Vista previa generada por IA
Senior Director role in Cybersecurity Platform Operations at Fidelity.
Lead security engineering for network perimeter, proxy, firewall, and incident response.
Director, Cybersecurity Platform Operator External
Note: Fidelity will not provide immigration sponsorship for this position.
The Role
The role involves delivering advanced functions typically performed by Network and Perimeter Security Engineers, including work across proxy technologies, firewall platforms, Network Access Control (NAC), network segmentation, IPS/IDS, and broader security governance capabilities. We are seeking an energetic, driven professional who thrives in a fast-paced, dynamic environment and is motivated to strengthen Fidelity’s security posture.
This position operates within a rapidly evolving threat landscape, engaging with a diverse community of cybersecurity experts. Success requires adaptability, strong analytical skills, and the ability to quickly learn new technologies and understand modern system architectures.
As a Director, Cybersecurity Platform Engineer, you will serve on the External Defense team, ensuring that indicators of compromise are rapidly identified and that stakeholders receive timely, actionable, and comprehensive insights. You will collaborate closely with incident response teams, threat intelligence, vulnerability management, and perimeter security groups during investigations and response activities.
This leader will act as both a Subject Matter Expert (SME) and Senior Engineer within the Network Security Team, contributing deep technical expertise to protect Fidelity’s network and perimeter infrastructure.
The Expertise and Skills You Bring
9 to 12 years of security experience desired, preferably in a matrix-driven corporate environment.
Mandatory Cisco Identity and Service Engine Experience or similar vendor products
Ability to interact with both technical and non-technical staff, including management and executives, with experience articulating technical material in business terms.
SME in 802.1X authentication and related EAP protocols (EAP-TLS, PEAP)
The Value You Deliver
- Demonstrated expertise across network and perimeter security technologies, including Proxy, Firewall, IPS, VPN, and Segmentation platforms.
- Acted as a Subject Matter Expert (SME) in proxy technologies, with hands‑on experience in Blue Coat and Zscaler deployment, tuning, and lifecycle management.
- Managed and maintained multiple security environments, ensuring reliability, performance, and adherence to enterprise security standards.
- Strong experience administering and optimizing firewall platforms, including Juniper and Checkpoint, as well as associated management solutions.
- Led or contributed to disaster recovery (DR) planning, testing, and documentation for critical security infrastructure.
- Performed certificate management tasks, including updates, renewals, and integrations via Venafi.
- Built and maintained Splunk dashboards, alerts, and custom monitoring to improve visibility and detect anomalies.
- Participated in the on‑call rotation, responding to incidents and operational events through ServiceNow with urgency and precision.
- Implemented and maintained network security controls leveraging a variety of products, architectures, and enterprise standards.
- Conducted daily monitoring, troubleshooting, and resolution of network and security‑related issues.
- Integrated security platforms with core network components and other enterprise systems to improve automation and interoperability.
- Executed software upgrades, patches, and migrations for network security platforms.
- Created and maintained comprehensive technical documentation, runbooks, and standard operating procedures (SOPs).
- Collaborated closely with cross‑functional teams to deploy, enhance, and modernize the organization’s overall security posture.
- Remained intellectually curious, continuously evaluating emerging technologies, industry trends, and modern delivery methodologies for potential enterprise adoption.
- Demonstrated the ability to balance technical requirements with business priorities and partner perspectives.
- Proven interpersonal, written, and verbal communication skills, with a strong commitment to teamwork and collaboration.
- Experienced in managing expectations and relationships with senior technical and non-technical stakeholders.
Fidelity’s Onsite Working Model
Fidelity is transitioning to a full-time onsite working model through a phased rollout across regions and roles. Currently, some roles and locations require 100% onsite presence, while others require less. Onsite expectations are likely to evolve as the rollout continues. This transition does not apply to fully remote roles.
Certifications:
Category: Information Technology
Legal / Immigration / Compliance
Please be advised that Fidelity’s business is governed by the provisions of the Securities Exchange Act of 1934, the Investment Advisers Act of 1940, the Investment Company Act of 1940, ERISA, numerous state laws governing securities, investment and retirement-related financial activities and the rules and regulations of numerous self-regulatory organizations, including FINRA, among others. Those laws and regulations may restrict Fidelity from hiring and/or associating with individuals with certain Criminal Histories.