Network Architect and Engineer

About the role

Dymon Asia Capital, a Singapore-headquartered multi-strategy hedge fund, is hiring a Network Architect and Engineer within its IT Infrastructure function (Network, Windows, Linux and Cloud pillars). The role owns both the network architecture and the hands-on implementation: writing configurations, staging and commissioning equipment, running cutovers, taking packet captures and handling out-of-hours break-fix. It reports to the Head of Engineering and IT.

Key responsibilities

• Own end-to-end network architecture and engineering standards across all offices, covering campus, data center, wide area and remote access.
• Build and configure routing, switching, wireless and firewall platforms, and execute production changes personally, including out-of-hours maintenance windows and cutovers.
• Troubleshoot complex faults using packet capture, flow analysis and device-level diagnostics, acting as the senior hands-on responder.
• Own the network segmentation model and firewall ruleset governance, separating trading, research, corporate, guest and management traffic.
• Design and build the Azure network fabric with the Cloud Solutions Architect, covering hub-and-spoke topology, peering, routing, security groups and hybrid connectivity over ExpressRoute and VPN.
• Lead network delivery on new office builds, relocations and expansion, from carrier procurement to cutover.
• Deliver market data, broker and counterparty connectivity, including cross-connects and extranet links.
• Own capacity planning, latency management, resilience and failover testing, firmware and patch currency, and network monitoring.
• Build automation and configuration standards using Python, Ansible or Terraform, and maintain architecture documentation aligned with MAS Technology Risk Management guidelines and NIST CSF 2.0.

Required profile

• 8+ years of hands-on network engineering, including at least 3 years owning architecture and design; design-and-governance-only experience is not a fit.
• Currently hands-on, actively configuring, troubleshooting and upgrading network infrastructure.
• Experience in a regulated financial services environment is advantageous.
• Available to execute out-of-hours change windows and join an escalation rota.
• Preferred: CCNP Enterprise or CCIE, or equivalent senior certification; AZ-700 and vendor firewall certifications are advantageous.

Required skills

• Expert routing and switching: BGP, OSPF, VLANs, spanning tree, QoS, multicast.
• Next-gen firewalls: policy and ruleset governance, NAT, IPS, secure remote access.
• Azure networking: virtual networks, hub-and-spoke, ExpressRoute, VPN Gateway, Azure Firewall, NSGs.
• Wide area and edge networking: SD-WAN, MPLS, carrier management, circuit diversity.
• Core services: DNS, DHCP, IPAM, enterprise wireless and RF planning.
• Deep troubleshooting and network automation with Python, Ansible or Terraform.