Sr. Network Engineer-Temp (China Merchants Bank)

A. This is a hands-on technical role requiring deep experience in designing, implementing, troubleshooting, and securing enterprise network infrastructure. The candidate must be capable of independently handling complex network architecture, performing advanced security hardening, and improving network monitoring and security systems.

B. Serve as the technical lead in architecting and improving enterprise network infrastructure across NY production, NJ DR site, and Head Office, ensuring architectures follow security-by-design principles and incorporate high availability, redundancy, and fault tolerance for operational resiliency, while fully documenting the entire network infrastructure in detailed network diagrams.

C. Lead the improvement, tuning, and ongoing optimization of key network platforms including SolarWinds Orion (NPM), Cisco ISE NAC, Cisco Umbrella, Cisco ASA/IDS/IPS, and AnyConnect VPN to ensure visibility, reliability, security, and alignment with best practices.

D. Integrate network infrastructure with authentication systems, including RADIUS/LDAP/Active Directory, Cisco ISE NAC, and AnyConnect VPN.

E. Apply security hardening standards to firewalls, routers, and switches, and provide technical guidance on secure network design and configuration baselines.

F. Analyze and optimize firewall ACLs, removing overly-permissive, unused, duplicate, and shadowed rules to improve maintainability and strengthen security posture.

G. Perform advanced multi-layer network troubleshooting, isolating and resolving issues across L2-L7 to ensure reliable and secure network operations.

H. Execute firmware upgrades, remediation patches, and configuration fixes with appropriate planning, testing, and rollback procedures under formal change control.

I. Address and remediate network-related audit findings, ensuring timely, accurate, and fully compliant resolution aligned with banking regulatory requirements.

J. Collaborate with the existing experienced Network Administrator to support daily network operations, enhancements, troubleshooting, and ongoing operational needs.

K. Provide support for general IT operational activities, including procurement coordination and participation in IT projects as assigned

A. Bachelor's degree in Information Technology or a related field.

B. 8+ years of experience in enterprise network engineering with hands-on responsibilities in network infrastructure design, evaluation, optimization, and support; CCNP Enterprise or CCNP Security required; CCIE is a strong plus but not required.

C. Candidates with solid hands-on experience using Cisco ASA firewalls, Cisco IDS/IPS technologies, Cisco ISE NAC, Cisco Umbrella, Cisco AnyConnect VPN, and SolarWinds Orion (NPM) will be strongly preferred.

D. Familiarity with Microsoft and Windows-based environments, including Active Directory, Windows Server, and core Microsoft infrastructure services.

E. Proven ability to work effectively in a team environment, demonstrating strong time-management, prioritization, multitasking, flexibility, adaptability, problem-solving skills, and work independently with minimal supervision.

F. Keen attention to detail, professional demeanor, and the ability to exercise sound judgment.

G. Ability to perform occasional off-hours and weekend work for maintenance windows and to provide emergency on-call support as needed.

H. Mandarin Chinese - Fluent in verbal communication.