HKEX Group
Senior EngineerApplylocations: UK-Londontime type: Full timeposted on: Posted Todayjob requisition id: R004177Senior Engineer Shift Pattern: Standard 40 Hour Week (United Kingdom) Scheduled Weekly Hours: 40 Corporate Grade: D - Assistant Vice President Reporting Line: (UK Division) Information Technology Location: UK-London Worker Type: Permanent Purpose of Role : This role is a critical part of the new technology team supporting the SPM team, providing key engineering skills, deputising for the Head of SPM technology and working with the wider technology teams to integrate SPMs new and existing services effectively. The role will be working closely alongside the SPM business team and technology vendors to engineer solutions supporting their strategic roadmap.This is a high-impact role for a candidate who is passionate about engineering excellence, working directly with business teams to create solutions and enabling tangible value through technology. This role is a full-stack engineering role (covering frontend, backend, data, infrastructure) and collaborates on solution design, implementation, deployment, testing and support. Responsibilities: Design, build, and improve modern application services that support a strategic business platform, with a focus on quality, maintainability, and performance. Develop backend services and APIs that support the evolution of core business capabilities from established platforms into modern services. Contribute to modern internal and customer-facing user experiences, helping deliver intuitive, secure, and browser-based solutions. Partner with product teams, operations, and business stakeholders to translate requirements into robust engineering solutions. Apply strong engineering practices including automated testing, peer review, continuous integration and deployment, and high-quality technical documentation. Help ensure services are observable, supportable, and reliable in production through effective logging, monitoring, and operational diagnostics. Work closely with platform and vendor teams to align engineering delivery with enterprise standards and runtime patterns. Contribute to the continuous improvement of engineering practices, platform capability, and team effectiveness. Academic and Professional Qualifications Required: Bachelor's degree in Computer Science, Software Engineering, or a related discipline, or equivalent practical experience. Strong software engineering foundations with demonstrable experience delivering production-grade applications. Strong Java application engineering experience, ideally with modern enterprise Java frameworks. .NET engineering background is preferable, particularly where it supports application modernisation and interoperability. Experience in financial services or another regulated environment. Required Knowledge and Level of Experience: Significant hands-on experience in senior software or application engineering roles, with a strong track record of delivering production systems. Strong experience building backend applications and APIs, ideally in Java Practical experience across service-based architecture, API design, integration patterns, and modern web application delivery. Experience contributing to modernisation or platform evolution initiatives is strongly desirable. Strong engineering discipline across testing, CI/CD, version control, release practices, and production support. Good understanding of monitoring, observability, and building reliable services for business-critical environments. Stakeholder Engagement: Proven experience working with C-level stakeholders, translating complex business requirements into effective technology solutions, and influencing technology strategy. Skills set and Core Competencies Required for Role: Programming: Strong proficiency in Java, .Net and Python. DevOps: Skilled in building, deploying, and maintaining containerised applications using Docker and Kubernetes using infrastructure as code (e.g., Terraform, Helm). Linux: Deep understanding of Linux systems administration and scripting. Testing: Commitment to automated testing and quality assurance, with experience integrating these practices into CI/CD pipelines. Monitoring & Observability: Familiarity with monitoring, logging, and alerting tools (e.g., Prometheus, Grafana, Splunk) is advantageous. Analytical & Problem-Solving: Excellent analytical and problem-solving skills, with a focus on delivering measurable business impact and system reliability. Agile & Leadership: Ability to lead and work effectively in agile, cross-functional teams, and drive collaborative solution design and delivery. Communication: Strong communication skills, able to engage and translate between technical and non-technical stakeholders, and influence at all levels. The LME is committed to creating a diverse environment and is proud to be an equal opportunity employer. In recruiting for our teams, we welcome the unique contributions that you can bring in terms of education, ethnicity, race, sex, gender identity, expression and reassignment, nation of origin, age, languages spoken, colour, religion, disability, sexual orientation and beliefs. In doing so, we want every LME employee to feel our commitment to showing respect for all and encouraging open collaboration and communication.
Senior EngineerApplylocations: UK-Londontime type: Full timeposted on: Posted Todayjob requisition id: R004177Senior Engineer Shift Pattern: Standard 40 Hour Week (United Kingdom) Scheduled Weekly Hours: 40 Corporate Grade: D - Assistant Vice President Reporting Line: (UK Division) Information Technology Location: UK-London Worker Type: Permanent Purpose of Role : This role is a critical part of the new technology team supporting the SPM team, providing key engineering skills, deputising for the Head of SPM technology and working with the wider technology teams to integrate SPMs new and existing services effectively. The role will be working closely alongside the SPM business team and technology vendors to engineer solutions supporting their strategic roadmap.This is a high-impact role for a candidate who is passionate about engineering excellence, working directly with business teams to create solutions and enabling tangible value through technology. This role is a full-stack engineering role (covering frontend, backend, data, infrastructure) and collaborates on solution design, implementation, deployment, testing and support. Responsibilities: Design, build, and improve modern application services that support a strategic business platform, with a focus on quality, maintainability, and performance. Develop backend services and APIs that support the evolution of core business capabilities from established platforms into modern services. Contribute to modern internal and customer-facing user experiences, helping deliver intuitive, secure, and browser-based solutions. Partner with product teams, operations, and business stakeholders to translate requirements into robust engineering solutions. Apply strong engineering practices including automated testing, peer review, continuous integration and deployment, and high-quality technical documentation. Help ensure services are observable, supportable, and reliable in production through effective logging, monitoring, and operational diagnostics. Work closely with platform and vendor teams to align engineering delivery with enterprise standards and runtime patterns. Contribute to the continuous improvement of engineering practices, platform capability, and team effectiveness. Academic and Professional Qualifications Required: Bachelor's degree in Computer Science, Software Engineering, or a related discipline, or equivalent practical experience. Strong software engineering foundations with demonstrable experience delivering production-grade applications. Strong Java application engineering experience, ideally with modern enterprise Java frameworks. .NET engineering background is preferable, particularly where it supports application modernisation and interoperability. Experience in financial services or another regulated environment. Required Knowledge and Level of Experience: Significant hands-on experience in senior software or application engineering roles, with a strong track record of delivering production systems. Strong experience building backend applications and APIs, ideally in Java Practical experience across service-based architecture, API design, integration patterns, and modern web application delivery. Experience contributing to modernisation or platform evolution initiatives is strongly desirable. Strong engineering discipline across testing, CI/CD, version control, release practices, and production support. Good understanding of monitoring, observability, and building reliable services for business-critical environments. Stakeholder Engagement: Proven experience working with C-level stakeholders, translating complex business requirements into effective technology solutions, and influencing technology strategy. Skills set and Core Competencies Required for Role: Programming: Strong proficiency in Java, .Net and Python. DevOps: Skilled in building, deploying, and maintaining containerised applications using Docker and Kubernetes using infrastructure as code (e.g., Terraform, Helm). Linux: Deep understanding of Linux systems administration and scripting. Testing: Commitment to automated testing and quality assurance, with experience integrating these practices into CI/CD pipelines. Monitoring & Observability: Familiarity with monitoring, logging, and alerting tools (e.g., Prometheus, Grafana, Splunk) is advantageous. Analytical & Problem-Solving: Excellent analytical and problem-solving skills, with a focus on delivering measurable business impact and system reliability. Agile & Leadership: Ability to lead and work effectively in agile, cross-functional teams, and drive collaborative solution design and delivery. Communication: Strong communication skills, able to engage and translate between technical and non-technical stakeholders, and influence at all levels. The LME is committed to creating a diverse environment and is proud to be an equal opportunity employer. In recruiting for our teams, we welcome the unique contributions that you can bring in terms of education, ethnicity, race, sex, gender identity, expression and reassignment, nation of origin, age, languages spoken, colour, religion, disability, sexual orientation and beliefs. In doing so, we want every LME employee to feel our commitment to showing respect for all and encouraging open collaboration and communication.
HKEX Group
Senior Network Security Specialist Shift Pattern: Standard 40 Hour Week (United Kingdom) Scheduled Weekly Hours: 40 Corporate Grade: D - Assistant Vice President Reporting Line: (UK Division) Information Technology Location: UK-London Worker Type: Permanent About the London Metal Exchange The London Metal Exchange (LME) is the world centre for industrial metals trading. Most of the world's global non-ferrous futures business is conducted on the LME's three trading platforms totalling $21 trillion, 191 million lots and 4 billion tonnes notional with a market open interest high of 2.1 million lots in 2025.The metals community uses the LME, an HKEX Group company, as a venue to transfer or take on price risk, as a physical market of last resort and as the provider of transparent global reference prices. Overall Purpose of Role As a Senior Network Security Specialist, you will design, implement and govern the network security controls that protect our modern, high performance enterprise network. You will take a hands on lead role in shaping the network security roadmap, defining policies and standards and driving the adoption of Zero Trust and micro segmentation across the organisation.Working within the Connectivity Engineering Team, you will collaborate closely with Information Security, Platform, Infrastructure and Application teams to ensure security is embedded by design. Your expertise will be applied across on premises, cloud, and containerised environments, ensuring consistent and robust protection across all connectivity layers. You will also support the organisation's LAN, WAN, Campus and Data Centre network services, ensuring reliability, resilience, and high performance. You will maintain and develop core network standards across related systems, coordinate network activities across multiple technology projects, contribute deep technical expertise and produce both high and low level designs. As a subject matter expert, you will also provide 3rd line escalation support when required.This role reports directly to the Network Manager and may include participation in an on call rota, as well as occasional evening and weekend work. TOIL or overtime compensation will be available. Responsibilities: Design, implement, and maintain enterprise network security controls including firewalls, proxies and secure access services aligned to business and regulatory requirements. Act as the technical authority for Fortinet, Palo Alto Networks and Zscaler platforms. Ensure security policies are consistently enforced across data centre, campus, cloud and hybrid environments. Lead complex troubleshooting of network security issues, balancing security, performance and availability. Own and define the network security roadmap, aligned with wider technology and security strategies. Design and evolve Zero Trust network architectures, including identity-aware access and least-privilege principles. Define and implement micro-segmentation strategies for traditional and containerised workloads. Provide design input into new initiatives (cloud adoption, Kubernetes/OpenShift, automation, AI platforms). Evaluate new security technologies and patterns, producing clear recommendations and design artefacts Develop and maintain network security standards, patterns and policy definitions. Ensure adherence to security policies through design reviews, operational controls and continuous improvement. Partner with Information Security to translate policy into enforceable technical controls. Support audits, risk assessments and regulatory obligations by providing clear evidence of control implementation. Act as a senior technical leader within the Network Team, mentoring engineers and setting best practice. Work closely with Infrastructure, Platform, and Application teams to embed security by design. Provide subject-matter expertise to project teams and senior stakeholders. Desired Academic and Professional Qualifications: The ideal candidate will have experience working within an ITIL governed environment and established infrastructure support frameworks. They will hold a bachelor's degree in Computer Science, Information Technology, or a related discipline, or possess an equivalent combination of education, technical training, and practical experience.Relevant industry certifications (e.g. PCNSE, NSE, CCNP Security, or CISSP) or substantial real world application are expected, while ITIL and/or PMI certification is considered an advantage. Required Knowledge and Level of Experience: Experience defining and implementing network segmentation and micro segmentation strategies. Strong understanding of Zero Trust networking principles and identity aware access controls. Strong experience designing, implementing and optimising firewall and proxy security policies. Deep hands-on experience with: + Palo Alto Networks (PAN OS, Panorama, policy design) + Fortinet (FortiGate, FortiManager, FortiAnalyzer) + Zscaler (ZIA, ZPA, Zero Trust Exchange) Experience securing hybrid environments spanning on prem, cloud, and containerised platforms. Exposure to security controls and design for Kubernetes/OpenShift. Experience with automation and infrastructure-as-code approaches for deploying security controls. Wide exposure to routing, switching, load balancing and security architectures, with extensive operational and engineering experience. Strong grounding in core networking technologies and protocols, including: + TCP/IP, BGP, OSPF, VLANs, VRF, VPN, VXLAN, NAT, ACLs, DNS. Hands on experience with packet capture and network analytics and monitoring tools. Strong understanding of ITILv3 processes, including incident, problem, and change management. Skills and Competencies: Ability to translate high level security policies into practical, scalable technical designs. Strong analytical and diagnostic skills for assessing complex network and security environments. Competence in designing and optimising security architectures, network policies and segmentation models. Ability to work across hybrid and distributed environments (on prem, cloud, container platforms). Strong capability to apply automation and IaC concepts to enhance security controls and operational efficiency. Ability to collaborate with cross-functional teams in highly regulated, high availability environments. Methodical, working approach aligned to ITILv3 best practices with and proven ability to implement processes. Willingness to challenge existing approaches and drive change. Comfortable working under pressure, with changing priorities. A strong delivery mindset, setting and achieving realistic and timely execution of project deliverables across the portfolio. Core Functional Responsibilities of an AVP: Day-to-day focus is on resolution of complex problems or transactions, where expertise is required to interpret against policies, guidelines or processes Role at this level usually has full ownership for one or more processes, reports, procedures or products, and may also be considered analytical or procedural experts representing a unit or team on cross-function process or project deliverables. Experience Criteria of an AVP: Roles at this level typically require an individual emerging as an expert in a specific skill set, business area or product who remains focused primarily on daily execution.Hong Kong Exchanges and Clearing Limited (HKEX) is a publicly-traded company (HKEX Stock Code:388) and one of the world's leading global exchange groups, offering a range of equity, derivative, commodity, fixed income and other financial markets, products and services, including the London Metals Exchange.As a superconnector and gateway between East and West, HKEX facilitates the two-way flow of capital, ideas and dialogue between China and the rest of world, through
Senior Network Security Specialist Shift Pattern: Standard 40 Hour Week (United Kingdom) Scheduled Weekly Hours: 40 Corporate Grade: D - Assistant Vice President Reporting Line: (UK Division) Information Technology Location: UK-London Worker Type: Permanent About the London Metal Exchange The London Metal Exchange (LME) is the world centre for industrial metals trading. Most of the world's global non-ferrous futures business is conducted on the LME's three trading platforms totalling $21 trillion, 191 million lots and 4 billion tonnes notional with a market open interest high of 2.1 million lots in 2025.The metals community uses the LME, an HKEX Group company, as a venue to transfer or take on price risk, as a physical market of last resort and as the provider of transparent global reference prices. Overall Purpose of Role As a Senior Network Security Specialist, you will design, implement and govern the network security controls that protect our modern, high performance enterprise network. You will take a hands on lead role in shaping the network security roadmap, defining policies and standards and driving the adoption of Zero Trust and micro segmentation across the organisation.Working within the Connectivity Engineering Team, you will collaborate closely with Information Security, Platform, Infrastructure and Application teams to ensure security is embedded by design. Your expertise will be applied across on premises, cloud, and containerised environments, ensuring consistent and robust protection across all connectivity layers. You will also support the organisation's LAN, WAN, Campus and Data Centre network services, ensuring reliability, resilience, and high performance. You will maintain and develop core network standards across related systems, coordinate network activities across multiple technology projects, contribute deep technical expertise and produce both high and low level designs. As a subject matter expert, you will also provide 3rd line escalation support when required.This role reports directly to the Network Manager and may include participation in an on call rota, as well as occasional evening and weekend work. TOIL or overtime compensation will be available. Responsibilities: Design, implement, and maintain enterprise network security controls including firewalls, proxies and secure access services aligned to business and regulatory requirements. Act as the technical authority for Fortinet, Palo Alto Networks and Zscaler platforms. Ensure security policies are consistently enforced across data centre, campus, cloud and hybrid environments. Lead complex troubleshooting of network security issues, balancing security, performance and availability. Own and define the network security roadmap, aligned with wider technology and security strategies. Design and evolve Zero Trust network architectures, including identity-aware access and least-privilege principles. Define and implement micro-segmentation strategies for traditional and containerised workloads. Provide design input into new initiatives (cloud adoption, Kubernetes/OpenShift, automation, AI platforms). Evaluate new security technologies and patterns, producing clear recommendations and design artefacts Develop and maintain network security standards, patterns and policy definitions. Ensure adherence to security policies through design reviews, operational controls and continuous improvement. Partner with Information Security to translate policy into enforceable technical controls. Support audits, risk assessments and regulatory obligations by providing clear evidence of control implementation. Act as a senior technical leader within the Network Team, mentoring engineers and setting best practice. Work closely with Infrastructure, Platform, and Application teams to embed security by design. Provide subject-matter expertise to project teams and senior stakeholders. Desired Academic and Professional Qualifications: The ideal candidate will have experience working within an ITIL governed environment and established infrastructure support frameworks. They will hold a bachelor's degree in Computer Science, Information Technology, or a related discipline, or possess an equivalent combination of education, technical training, and practical experience.Relevant industry certifications (e.g. PCNSE, NSE, CCNP Security, or CISSP) or substantial real world application are expected, while ITIL and/or PMI certification is considered an advantage. Required Knowledge and Level of Experience: Experience defining and implementing network segmentation and micro segmentation strategies. Strong understanding of Zero Trust networking principles and identity aware access controls. Strong experience designing, implementing and optimising firewall and proxy security policies. Deep hands-on experience with: + Palo Alto Networks (PAN OS, Panorama, policy design) + Fortinet (FortiGate, FortiManager, FortiAnalyzer) + Zscaler (ZIA, ZPA, Zero Trust Exchange) Experience securing hybrid environments spanning on prem, cloud, and containerised platforms. Exposure to security controls and design for Kubernetes/OpenShift. Experience with automation and infrastructure-as-code approaches for deploying security controls. Wide exposure to routing, switching, load balancing and security architectures, with extensive operational and engineering experience. Strong grounding in core networking technologies and protocols, including: + TCP/IP, BGP, OSPF, VLANs, VRF, VPN, VXLAN, NAT, ACLs, DNS. Hands on experience with packet capture and network analytics and monitoring tools. Strong understanding of ITILv3 processes, including incident, problem, and change management. Skills and Competencies: Ability to translate high level security policies into practical, scalable technical designs. Strong analytical and diagnostic skills for assessing complex network and security environments. Competence in designing and optimising security architectures, network policies and segmentation models. Ability to work across hybrid and distributed environments (on prem, cloud, container platforms). Strong capability to apply automation and IaC concepts to enhance security controls and operational efficiency. Ability to collaborate with cross-functional teams in highly regulated, high availability environments. Methodical, working approach aligned to ITILv3 best practices with and proven ability to implement processes. Willingness to challenge existing approaches and drive change. Comfortable working under pressure, with changing priorities. A strong delivery mindset, setting and achieving realistic and timely execution of project deliverables across the portfolio. Core Functional Responsibilities of an AVP: Day-to-day focus is on resolution of complex problems or transactions, where expertise is required to interpret against policies, guidelines or processes Role at this level usually has full ownership for one or more processes, reports, procedures or products, and may also be considered analytical or procedural experts representing a unit or team on cross-function process or project deliverables. Experience Criteria of an AVP: Roles at this level typically require an individual emerging as an expert in a specific skill set, business area or product who remains focused primarily on daily execution.Hong Kong Exchanges and Clearing Limited (HKEX) is a publicly-traded company (HKEX Stock Code:388) and one of the world's leading global exchange groups, offering a range of equity, derivative, commodity, fixed income and other financial markets, products and services, including the London Metals Exchange.As a superconnector and gateway between East and West, HKEX facilitates the two-way flow of capital, ideas and dialogue between China and the rest of world, through