Principal Network Segmentation Engineer - Zero Trust

Habitat For Humanity Of Durham; Durham (NC); On-site; USD 140,000 - 190,000; Full time

Job summary

Fidelity Investments is seeking a Principal Network Engineer to lead micro-segmentation and Zero Trust implementations across enterprise infrastructure. You will design, deploy, and optimize segmentation across data centers and cloud environments, focusing on reducing risk and improving visibility.

Requirements include 7+ years in network engineering, hands-on experience with Illumio/Guardicore/Cisco Secure Workload, and expertise in TCP/IP, routing, switching, and firewalls.

Qualifications

• 7+ years of experience in network engineering and data center networking.
• Hands-on experience with network segmentation platforms such as Illumio, Akamai Guardicore, or Cisco Secure Workload.
• Experience leading or supporting large-scale network segmentation, security transformation, or migration initiatives.
• Strong knowledge of TCP/IP networking, routing, switching, firewalls, access control policies, and network security principles.
• Experience analyzing application dependencies, network traffic flows, and east-west communication patterns to develop segmentation policies.
• Knowledge of Zero Trust architecture, Zero Trust Network Access (ZTNA), Secure Access Service Edge (SASE).
• Experience implementing network security solutions across on-premises and cloud environments (AWS/Azure/GCP).
• Experience integrating network security technologies with security monitoring and configuration management platforms such as ServiceNow.

Responsibilities

• Lead the implementation of network segmentation and Zero Trust architectures.
• Design, deploy, and optimize micro-segmentation across data center and cloud environments.
• Analyze application traffic patterns to develop segmentation policies and improve visibility.
• Collaborate with security teams to integrate network controls with monitoring and CMDB tooling.

Skills

Network engineering

Data center networking

Illumio

Akamai Guardicore

Cisco Secure Workload

Zero Trust

ZTNA

SASE

AWS

Azure

GCP

TCP/IP Networking

Firewalls

Security frameworks

Python

PowerShell

APIs

Kubernetes

Linux

Windows Server

Tools

ServiceNow

Job description

Fidelity Investments is seeking a Principal Network Engineer to lead micro-segmentation and Zero Trust implementations across enterprise infrastructure. You will design, deploy, and optimize segmentation across data centers and cloud environments, focusing on reducing risk and improving visibility.

Requirements include 7+ years in network engineering, hands-on experience with Illumio/Guardicore/Cisco Secure Workload, and expertise in TCP/IP, routing, switching, and firewalls.