Senior Network & Security Engineer (SD-WAN, Firewalls)

Referment; Hong Kong; On-site; HKD 900,000 - 1,300,000; Full time

Job summary

Referment is hiring a Networking & Security Engineer for its Technology Infrastructure team in Hong Kong. The role combines network design and security ownership across multi-site infrastructure, with hands-on Cisco, firewall, SD-WAN, and threat-hunting duties.

You will operate in a regulated financial environment, balancing BAU work with project delivery while supporting on-call rotations and continuous hardening of devices, endpoints, and cloud-adjacent systems.

Qualifications

• At least 7 years across infrastructure, networking and security roles.
• Hands-on Windows Server and Linux (Red Hat/CentOS) experience.
• Solid networking foundations — TCP/IP, VLANs, VPNs, DNS and DHCP — with practical Cisco experience.
• Demonstrated implementation of security controls: patch management and system hardening, endpoint protection and monitoring, and identity and access management.
• A good grasp of cyber security principles and modern threat landscapes, including automation and AI-driven attack vectors.
• Experience with virtualisation (VMware) and enterprise storage (SAN/NAS).
• Structured, analytical troubleshooting, and the ability to balance BAU work with project delivery.

Responsibilities

• Design, build and maintain network infrastructure across Cisco routers, switches, firewalls, VPNs and wireless.
• Own the SD-WAN architecture end to end: deployment, configuration, optimisation and management across sites.
• Manage firewall infrastructure, including rule-base and policy design, segmentation and audits.
• Lead security operations across threat detection, incident response and vulnerability management.
• Monitor, triage and respond to events across the network and wider estate, including log analysis and threat hunting.
• Drive hardening across network devices, servers, endpoints and cloud-adjacent systems; design segmentation into architecture.
• Run network and vulnerability assessments and penetration-testing exercises, then remediation.
• Improve security tooling (SIEM, EDR, IDS/IPS, endpoint protection) with network integration.
• Act as escalation point for network and security incidents (2nd/3rd line); work across Windows Server and Linux estates.

Skills

Networking

Security

Windows Server

Linux (Red Hat/CentOS)

Cisco networking

Firewall management

Threat detection

Incident response

SIEM

EDR

Automation

VMware

SAN/NAS

VLANs

Project delivery

Tools

VMware

SIEM

EDR

IDS/IPS

PowerShell

Bash

Job description

Referment is hiring a Networking & Security Engineer for its Technology Infrastructure team in Hong Kong. The role combines network design and security ownership across multi-site infrastructure, with hands-on Cisco, firewall, SD-WAN, and threat-hunting duties.

You will operate in a regulated financial environment, balancing BAU work with project delivery while supporting on-call rotations and continuous hardening of devices, endpoints, and cloud-adjacent systems.