DNS/DHCP with Cisco experience.

Responsibilities

• Design, build and maintain network infrastructure across Cisco devices and VPNs.
• Own SD-WAN architecture end-to-end across sites.
• Lead security operations: threat detection, incident response and vulnerability management.
• Coordinate monitoring, log analysis, and incident escalation with 2nd/3rd line support.

Skills

Networking

Security engineering

Firewall management

VPNs & WAN

Linux/Windows admin

Threat detection

Tools

Cisco IOS

VMware

SIEM tooling

EDR tooling

IDS/IPS

Job description

Referment is working with a global investment manager to hire a Networking and Security Engineer into its Technology Infrastructure function. The firm runs a multi-site network estate in a regulated, fast-moving financial environment, and treats networking and security as two halves of one discipline rather than separate teams. You'll join a small infrastructure group that owns connectivity, availability and defensive strength together, and carries genuine responsibility for both.

The Role

• Design, build and maintain network infrastructure across Cisco routers, switches, firewalls, VPNs and wireless, keeping availability, performance and security tight at every layer.
• Own the SD-WAN architecture end to end: deployment, configuration, optimisation and ongoing management of the fabric across sites.
• Manage firewall infrastructure, including rule-base and policy design, segmentation and regular audits to keep a tightly controlled perimeter.
• Lead security operations across threat detection, incident response and vulnerability management, with network traffic analysis as a core input.
• Monitor, triage and respond to events across the network and wider estate, covering log analysis, anomaly detection and threat hunting, with awareness of modern automation- and AI-driven attack vectors.
• Drive hardening across network devices, servers, endpoints and cloud-adjacent systems, and design segmentation and access control into architecture from the outset rather than retrofitting it.
• Run network and vulnerability assessments and penetration-testing exercises, then prioritise and remediate the findings.
• Improve security tooling such as SIEM, EDR, IDS/IPS and endpoint protection, with particular focus on integration with the network.
• Act as the escalation point for network and security incidents across 2nd and 3rd line, and work across Windows Server and Linux (Red Hat/CentOS) estates to a consistent security baseline.

What We're Looking For

• At least 7 years across infrastructure, networking and security roles.
• Hands-on Windows Server and Linux (Red Hat/CentOS) experience.
• Solid networking foundations — TCP/IP, VLANs, VPNs, DNS and DHCP — with practical Cisco experience.
• Demonstrated implementation of security controls: patch management and system hardening, endpoint protection and monitoring, and identity and access management.
• A good grasp of cyber security principles and modern threat landscapes, including automation and AI-driven attack vectors.
• Experience with virtualisation (VMware) and enterprise storage (SAN/NAS).
• Structured, analytical troubleshooting, and the ability to balance BAU work with project delivery.

Desirable

• Scripting or automation experience, for example PowerShell or Bash.
• Prior experience in financial services or another regulated environment.

The role is office-based in Hong Kong, five days per week on-site, and includes participation in an on-call rotation supporting critical network and security systems outside business hours.

This could suit a network engineer who has moved toward security ownership, or a security engineer with strong hands-on Cisco and firewall depth, particularly from regulated or financial environments. If you like holding both the architecture and the operational detail, this role gives you that scope.

#Referment