Senior Network Engineer

Fitch Ratings, Inc.; New York (NY); Hybrid; USD 180,000 - 200,000; Full time

Benefits offered by this job

Hybrid work

Learning & mobility

Retirement planning

Healthcare

Parental leave

Employee resource groups

Volunteer days

Job summary

Fitch Group seeks a Senior Network Engineer to design, deploy, and operate secure access across office, remote, and cloud environments from its New York office.

The role focuses on Zscaler platforms, Zero Trust, and network modernization, requiring collaboration with security, cloud, and operations teams. Hybrid work with 2–3 days in the office is expected in New York.

Qualifications

• Hands-on engineering with Zscaler ZIA and ZPA and strong SSE, SASE and Zero Trust concepts.
• Solid networking fundamentals across routing, switching, DNS, and firewall policy.
• Ability to evaluate security-sensitive access designs, traffic flows, and exceptions.
• Ability to collaborate across engineering, security, cloud, and operations teams.

Responsibilities

• Design, deploy, operate, and improve ZIA and ZPA as core platforms for secure access.
• Implement and mature Zero Trust, segmentation, least-privilege access across environments.
• Define, tune, and enforce security policies including URL filtering and SSL inspection.
• Enable secure access to workloads in AWS, Azure, OCI, and GCP.
• Lead complex troubleshooting for user access, connectivity, incidents and policy enforcement.

Skills

Zscaler ZIA

Zscaler ZPA

SSE

SASE

Zero Trust

Secure Web Gateway

DLP

CASB

SSL Inspection

Cloud security

Network troubleshooting

Tools

Cisco Meraki

SD-WAN

Job description

Fitch Group is currently seeking a Senior Network Engineer based out of our New York office.
As a leading, global financial information services provider, Fitch Group delivers vital credit and risk insights, robust data, and dynamic tools to champion more efficient, transparent financial markets. With over 100 years of experience and colleagues in over 30 countries, Fitch Group’s culture of credibility, independence, and transparency is embedded throughout its structure, which includes Fitch Ratings, one of the world’s top three credit ratings agencies, and Fitch Solutions, a leading provider of insights, data and analytics. With dual headquarters in London and New York, Fitch Group is owned by Hearst.
At Fitch Group, the combined power of our global perspectives is what differentiates us. It is the strength of our business. It comes from people around the world in a shared pursuit: to equal something greater than they could ever accomplish alone. Every team member is essential to our business and every perspective is critical for our success. Develop yourself in a culture that values flexibility, expects your opinion and trusts your decisions. Together we evolve and so will you, in an environment that asks you to challenge yourself – and us.

About The Team

The Network Engineering team designs, operates, and continuously improves the secure connectivity platforms that enable Fitch colleagues to work reliably across office, remote, and cloud environments. This role will partner closely with Security, Endpoint, Cloud, Reliability Engineering, Operations, and business teams to deliver supportable secure access designs and reduce operational dependency on a small number of subject matter experts.

How You’ll Make An Impact

• Design, deploy, operate , and continuously improve Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) as core platforms for secure internet access, private application access, and user-to-application connectivity.
• Implement and mature Zero Trust Network Access, application segmentation, least-privilege access controls, and secure access patterns across remote, office, and cloud environments.
• Define, tune, and enforce security policies including URL filtering, SSL inspection, cloud application controls, browser isolation, DLP, and AI/LLM usage controls.
• Enable secure access to workloads and applications hosted in AWS, Azure, OCI, and GCP while aligning access designs with operational resilience, supportability, and long-term network modernization goals.
• Lead complex troubleshooting for user access, application connectivity, authentication, policy enforcement, service health, and performance issues, including log analysis, packet captures, and high-impact incident escalation support.

You May Be a Good Fit If

• You have hands-on engineering experience with Zscaler ZIA and ZPA, along with a strong understanding of SSE, SASE, Zero Trust, secure web gateway, private application access, DLP, CASB, SSL inspection, and cloud security concepts.
• You bring strong networking fundamentals across routing, switching, DNS, proxy behavior, firewall policy, internet edge design, cloud connectivity, and troubleshooting.
• You are comfortable evaluating security-sensitive access designs, policy changes, traffic flows, and exceptions using sound judgment that balances business needs, risk reduction, and protection of sensitive data.
• You can work effectively across engineering, security, cloud, endpoint, operations, and business teams with strong ownership, clear communication, and a focus on supportable outcomes.

What Would Make You Stand Out

• Experience with scripting, APIs, automation, log analysis, packet capture tools, configuration validation, policy reporting, health checks, change readiness, or operational dashboards.
• Cisco, Meraki, SD-WAN, or traditional enterprise networking experience, especially in environments undergoing network modernization.
• Experience contributing to modernization programs such as Office Zero Trust, Wi-Fi, Meraki, cloud security enhancements, SD-WAN planning, and east-west inspection initiatives.
• A track record of creating architecture diagrams, design documentation, standards, runbooks, troubleshooting guides, and knowledge-transfer materials that improve supportability and reduce single points of expertise.

Why Choose Fitch

• Hybrid Work Environment: 2 to 3 days a week in office required based on your line of business and location
• A Culture of Learning & Mobility: Dedicated trainings, leadership development and mentorship programs designed to ensure that your time at Fitch will be a continuous learning opportunity
• Investing in Your Future: Retirement planning and tuition reimbursement programs that empower you to achieve your short and long-term goals
• Promoting Health & Wellbeing: Comprehensive healthcare offerings that enable physical, mental, financial, social, and occupational wellbeing
• Supportive Parenting Policies: Family-friendly policies, including a generous global parental leave plan, designed to help you balance career and family life effectively
• Inclusive Work Environment: A collaborative workplace where all voices are valued, with Employee Resource Groups that unite and empower our colleagues around the globe
• Dedication to Giving Back: Paid volunteer days, matched funding for donations and ample opportunities to volunteer in your community

Fitch is committed to providing global securities markets with objective, timely, independent and forward-looking credit opinions. To protect Fitch’s credibility and reputation, our employees must take every precaution to avoid conflicts of interest or any appearance of a conflict of interest. Should you be successful in the recruitment process at Fitch Ratings you will be asked to declare any securities holdings and other potential conflicts prior to commencing employment. If you, or your immediate family, have any holdings that may conflict with your work responsibilities, you may be asked to divest yourself of them before beginning work.
Fitch is proud to be an Equal Opportunity and Affidavit Action Employer. We evaluate qualified applicants without regard to race, color, national origin, religion, sex, sexual orientation, gender identity, disability, protected veteran status, and other statuses protected by law.
FOR NEW YORK ROLES ONLY: Expected base pay rates for the role will be between $180,000 and $200,000 per year. Actual salaries will be determined on an individualized basis and may vary based on factors including but not limited to education, training, experience, past performance, and other job-related factors. Base pay is one part of Fitch’s total compensation package, which, depending on the position, may also include commission earnings, discretionary bonuses, long-term incentives, and other benefits sponsored by Fitch.