Senior Network Security Engineer

PERCEPT SOLUTIONS PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

PERCEPT SOLUTIONS PTE. LTD. is seeking an experienced network security professional with a strong background in trading networks. The role focuses on architecture, design, implementation and maintenance of highly secure, low-latency trading infrastructures.

You will work on market data distribution networks, firewall design, and security operations to ensure SLA-aligned performance in fast-moving financial environments. Strong documentation and collaboration with security teams are essential.

Qualifications

• Minimum 7 years in the financial industry, preferably in a trading environment.
• Experience in architecture, design, implementation and maintenance of trading-related network infrastructure.
• Knowledge of market data distribution networks, low-latency and high-frequency trading networks.
• Experience with network security architecture in financial trading environments, including operations of security controls.

Responsibilities

• Architect, design, implement and troubleshoot networks for financial industry needs.
• Manage and troubleshoot multi-protocol, switched and routed enterprise networks.
• Design, implement, and operate firewall architectures and policies.
• Analyze firewall logs and policies to troubleshoot client connections and security issues.
• Collaborate with Security Architecture Manager on security operations and reviews.
• Maintain network diagrams using Visio.
• Create and maintain network device configurations and databases.

Skills

Network security

Firewall design

BGP

Packet tracing

Troubleshooting

Documentation

Visio diagrams

Tools

Wireshark

FortiManager

PICO/Corvil

SevOne

HPNA Automation

Job description

A Minimum of 7 years in the Financial Industry, preferably in a Trading environment, is required for this position. The candidate must have experience in the Architecture, Design, Implementation, and Maintenance of Trading-related Network infrastructure, such as: Market Data Distribution Networks, low-latency, ultra-low-latency and high frequency trading networks. The candidate must have the relevant knowledge and experience with Network Security systems in a financial trading environment, including the Architecture, engineering, implementation and operations of the different aspects of Network Security in a financial trading environment.

Core Technical Competency:

• Architect, Design, Implement, and Troubleshoot Networks for different needs in the financial industry.
• A solid background designing, managing, and troubleshooting diverse multi-protocol, switched and routed enterprise networks.
• Expert level knowledge of Firewall technology - including Architecture, design, implementation, operations, and troubleshooting.
• The candidate must be very comfortable configuring firewall rules and policies for both client connectivity and other security requirements of the network.
• Ability to analyze firewall logs and policies to troubleshoot client connections, and other network related security issues on the network.
• Ability to be able to troubleshoot network connectivity issues with both external and internal clients.
• The candidate would Jointly work with the Security Architecture Manager to perform weekly pre and post implementation review of security operational activities.
• Review active firewall policies and proposed changes for insecure rule sets and coordinate with the customer to ensure rules will support intended objectives
• Work with the Security Architecture Manager and the Network Manager to track the progress of assigned projects and tasks to ensure SLA compliance.
• Ability to handle complex network engineering assignments with little supervision.
• Analyze and resolve network issues or as determined by monitoring tools and systems.
• Respond to Trouble Tickets and perform scheduled activities related to network security.
• The candidate must be good at documentation in general. Competent with working with network diagrams using Microsoft Visio.
• Expert level knowledge and experience with BGP and other routing protocols to be able to design and implement various connectivity solutions to clients, vendors, and the management of the Trading network environment.
• Strong ability to use packet tracing technologies to troubleshoot network issues.
• Strong knowledge of TCP, UDP, and higher layer protocols in order to understand application performance and troubleshooting application issues on the network.
• Create and maintain network device configurations and relevant databases.

Specific Technology Expertise:

• Strong and extensive knowledge of complex protocols and technologies:

Routing Protocols:

• BGP, OSPF, EIGRP, Static Routing, route-redistribution, summarization, Policy-Routing. Firewall Architecture, design, configuration, operations and Troubleshooting.

Switching:

• Trunking, spanning- tree, dot1q, VLANs, VTP, Ethernet switching, multi-layer switching, vPC, MLAG.

Multicast:

• PIM, IGMP, MSDP

Network Services:

• TCP/IP, UDP, HSRP, DNS, DHCP, FTP, TFTP, NAT, TACACS, SSH, NTP, SYSLOG, TELNET,
• Network Management/Automation:
• SNMP, SYSLOG, IPSLA, NETFLOW, Network Telemetry, and Network automation tools.

Security:

• IPSEC, VPNS, Firewalls and Firewall Management and Analyzer systems, IDS systems,

Packet Analysis:

• PICO CNEs, Wireshark, sniffers, packet captures, and packet decodes, Market Data packet decodes, FIX packet decodes.

Specific Technology Expertise:

• Cisco and Arista switching and routing platforms.
• Fortinet Firewalls and FortiManager.
• Juniper, Cisco, and Checkpoint Firewall and security solutions.
• PICO/Corvil Packet capture devices and management platforms.
• SevOne SNMP Management system.
• HPNA Network Automation system.

Industry Certifications:

• Cisco, Arista, Juniper or Fortinet Certifications in Network Security will be a big plus

EA Licence No.:18S9405 / EA Reg. No.:R1330864