Senior Network Engineer (Hedge Fund)

Role Overview

We are seeking an experienced Senior Network Engineer to design, build, operate, and enhance enterprise network infrastructure within a complex and highly regulated environment. The successful candidate will be a hands-on technical expert with strong architecture and engineering capabilities, responsible for delivering secure, resilient, and scalable network solutions across on-premise and cloud environments.

This role requires someone who remains deeply technical, with proven experience in network architecture, troubleshooting, automation, and large-scale infrastructure transformation. Candidates whose recent experience is focused primarily on governance, strategy, or team management without hands-on engineering exposure will not be suitable.

Key Responsibilities

• Design, implement, and support enterprise network infrastructure, including LAN/WAN, data centre, cloud, and global connectivity environments.

• Own network architecture and technical design decisions, ensuring solutions are secure, scalable, highly available, and aligned with business requirements.

• Configure, troubleshoot, and optimise routing and switching technologies across enterprise-grade platforms.

• Manage next-generation firewall solutions, including security policies, NAT, IPS, remote access, and firewall governance.

• Design and support Azure networking solutions, including virtual networks, hub-and-spoke architectures, ExpressRoute, VPN Gateway, Azure Firewall, and network security controls.

• Deliver network transformation projects, including multi-site deployments, migrations, upgrades, and major infrastructure cutovers.

• Perform advanced troubleshooting using packet capture, traffic analysis, and structured fault isolation across the full network stack.

• Develop and improve network automation capabilities using tools such as Python, Ansible, and Terraform.

• Monitor network performance, analyse traffic flows, and improve reliability through proactive capacity and performance management.

• Participate in change activities, after-hours implementations, and escalation support when required.

Requirements

• Minimum 8 years of hands-on network engineering experience, with at least 3 years owning network architecture and design responsibilities.

• Experience working within financial services or other highly regulated environments is highly advantageous.

• Must be actively involved in network engineering activities today, including configuration, troubleshooting, optimisation, and infrastructure upgrades.

• Strong expertise in enterprise routing and switching technologies, including BGP, OSPF, VLANs, spanning tree, QoS, and multicast.

• Proven experience designing and operating next-generation firewall platforms, including security policies, ruleset management, NAT, IPS, and secure remote access solutions.

• Strong knowledge of Azure networking services, including:

  - Virtual Networks (VNet)

  - Hub-and-spoke network architecture

  - ExpressRoute

  - VPN Gateway

  - Azure Firewall

  - Network Security Groups (NSG) and Application Security Groups (ASG)

• Experience with wide area network technologies, including SD-WAN, MPLS, internet edge design, carrier management, and international connectivity solutions.

• Strong understanding of core network services, including:

  - DNS

  - DHCP

  - IP Address Management (IPAM)

  - DNS security solutions

  - Enterprise wireless network design and RF planning

• Excellent troubleshooting skills with hands-on experience in:

  - Packet capture and network traffic analysis

  - Latency and jitter investigation

  - Layer 1-7 fault isolation

• Experience implementing network automation and infrastructure-as-code using technologies such as Python, Ansible, or Terraform.

• Strong experience with enterprise network monitoring, logging, and flow analysis platforms.

• Proven track record delivering end-to-end network implementations, including large-scale builds, migrations, and cutovers across multiple locations.

• Willingness to support planned after-hours changes and participate in an escalation/on-call rotation.

• Strong communication skills with the ability to explain technical solutions, risks, and business impact to both technical and non-technical stakeholders.

Preferred Qualifications

• CCNP Enterprise, CCIE, or equivalent senior-level networking certification.

• Microsoft Certified: Azure Network Engineer Associate (AZ-700).

• Vendor-specific firewall certifications (e.g., Palo Alto, Fortinet, Check Point) are advantageous.

Interested applicants, please contact Angelica at [Confidential Information] for a confidential discussion.

EA License no.: 16S8066 I Reg no.: R1110125

Only shortlisted applicants will be notified.