IT Infrastructure & Network Security Engineer

The IT Infrastructure & Network Security Engineer is responsible for the design, implementation and operational integrity of the Company’s network, datacenter and security infrastructure across all regional offices. This is a hands-on role leading infrastructure project delivery for new regional deployments while sustaining the availability, performance and security posture of the existing production environment supporting trading operations.

Key Responsibilities:

Infrastructure Project Implementation

• Lead the technical design, procurement specification, deployment and commissioning of the Singapore office infrastructure, including LAN / WLAN, WAN and site-to-site connectivity, voice services, server room build, structured cabling coordination and perimeter security.
• Own infrastructure implementations across the full project lifecycle: requirements gathering, High-Level and Low-Level Design (HLD / LLD), Bill of Materials, implementation planning, migration and cutover, User Acceptance Testing and post-implementation review.
• Produce and maintain complete design documentation — network topology diagrams, IP addressing schemes, VLAN and routing plans, firewall rule bases, configuration standards and as-built records.
• Define and execute cutover and rollback plans for production-impacting changes, including out-of-hours and weekend migration windows.
• Coordinate with vendors, systems integrators, telecom carriers, landlords and facilities teams on delivery timelines, site readiness and acceptance criteria.
• Support additional regional IT projects including datacenter refresh, disaster recovery site establishment, connectivity expansion and technology lifecycle replacement programmes.
• Provide accurate effort estimates, technical risk assessments and progress reporting to IT management and project stakeholders.

Infrastructure Operations & Support

• Administer and maintain the production infrastructure estate: routing and switching, wireless, voice, virtualisation, storage, backup and network security platforms.
• Deliver Level 2 / Level 3 operational support for infrastructure incidents, acting as the escalation point for complex network, connectivity, virtualisation and storage faults.
• Perform proactive monitoring, capacity management and performance optimisation of critical systems; identify saturation points and latency issues before they impact trading and business operations.
• Conduct root cause analysis for major incidents and produce formal RCA documentation with corrective and preventive actions.
• Manage patching, firmware upgrade and lifecycle cycles across network, firewall, hypervisor and storage platforms in line with vendor support matrices and change control.
• Own backup and restore operations for infrastructure workloads, including periodic restore verification and disaster recovery test participation.
• Maintain accurate asset inventory, configuration records, licence and support-contract registers, and up-to-date operational runbooks.
• Participate in the on-call rotation for critical infrastructure and out-of-hours change execution.

Network & Security Architecture

• Design and implement secure network and security architectures aligned to segmentation, least-privilege and defence-in-depth principles.
• Administer the enterprise firewall estate: policy design and rule-base hygiene, NAT, VPN (IPsec site-to-site and SSL remote access), SD-WAN, application control, IPS / IDS, web filtering and SSL inspection.
• Implement and maintain network access control, identity integration (FSSO / RADIUS / 802.1X) and secure remote access services.
• Support security operations through integration with EDR, NDR and SIEM platforms; assist with threat hunting, IOC enforcement and incident containment at the network layer.
• Support vulnerability management, penetration test remediation and internal / external audit evidence collection.
• Ensure infrastructure controls align with ISO/IEC 27001:2022, DIFC Data Protection Law, UAE PDPL and applicable financial-sector regulatory expectations.

Governance, Documentation & Collaboration

• Operate within ITIL-aligned Change, Incident and Problem Management processes, preparing and presenting change records for approval.
• Author and maintain technical standards, configuration baselines, standard operating procedures and knowledge base articles.
• Provide technical mentoring and structured knowledge transfer to IT support staff.
• Liaise with business stakeholders, group IT, external trading partners and managed service providers on infrastructure dependencies.

Required:

• Minimum 7 to 10 years of progressive enterprise IT infrastructure experience, including at least three years at a senior or lead engineering level.
• Proven track record of independently delivering at least two greenfield or major office / datacenter infrastructure deployments end to end.
• Demonstrable experience supporting a production environment with 24×7 or extended-hours business criticality.
• Experience operating across multiple geographic sites and coordinating with remote stakeholders and vendors.