Networking and Security Engineer (FE4991D)

Referment; Hong Kong; On-site; HKD 900,000 - 1,300,000; Full time

Job summary

Referment is hiring a Networking & Security Engineer for its Technology Infrastructure team in Hong Kong. The role combines network design and security ownership across multi-site infrastructure, with hands-on Cisco, firewall, SD-WAN, and threat-hunting duties.

You will operate in a regulated financial environment, balancing BAU work with project delivery while supporting on-call rotations and continuous hardening of devices, endpoints, and cloud-adjacent systems.

Qualifications

• At least 7 years across infrastructure, networking and security roles.
• Hands-on Windows Server and Linux (Red Hat/CentOS) experience.
• Solid networking foundations — TCP/IP, VLANs, VPNs, DNS and DHCP — with practical Cisco experience.
• Demonstrated implementation of security controls: patch management and system hardening, endpoint protection and monitoring, and identity and access management.
• A good grasp of cyber security principles and modern threat landscapes, including automation and AI-driven attack vectors.
• Experience with virtualisation (VMware) and enterprise storage (SAN/NAS).
• Structured, analytical troubleshooting, and the ability to balance BAU work with project delivery.

Responsibilities

• Design, build and maintain network infrastructure across Cisco routers, switches, firewalls, VPNs and wireless.
• Own the SD-WAN architecture end to end: deployment, configuration, optimisation and management across sites.
• Manage firewall infrastructure, including rule-base and policy design, segmentation and audits.
• Lead security operations across threat detection, incident response and vulnerability management.
• Monitor, triage and respond to events across the network and wider estate, including log analysis and threat hunting.
• Drive hardening across network devices, servers, endpoints and cloud-adjacent systems; design segmentation into architecture.
• Run network and vulnerability assessments and penetration-testing exercises, then remediation.
• Improve security tooling (SIEM, EDR, IDS/IPS, endpoint protection) with network integration.
• Act as escalation point for network and security incidents (2nd/3rd line); work across Windows Server and Linux estates.

Skills

Networking

Security

Windows Server

Linux (Red Hat/CentOS)

Cisco networking

Firewall management

Threat detection

Incident response

SIEM

EDR

Automation

VMware

SAN/NAS

VLANs

Project delivery

Tools

VMware

SIEM

EDR

IDS/IPS

PowerShell

Bash

Job description

Referment is working with a global investment manager to hire a Networking and Security Engineer into its Technology Infrastructure function. The firm runs a multi-site network estate in a regulated, fast-moving financial environment, and treats networking and security as two halves of one discipline rather than separate teams. You'll join a small infrastructure group that owns connectivity, availability and defensive strength together, and carries genuine responsibility for both.

The Role

• Design, build and maintain network infrastructure across Cisco routers, switches, firewalls, VPNs and wireless, keeping availability, performance and security tight at every layer.
• Own the SD-WAN architecture end to end: deployment, configuration, optimisation and ongoing management of the fabric across sites.
• Manage firewall infrastructure, including rule-base and policy design, segmentation and regular audits to keep a tightly controlled perimeter.
• Lead security operations across threat detection, incident response and vulnerability management, with network traffic analysis as a core input.
• Monitor, triage and respond to events across the network and wider estate, covering log analysis, anomaly detection and threat hunting, with awareness of modern automation- and AI-driven attack vectors.
• Drive hardening across network devices, servers, endpoints and cloud-adjacent systems, and design segmentation and access control into architecture from the outset rather than retrofitting it.
• Run network and vulnerability assessments and penetration-testing exercises, then prioritise and remediate the findings.
• Improve security tooling such as SIEM, EDR, IDS/IPS and endpoint protection, with particular focus on integration with the network.
• Act as the escalation point for network and security incidents across 2nd and 3rd line, and work across Windows Server and Linux (Red Hat/CentOS) estates to a consistent security baseline.
  
  

What We're Looking For

• At least 7 years across infrastructure, networking and security roles.
• Hands-on Windows Server and Linux (Red Hat/CentOS) experience.
• Solid networking foundations — TCP/IP, VLANs, VPNs, DNS and DHCP — with practical Cisco experience.
• Demonstrated implementation of security controls: patch management and system hardening, endpoint protection and monitoring, and identity and access management.
• A good grasp of cyber security principles and modern threat landscapes, including automation and AI-driven attack vectors.
• Experience with virtualisation (VMware) and enterprise storage (SAN/NAS).
• Structured, analytical troubleshooting, and the ability to balance BAU work with project delivery.
  
  

Desirable

• Scripting or automation experience, for example PowerShell or Bash.
• Prior experience in financial services or another regulated environment.
  
  

The role is office-based in Hong Kong, five days per week on-site, and includes participation in an on-call rotation supporting critical network and security systems outside business hours.

This could suit a network engineer who has moved toward security ownership, or a security engineer with strong hands-on Cisco and firewall depth, particularly from regulated or financial environments. If you like holding both the architecture and the operational detail, this role gives you that scope.

#Referment