Senior Network Security Engineer

Salary: $7,000 – $9,000 per month

We are seeking a Senior Network Security Engineer to design, implement, secure, and maintain network infrastructure supporting financial trading operations. The role requires extensive experience with firewall technologies, routing, switching, multicast, and packet analysis across market data distribution, low-latency, ultra-low-latency, and high-frequency trading environments.

Key Responsibilities:

• Architect, design, implement, and troubleshoot secure network solutions supporting trading platforms, market data distribution, and client and vendor connectivity.

• Manage complex, multi-protocol switched and routed networks, ensuring availability, performance, resilience, and security.

• Design, configure, maintain, and troubleshoot firewalls, VPNs, and associated security management platforms.

• Configure and review firewall rules and policies to support approved connectivity requirements and security objectives.

• Analyse firewall logs, network traffic, and packet captures to resolve internal and external connectivity issues.

• Review existing firewall policies and proposed changes, identify insecure rule sets, and coordinate remediation with relevant stakeholders.

• Work with the Security Architecture Manager to conduct weekly pre- and post-implementation reviews of security operational activities.

• Collaborate with the Security Architecture Manager and Network Manager to track projects, operational tasks, and service-level commitments.

• Design and implement BGP routing and other connectivity solutions for clients, vendors, and trading infrastructure.

• Investigate network and application performance issues using monitoring platforms, packet tracing, and protocol analysis.

• Respond to incidents and service requests, manage trouble tickets, and perform scheduled network security activities.

• Maintain network device configurations, configuration databases, operational procedures, and network diagrams using Microsoft Visio.

• Deliver complex network engineering assignments independently while collaborating effectively with technical teams and business stakeholders.

Experience and Qualifications:

• Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related discipline.

• Minimum of 7 years of relevant network engineering and security experience within the financial services industry, preferably in a trading environment.

• Experience in the architecture, design, implementation, and maintenance of trading network infrastructure, including market data distribution and low-latency, ultra-low-latency, and high-frequency trading networks.

• Extensive experience engineering and operating network security systems within financial trading environments.

• Expert knowledge of firewall architecture, policy configuration, implementation, operations, and troubleshooting.

• Strong experience designing, managing, and troubleshooting enterprise routing, switching, and multicast networks.

• Strong understanding of TCP, UDP, and application-layer protocols, with the ability to diagnose application performance and connectivity issues.

• Proficiency in technical documentation and Microsoft Visio.

Technical Requirements:

Routing and Switching:

• BGP, OSPF, EIGRP, static routing, route redistribution, summarisation, and policy-based routing.

• Ethernet and multilayer switching, VLANs, IEEE 802.1Q trunking, Spanning Tree Protocol, VTP, vPC, and MLAG.

• Multicast technologies, including PIM, IGMP, and MSDP.

Network Services and Security:

• TCP/IP, UDP, HSRP, DNS, DHCP, FTP, TFTP, NAT, TACACS, SSH, NTP, Syslog, and Telnet.

• IPsec, VPNs, firewalls, firewall management and analysis platforms, and intrusion detection systems.

• Firewall policy analysis, log investigation, and secure connectivity troubleshooting.

Monitoring, Automation, and Packet Analysis:

• SNMP, Syslog, IP SLA, NetFlow, network telemetry, and network automation tools.

• Wireshark, packet capture, packet decoding, and traffic analysis.

• Market data and Financial Information eXchange (FIX) protocol packet analysis.

• PICO CNE and PICO/Corvil packet capture devices and management platforms.

Technology Platforms:

• Cisco and Arista routing and switching platforms.

• Fortinet firewalls and FortiManager.

• Juniper, Cisco, and Check Point firewall and security solutions.

• SevOne SNMP monitoring platform.

• HP Network Automation (HPNA).

Professional Competencies:

• Highly motivated and comfortable working in a fast-paced, changing environment.

• Strong communication, analytical, and troubleshooting skills.

• Customer-focused, with the ability to translate connectivity requirements into secure technical solutions.

• Able to work independently with minimal supervision and collaborate effectively across teams.

• Strong organisational skills, with attention to documentation, change reviews, and service delivery.

Preferred Certifications:

• Relevant Cisco, Arista, Juniper, or Fortinet networking and network security certifications would be an advantage.

EA Licence No.:18S9405 / EA Reg. No.:R1330864

Percept Solutions is expanding and actively seeking talented individuals. We encourage applicants to follow Percept Solutions on LinkedIn at https://www.linkedin.com/company/percept-solutions/ to stay informed about new opportunities and events.