Network Security Engineer

Key Responsibilities

• Design, implement, and support enterprise network infrastructure across multiple sites.
• Manage and maintain Cisco routers and switches, including configuration, upgrades, and troubleshooting.
• Administer and optimize FortiGate firewalls, including policies, routing, VPNs, VDOMs, and security profiles.
• Manage FortiManager and FortiAnalyzer for centralized configuration, logging, reporting, and ADOM management.
• Perform advanced troubleshooting across IP networks, including packet‑level analysis and protocol diagnostics.
• Review regulatory cybersecurity requirements (e.g., ASD Essential Eight, ISO 27001, NIST,  or relevant financial‑sector regulator standards) and assess organizational compliance.
• Review and evaluate existing cybersecurity policies, procedures, and technical controls, identifying gaps and recommending improvements aligned with best practice and regulatory obligations. 
• Drive cybersecurity uplift initiatives across the business, including secure configuration baselines, network segmentation, access control improvements, logging enhancements, and monitoring maturity.
• Work with data center providers on cabinet layouts, power requirements, cross‑connects, and media types.
• Coordinate with telecommunications carriers for leased line provisioning, installation, testing, and handover.
• Integrate and support HP Synergy and Supermicro (SMC) SuperServer enclosures, including uplink design, fabric connectivity, and integration into core network infrastructure.
• Maintain accurate network documentation, diagrams, and asset records.
• Ensure network security best practices and compliance with organizational standards.  

What You Offer

• Minimum of 5 years’ hands‑on experience supporting enterprise networks, routing, switching, and firewall environments, ideally within quantitative funds, proprietary trading firms, exchanges, or financial market access vendors.
• Deep technical capability, strong troubleshooting skills, and the ability to work with carriers, datacentres, and internal stakeholders.
• Deep understanding of IP addressing, UDP, TCP/IP and traffic packet flow analysis, troubleshooting skills (TCPDump/Wireshark)
• Routing protocols: BGP, EIGRP, static routing, route redistribution, NAT
• Extensive experience with FortiGate firewalls, including VDOMs and ADOMs, Security policies and profiles,  IPSec VPN, and High availability (HA)
• Proficiency with FortiManager and FortiAnalyzer for centralised management and reporting.
• Demonstrated experience reviewing cybersecurity regulatory requirements and applying them to network architecture, operational processes, and security controls.
• Experience assessing and improving cybersecurity policies, procedures, and technical controls, with the ability to drive uplift initiatives across the organisation.
• Strong understanding of at least one operating system: Linux or Windows
• Experience with HP Synergy and Supermicro SuperServer enclosures, including: Fabric modules and uplink configuration,  Network integration into core switching
• Knowledge of data centre infrastructure: Rack layouts and cabinet standards,  Power (AC/DC, redundant feeds). Cross‑connects and fibre/copper media types
• Experience working with telecom carriers on leased line orders, provisioning, and troubleshooting.
• Strong documentation skills and ability to communicate technical concepts clearly.
• Cisco certifications (CCNA, CCNP, or equivalent experience) and Fortinet NSE certifications (NSE4, NSE5, NSE6) are nice to have
• Prior work in high‑frequency trading and financial services is nice to have
• Fluency in English. Mandarin and Cantonese fluency are nice to have

Eclipse Trading is an equal opportunity employer and we believe that diversity and inclusion are essential pillars of our success as a company. We are dedicated to embrace a culture reflecting a variety of perspectives, insights and backgrounds to drive innovation. We build talented and diverse teams to drive business results and encourage our people to develop to their full potential.

All information provided will be treated in strict confidence and used solely for recruitment purpose.

Due to the high number of responses that we receive, we are only able to respond to successful applicants.

Note: The use of AI tools during interviews or assessments is strictly prohibited unless explicitly authorized. We employ multiple methods to verify the authenticity of candidate responses. If it is determined that AI assistance was used at any stage of the hiring process without prior approval, we reserve the right to disqualify your application or rescind any job offer.