Network & Security Engineer (Global Investment firm)

My client , a global investment firm , is looking for a network & security engineer to join their highly capable IT team here in Hong Kong.

• Lead APAC network operations, ensuring stability, performance, and security across offices and regional infrastructure.
• Manage and maintain enterprise‑grade Cisco networking, including routing, switching, wireless, WAN/SD‑WAN, VPN, and firewall platforms.
• Oversee network segmentation, traffic engineering, capacity planning, and incident troubleshooting.
• Operate and support regional security tools including Rapid7 (InsightVM/InsightIDR) and Microsoft Defender (Defender for Endpoint/Servers).
• Drive vulnerability management and remediation cycles for network and infrastructure components.
• Support incident response efforts-network forensics, containment actions, and coordination with global security teams.
• Contribute to network and security improvement projects, including upgrades, cloud connectivity, and regional rollout of global standards.
• Ensure compliance with APAC regulations (SFC, HKMA, MAS) and assist with audits and security controls evidence.
• Maintain clear documentation, network diagrams, runbooks, and operational procedures.
• Collaborate with global engineering teams in the US and UK on design, troubleshooting, and follow‑the‑sun operations.

• 7-10+ years of hands-on experience in enterprise networking, with strong expertise in Cisco routing, switching (BGP, OSPF, STP, QoS), wireless, VPN, and firewall technologies.
• Deep understanding of network design, high availability, segmentation, and performance tuning.
• Experience in network troubleshooting using advanced tools (packet analysis, flow monitoring, diagnostics).
• Practical exposure to security platforms: Rapid7, Microsoft Defender, EDR, vulnerability management, and incident response workflows.
• Experience in regulated or highly controlled environments, ideally financial services.
• Familiarity with ISO 27001, NIST, CIS Controls, and APAC regulatory standards.
• Comfort working with hybrid environments and basic cloud networking (Azure preferred).
• Scripting/automation skills (PowerShell, Python, or Ansible) beneficial but not mandatory.
• Strong communication skills across regions and ability to operate as an independent contributor.
• Relevant certifications preferred: CCNP/CCIE, CISSP, GIAC, Azure/AWS networking or security certifications.