Principal Network Engineer

Soteria Reinsurance Ltd.; Durham, Northern (NC, KY); Hybrid; USD 140,000 - 170,000; Full time

Job summary

Fidelity is seeking a Principal Network Engineer to design and deploy global network infrastructure across LAN/WAN/WLAN. You will architect routed and switched networks, support enterprise projects, and ensure secure, scalable operations.

The role involves implementing new hardware, maintaining wireless networks, and applying rigorous change control. Required are a Bachelor’s (or Master’s) in CS/Engineering/IT and 3–5+ years in similar roles, with expertise in BGP, OSPF, MPLS, and automation

Qualifications

• Bachelor’s degree (or foreign equivalent) in CS/Engineering/IT and 5+ years as a Principal Network Engineer in global networks.
• Master’s degree with 3+ years of relevant experience and global network deployments also acceptable.
• Experience designing, engineering and deploying network infrastructure with emphasis on stability, reliability and security.

Responsibilities

• Designs, engineers, and implements switch and routed global network infrastructure.
• Supports enterprise infrastructure teams on engineering projects.
• Implements and upgrades network hardware and secure wireless infrastructure.
• Maintains security via change management and routine system hardening.

Skills

BGP routing

OSPF routing

MPLS/VPLS

VPNs/Secure networks

Python automation

Ansible

ServiceNow

RBAC/Identity & Access

Cisco ISE/AD integration

Education

Bachelor's degree in CS/Engineering/IT

Master's degree in related field

Tools

Cisco

HPE

AWS

Visio

Job description

## Principal Network EngineerApply: Durham, NC: Full time: Posted Today: End Date: November 3, 2026 (30+ days left to apply): 2135661## ## Job Description:**Note: Fidelity will not provide immigration sponsorship for this position.****Position Description**:Supports LAN/WLAN/WAN environments traversing multiple platforms. Documents complex technologies and topologies using Visio. Supports Routed/Routing Protocols including BGP, OSPF, MPLS, VRF, and VPNs. Develops system engineering, software engineering, system integration, or distributed system architectures. Provides technical guidance or support for the development or troubleshooting of systems.**Primary Responsibilities:*** Designs, engineers, and implements switch and routed global network infrastructure.* Supports enterprise infrastructure teams on projects including engineering.* Implements new and upgrades existing network hardware.* Implements and supports a secure enterprise-wide wireless infrastructure.* Keeps the network secure through tactical change management.* Identifies system data, hardware, or software components required to meet user needs.* Defines and analyzes objectives, scope, issues, or organizational impact of information systems.* Performs ongoing hardware and software maintenance operations, including installing or upgrading hardware or software.**Education and Experience**:Bachelor’s degree in Computer Science, Engineering, Information Technology, Information Systems, or a closely related field (or foreign education equivalent) and five (5) years of experience as a Principal Network Engineer (or closely related occupation) designing, engineering and deploying Global network and infrastructure ensuring overall stability, reliability and security of the sophisticated systems -- Cisco, HPE, and AWS -- that serve as the backbone of global operations.Or, alternatively, Master’s degree in Computer Science, Engineering, Information Technology, Information Systems, or a closely related field (or foreign education equivalent) and three (3) years of experience as a Principal Network Engineer (or closely related occupation) designing, engineering and deploying Global network and infrastructure ensuring overall stability, reliability and security of the sophisticated systems -- Cisco, HPE, and AWS -- that serve as the backbone of global operations.**Skills and Knowledge**:Candidate must also possess:* Demonstrated Expertise (“DE”) architecting and engineering global network infrastructure, according to routing protocols -- BGP, EIGRP, and OSPF – and using MPLS and VPLS transport technologies.* DE performing software lifecycle management for enterprise network infrastructure, including lab testing and certification, and defining multi-month change and release management schedules in alignment with enterprise IT Service Management (ITSM) practices.* DE architecting and engineering multi-tiered datacenter network environments, deploying VxLan (Virtual extensible Local-Area Network) protocol for iSCSI Internet Small Computer Systems Interface, allowing storage devices to connect over a network using TCP/IP.* DE performing automation using Python, ansible and service now to deploy applications including automated code upgrade, POAP (power on auto-provisioning), Config Compliance check, and Configuration Drift check; and engineering Role-Based Access Controls (RBAC) to ensure adherence to security control policies, utilizing Cisco ISE groups and Active Directory integration with ISE-based RADIUS.#PE1M2#LI-DNIFidelity’s Onsite Working Model Fidelity is transitioning to a full-time onsite working model through a phased rollout across regions and roles. Currently, some roles and locations require 100% onsite presence, while others require less. Onsite expectations are likely to evolve as the rollout continues. This transition does not apply to fully remote roles.## ## Certifications:## ## Category:## Information TechnologyPlease be advised that Fidelity’s business is governed by the provisions of the Securities Exchange Act of 1934, the Investment Advisers Act of 1940, the Investment Company Act of 1940, ERISA, numerous state laws governing securities, investment and retirement-related financial activities and the rules and regulations of numerous self-regulatory organizations, including FINRA, among others. Those laws and regulations may restrict Fidelity from hiring and/or associating with individuals with certain Criminal Histories.