Principal Network Engineer: Zero Trust & Segmentation Lead

Fidelity Investments Inc.; Durham (NC); On-site; USD 160,000 - 230,000; Full time

Job summary

Fidelity Investments is seeking a Principal Network Engineer to lead the implementation of network segmentation and Zero Trust architectures across our enterprise infrastructure. You will design, deploy, and optimize micro‑segmentation solutions to enhance security, improve visibility into network traffic, and reduce cybersecurity risk across data center and cloud environments.

The role requires deep experience with segmentation platforms and cloud networking, strong policy development skills,

Qualifications

• 7+ years of experience in network engineering and data center networking.
• Hands-on with segmentation platforms Illumio, Guardicore, or Cisco Secure Workload.
• Experience leading large-scale segmentation or security transformation.
• Strong TCP/IP networking, routing, switching, firewalls, and security policy knowledge.
• Experience analyzing application traffic to develop segmentation policies.
• Knowledge of Zero Trust, ZTNA, SASE, and enterprise security frameworks.
• Experience across on-prem and cloud (AWS/Azure/GCP).
• Troubleshooting connectivity and policy issues in large environments.
• Experience integrating network security with monitoring/CMDB like ServiceNow.
• Scripting/automation with Python/PowerShell or APIs; Kubernetes/container networking a plus.

Responsibilities

• Lead the implementation of network segmentation and Zero Trust architectures.
• Design, deploy, and optimize micro-segmentation solutions.
• Analyze application traffic patterns to develop segmentation policies.
• Support secure communication across data center and cloud environments.
• Modernize network security controls to reduce cybersecurity risk.

Skills

7+ years experience

Zero Trust

Network segmentation

TCP/IP networking

Emergency policy development

Scripting/Automation

Kubernetes/container networking

Cloud networking (AWS/Azure/GCP)

Security platforms (Illumio/Guardicore

Tools

Illumio

Akamai Guardicore

Cisco Secure Workload

AWS

Azure

Google Cloud Platform

ServiceNow

Job description

Fidelity Investments is seeking a Principal Network Engineer to lead the implementation of network segmentation and Zero Trust architectures across our enterprise infrastructure. You will design, deploy, and optimize micro‑segmentation solutions to enhance security, improve visibility into network traffic, and reduce cybersecurity risk across data center and cloud environments.

The role requires deep experience with segmentation platforms and cloud networking, strong policy development skills,