Network Architect
Information Technology Services Centre
(Post Ref.: 19/257/SW)

The appointee will be responsible for (a) management, deployment, hands-on technical support and operation of the University's IT infrastructure related to information security; (b) supporting the technical development, administration and operation of various information security provisions of the University, including but not limited to, network access control (NAC), advanced threat protection (ATP), two-factor authentication (2FA), mobile device management (MDM), IPS/IDS, firewall, secure web gateway, data loss prevention (DLP), network segmentation, physical security of data centre, etc.; (c) reviewing and enforcing operating system security hardening checklist for network equipment, Linux and Windows servers, and best practices for the University; (d) assisting the review and implementation of information security policies, procedures and guidelines; (e) performing regular vulnerability scanning for all network servers and applications of the University; (f) assisting in the network segmentation to segregate the campus network into different manageable subnets to mitigate the potential cyber security risks; (g) exploring and implementing measures to detect and mitigate cybersecurity risks; and (h) developing and providing training courses to raise the security awareness of the University community. The appointee will also be required to work shifts or irregular hours.

Requirements
Candidates should have (i) a Bachelor's Degree or above in Computer Science, Information Technology, Information Engineering or equivalent; (ii) at least 6 years of working experience in IT and with at least three years of working experience in information security architecture, operating system security, wireless/wired network security and data centre security; (iii) solid hands-on experience in NAC, ATP, 2FA, MDM, DLP and network segmentation; (iv) preferably good knowledge in Windows and Linux servers, routers and switches, common network and authentication protocols such as SNMP, TCP/IP, SAML, Kerberos; (v) excellent documentation and project management skills; (vi) proficiency in written and spoken English; and (vii) good customer service skills and service attitude. Candidates with less/more experience will also be considered for appointment at a relevant rank.

Salary and Fringe Benefits
The rank and commencing salary will be commensurate with qualifications and experience. Fringe benefits, where applicable, include annual leave, medical and dental benefits, mandatory provident fund and gratuity.