Senior Network Engineer (Hedge Fund)

Role Overview We are seeking an experienced Senior Network Engineer to design, build, operate, and enhance enterprise network infrastructure within a complex and highly regulated environment. The successful candidate will be a hands-on technical expert with strong architecture and engineering capabilities, responsible for delivering secure, resilient, and scalable network solutions across on-premise and cloud environments. This role requires someone who remains deeply technical, with proven experience in network architecture, troubleshooting, automation, and large-scale infrastructure transformation. Candidates whose recent experience is focused primarily on governance, strategy, or team management without hands-on engineering exposure will not be suitable. Key Responsibilities • Design, implement, and support enterprise network infrastructure, including LAN/WAN, data centre, cloud, and global connectivity environments. • Own network architecture and technical design decisions, ensuring solutions are secure, scalable, highly available, and aligned with business requirements. • Configure, troubleshoot, and optimise routing and switching technologies across enterprise-grade platforms. • Manage next-generation firewall solutions, including security policies, NAT, IPS, remote access, and firewall governance. • Design and support Azure networking solutions, including virtual networks, hub-and-spoke architectures, ExpressRoute, VPN Gateway, Azure Firewall, and network security controls. • Deliver network transformation projects, including multi-site deployments, migrations, upgrades, and major infrastructure cutovers. • Perform advanced troubleshooting using packet capture, traffic analysis, and structured fault isolation across the full network stack. • Develop and improve network automation capabilities using tools such as Python, Ansible, and Terraform. • Monitor network performance, analyse traffic flows, and improve reliability through proactive capacity and performance management. • Participate in change activities, after-hours implementations, and escalation support when required. Requirements • Minimum 8 years of hands-on network engineering experience , with at least 3 years owning network architecture and design responsibilities. • Experience working within financial services or other highly regulated environments is highly advantageous. • Must be actively involved in network engineering activities today, including configuration, troubleshooting, optimisation, and infrastructure upgrades. • Strong expertise in enterprise routing and switching technologies, including BGP, OSPF, VLANs, spanning tree, QoS, and multicast. • Proven experience designing and operating next-generation firewall platforms , including security policies, ruleset management, NAT, IPS, and secure remote access solutions. • Strong knowledge of Azure networking services , including: - Virtual Networks (VNet) - Hub-and-spoke network architecture - ExpressRoute - VPN Gateway - Azure Firewall - Network Security Groups (NSG) and Application Security Groups (ASG) • Experience with wide area network technologies, including SD-WAN, MPLS, internet edge design, carrier management, and international connectivity solutions. • Strong understanding of core network services, including: - DNS - DHCP - IP Address Management (IPAM) - DNS security solutions - Enterprise wireless network design and RF planning • Excellent troubleshooting skills with hands-on experience in: - Packet capture and network traffic analysis - Latency and jitter investigation - Layer 1–7 fault isolation • Experience implementing network automation and infrastructure-as-code using technologies such as Python, Ansible, or Terraform . • Strong experience with enterprise network monitoring, logging, and flow analysis platforms. • Proven track record delivering end-to-end network implementations, including large-scale builds, migrations, and cutovers across multiple locations. • Willingness to support planned after-hours changes and participate in an escalation/on-call rotation. • Strong communication skills with the ability to explain technical solutions, risks, and business impact to both technical and non-technical stakeholders. Preferred Qualifications • CCNP Enterprise, CCIE, or equivalent senior-level networking certification. • Microsoft Certified: Azure Network Engineer Associate (AZ-700). • Vendor-specific firewall certifications (e.g., Palo Alto, Fortinet, Check Point) are advantageous. Interested applicants, please contact Angelica at AngelicaD@charterhouse.com.sg for a confidential discussion. EA License no.: 16S8066 I Reg no.: R1110125 Only shortlisted applicants will be notified.