Networking & Security Engineer

Capula; Hong Kong; On-site; HKD 450,000 - 750,000; Full time

Job summary

Capula in Hong Kong seeks a hands-on Infrastructure & Security Engineer to strengthen our security posture across server, network and endpoint protection. The role combines day-to-day operational support with project delivery and ongoing security enhancements.

The position is office-based with five days on-site presence. Ideal candidates have 5+ years in infra/security, strong Windows Server and Linux skills, and practical experience with Cisco networks and VMware.

Qualifications

• 5+ years of experience in infrastructure, networking and security roles.
• Experience with Windows Server and Linux (Red Hat/CentOS).
• Knowledge of firewalls, switches, VPNs, and wireless systems (Cisco-based).
• Experience implementing security controls: patching, hardening, endpoint protection, IAM, and threat monitoring.

Responsibilities

• Provide advanced technical support across infrastructure and security incidents.
• Escalation point for 2nd and 3rd line issues in desktop/server/network environments.
• Maintain and support network infrastructure including Cisco devices and VPNs.
• Own security best practices: hardening, patching, remediation, endpoint protection.
• Monitor security events, analyze logs, and identify threats including AI-enabled risks.
• Contribute to secure infrastructure design for BAU and project work.
• Collaborate with infra and security teams on enhancements and initiatives.
• Create and maintain SOPs, diagrams, and runbooks.
• Participate in on-call rotation to support critical systems after hours.
• Balance BAU with project delivery and communicate risks clearly.

Skills

Hands-on

Infrastructure

Security

Windows/Linux

Networking

Tools

Windows Server

Linux (Red Hat/CentOS)

Cisco networking

VMware

SAN/NAS

PowerShell

Bash

Job description

We are seeking a hands-on Infrastructure & Security Engineer with strong expertise across server, network, and security domains. Security is a core priority for this role, and the successful candidate will play a key part in strengthening and evolving the firm’s security posture in response to an increasingly complex threat landscape, including emerging risks associated with AI.

This is a broad and technically engaging role, combining day-to-day operational support with project delivery and ongoing security enhancement. The role requires a proactive individual who can operate as both a technical expert and a thought partner, contributing to secure infrastructure design and continuous improvement.

This role is office-based and requires five days per week on-site presence.

Key Responsibilities

• Provide advanced technical support across infrastructure, including server, network, and security-related incidents and service requests
• Act as an escalation point for 2nd and 3rd line issues across desktop, server, and network environments
• Has experience working with Windows and Linux (Red Hat/CentOS) environments
• Support and maintain network infrastructure, including firewalls, switches, VPNs, and wireless systems (primarily Cisco-based)
• Own and drive security best practices, including system hardening, patching, vulnerability remediation, and endpoint protection
• Monitor and respond to security events, including log analysis and threat identification, with awareness of modern attack vectors (including AI-enabled threats)
• Contribute to the design and implementation of secure infrastructure solutions across both BAU and project work
• Collaborate closely with infrastructure and security teams to deliver enhancements and strategic initiatives
• Create and maintain clear documentation, including SOPs, architecture diagrams, and runbooks
• Participate in an on-call rotation to support critical systems outside business hours

Requirements

• Minimum 5+ years’ experience in infrastructure, networking, and security roles
• Strong hands-on experience with Windows Server and Linux (Red Hat/CentOS)
• Solid networking knowledge, including TCP/IP, VLANs, VPNs, DNS, DHCP, with practical experience in Cisco environments
• Demonstrated experience implementing and supporting security controls, including:
• Patch management and system hardening
• Endpoint protection and monitoring
• Identity and access management
• Good understanding of cyber security principles, including modern threat landscapes and evolving risks (e.g. automation and AI-driven attack vectors)
• Experience with virtualisation (VMware) and enterprise storage (SAN/NAS)
• Scripting or automation experience (e.g. PowerShell, Bash) is advantageous
• Experience in financial services or regulated environments is preferred
• Strong troubleshooting skills with a structured and analytical approach
• Able to balance BAU responsibilities with project delivery effectively
• A thoughtful and forward-looking mindset, with the ability to identify risks and propose improvements
• Clear and confident communicator, able to engage with both technical and non-technical stakeholders
• Self-motivated, accountable, and willing to take ownership of issues end-to-end
• Collaborative and adaptable, with a practical and solutions-focused approach