Job Description

• Assist the management of all system related network infrastructure.
• Assist to develop standards for supporting the infrastructure with mature network architecture design.
• Assist to enhance availability by evaluating, proposing and implementing relevant load balancing, high availability, disaster recovery solution.
• Manage vendor for network, firewall, wireless network and load balancer administration outsourcing in particular related to service level and performance management.
• Assist to the preparation, implementation and support of corporate infrastructure and systems.
• Drive to strengthen technology platforms supporting VPN, wireless network platform etc.
• Assist to manage and plan IT infrastructure based on growth projection & SLA results.
• Assist to automate and maintain IT security standard and baseline pertaining to network, firewall, VPN, load balancer, clean-pipe solution and provides on-going support to related audit & risk assessment.
• Assist to the overseas branches with regards to network matters.
• Follow bank policy and follow the corporate workflow to implement the change request to the network.
• Supporting DNS registration and SSL certification management.
• Any weekend support activities, or overtime support activities e.g. drills required to support network infrastructure, corresponding compensation day off would be given.
• Document configuration and operation procedures / guidelines

• Good knowledge in Cisco, H3C, Huawei network. F5 load balancer, Pulse Secure VPN solution, Aruba, Sangfor, Forcepoint proxy.
• Preferable knowledge on routing protocol (EIGRP, OSPF, BGP), layer 2 protocol (multi-instance spanning tree, etherchannel, VPC), network control by firewall policy(layer 3 to layer 4 control), Web Application Firewall (WAF) and load balance mechanism.
• Hands-on experience in data network upgrade project and anti DDoS solution
• Familiar with software defined network will have advantage.
• Familiar to network management tools (Eg., PRTG, Solarwinds, ELK).
• Knowledge on Domain Name System (DNS).
• Knowledge in Private and Public Cloud Platform, Hands-on experience will have advantage.
• Analytical Thinking & Problem Solving: analyze problems, identify root causes; probe for further information.
• Able to develop detailed action plans; project into the future and plan activities in advance; coordinate own/others’ time, resources, workload.
• Creativity & Innovation: Analyze issues from different perspectives, recommend new, creative ways to solve problems even on non-office.
• Join ECO role on roster list.
• Able to be assigned with complex tasks, give detailed instructions, help teammates coordinate work.
• Communication: Express complex ideas succinctly and persuasively.
• Recognize potential sources of conflicts, work with various parties to calmly analyze the issues, and work through together to compromise/resolution.
• Good command of spoken and written English and Chinese (including Mandarin and Cantonese).
• Degree holder in Information Technology or related discipline.
• More than 5 years’ experience in network security, network infrastructure.
• Holder of H3CSE/CCNP or H3CIE/CCIE, CISA/CISM/CISSP certification is preferred.
• Cybersecurity recognized certificate is preferred.