Principal Network Engineer
Fidelity Investments · Roanoke, TX · 3 mo ago
On-siteInformation TechnologyFull-time
About the role
We are seeking an experienced Network Engineer to support a data center network segmentation initiative focused on implementing micro segmentation and Zero Trust architecture.
Responsibilities
Design and Architecture
- Design and implement network segmentation and micro segmentation strategies across data center environments
- Develop Zero Trust network architectures aligned with enterprise security policies
- Define segmentation models (application-centric, environment-based, etc.)
Implementation
- Deploy and configure: Segmentation Platforms across On-Prem and Cloud Data Centers
- Create and enforce security policies for east-west traffic
- Integrate segmentation tooling with: Firewalls, SIEM/SOAR platforms, CMDB / asset inventory systems
Traffic Analysis and Policy Creation
- Analyze application dependencies and traffic flows
- Build and validate allow/deny rules and segmentation policies
- Support policy simulation, testing, and enforcement phases
Operations and Optimization
- Maintain monitoring of segmentation effectiveness and tune policies
- Resolve connectivity issues related to segmentation enforcement
- Ensure high availability and scalability of segmentation deployments
Collaboration
- Partner with: Application owners, Security teams, Infrastructure/Cloud teams
- Drive workshops and onboarding sessions for segmentation adoption
Qualifications and Skills
- 7 – 10 plus years of experience in: Network engineering, Data center networking
- Prior experience in large-scale segmentation or migration projects
- Hands-on experience with Segmentation platforms (Illumio, Guardicore (Akamai), Cisco Secure Workload/Tetration)
- Strong understanding of: Networking, TCP/IP, routing, switching, Firewalls and ACLs, Network security principles
- Experience with: Application dependency mapping, East-west traffic inspection, Enterprise Security, Zero-Trust Network Access (ZTNA), Secure Access Service Edge (SASE) architectures, and stateful firewalling
- Experience with: Cloud platforms (AWS, Azure, GCP), Kubernetes / container networking
- Scripting/automation skills: Python, PowerShell, or APIs
- Experience with CMDB Tools and Technologies (ServiceNow)
- Familiarity with Linux and Windows server environments
- Experience working in financial services or highly regulated environments