Senior Network Security Engineer

PERCEPT SOLUTIONS PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

PERCEPT SOLUTIONS PTE. LTD. is seeking an experienced networking professional to architect, design, implement and troubleshoot complex trading-related networks in a financial environment.

The role emphasizes low-latency networking, firewall policy management, and secure connectivity for market data and trading activities. Candidates should have a minimum of 7 years in the financial sector, with strong expertise in BGP, OSPF, NAT, and various security technologies.

Qualifications

• Minimum of 7 years in the financial industry, preferably trading.
• Experience in architecture, design, implementation and maintenance of trading-related network infrastructure.
• Strong knowledge of firewall architectures, policies and security operations.

Responsibilities

• Architect, design, implement and troubleshoot networks for financial trading environments.
• Configure firewall rules and policies for client connectivity and security requirements.
• Troubleshoot network connectivity and security issues with internal and external clients.
• Collaborate with Security Architecture Manager to review security operations and ensure SLA compliance.
• Document network diagrams and configurations using tools like Visio.

Skills

Network Architecture

Firewall design

BGP

OSPF

Packet analysis

Troubleshooting

Documentation

Network security

Tools

Cisco/Arista routing & switching

Fortinet FortiManager

Juniper/Cisco/Check Point security solutions

PICO/Corvil packet capture

SevOne SNMP

HPNA Network Automation

Job description

A Minimum of 7 years in the Financial Industry, preferably in a Trading environment, is required for this position. The candidate must have experience in the Architecture, Design, Implementation, and Maintenance of Trading-related Network infrastructure, such as: Market Data Distribution Networks, low-latency, ultra-low-latency and high frequency trading networks. The candidate must have the relevant knowledge and experience with Network Security systems in a financial trading environment, including the Architecture, engineering, implementation and operations of the different aspects of Network Security in a financial trading environment.

Core Technical Competency:

Architect, Design, Implement, and Troubleshoot Networks for different needs in the financial industry.

A solid background designing, managing, and troubleshooting diverse multi-protocol, switched and routed enterprise networks.

Expert level knowledge of Firewall technology - including Architecture, design, implementation, operations, and troubleshooting.

The candidate must be very comfortable configuring firewall rules and policies for both client connectivity and other security requirements of the network.

Ability to analyze firewall logs and policies to troubleshoot client connections, and other network related security issues on the network.

Ability to be able to troubleshoot network connectivity issues with both external and internal clients.

The candidate would Jointly work with the Security Architecture Manager to perform weekly pre and post implementation review of security operational activities.

Review active firewall policies and proposed changes for insecure rule sets and coordinate with the customer to ensure rules will support intended objectives

Work with the Security Architecture Manager and the Network Manager to track the progress of assigned projects and tasks to ensure SLA compliance.

Ability to handle complex network engineering assignments with little supervision.

Analyze and resolve network issues or as determined by monitoring tools and systems.

Respond to Trouble Tickets and perform scheduled activities related to network security.

The candidate must be good at documentation in general. Competent with working with network diagrams using Microsoft Visio.

Expert level knowledge and experience with BGP and other routing protocols to be able to design and implement various connectivity solutions to clients, vendors, and the management of the Trading network environment.

Strong ability to use packet tracing technologies to troubleshoot network issues.

Strong knowledge of TCP, UDP, and higher layer protocols in order to understand application performance and troubleshooting application issues on the network.

Create and maintain network device configurations and relevant databases.

Specific Technology Expertise:

Routing Protocols:

• BGP
• OSPF
• EIGRP
• Static Routing
• route-redistribution
• summarization
• Policy-Routing

Firewall Architecture, design, configuration, operations and Troubleshooting.

Switching:

• Trunking
• spanning- tree
• dot1q
• VLANs
• VTP
• Ethernet switching
• multi-layer switching
• vPC
• MLAG

Multicast:

• PIM
• IGMP
• MSDP

Network Services:

• TCP/IP
• UDP
• HSRP
• DNS
• DHCP
• FTP
• TFTP
• NAT
• TACACS
• SSH
• NTP
• SYSLOG
• TELNET

Network Management/Automation:

• SNMP
• SYSLOG
• IPSLA
• NETFLOW
• Network Telemetry
• and Network automation tools

Security:

• IPSEC
• VPNS
• Firewalls and Firewall Management and Analyzer systems
• IDS systems

Packet Analysis:

• PICO CNEs
• Wireshark
• sniffers
• packet captures
• and packet decodes
• Market Data packet decodes
• FIX packet decodes

Specific Technology Expertise:

• Cisco and Arista switching and routing platforms
• Fortinet Firewalls and FortiManager
• Juniper, Cisco, and Checkpoint Firewall and security solutions
• PICO/Corvil Packet capture devices and management platforms
• SevOne SNMP Management system
• HPNA Network Automation system

Industry Certifications:

Cisco, Arista, Juniper or Fortinet Certifications in Network Security will be a big plus

EA Licence No.:18S9405 / EA Reg. No.:R1330864

PerceptSolutions is expanding and actively seeking talented individuals.

We encourageapplicants to follow Percept Solutions on LinkedIn at https://www.linkedin.com/company/percept-solutions/ to stay informed about new opportunities and events.