Vista previa generada por IA
Principal Network Engineer role focusing on zero trust and micro segmentation in Westlake, TX.
Design, deploy, and manage secure network segmentation across on-prem and cloud environments.
Job Title
Job Title: Principal Network Engineer – Network Segmentation
Role Summary
We are seeking an experienced Network Engineer to support a data center network segmentation initiative focused on implementing micro segmentation and Zero Trust architecture. The role involves designing, deploying, and optimizing segmentation policies using Segmentation platforms. You will be part of the team that leads the strategic shift from traditional flat networks to highly secure, micro-segmented environments across on-premises data centers, global offices, and multi-cloud infrastructure.
Location
Westlake, Texas (Onsite)
Key Responsibilities
Design and Architecture
Design and implement network segmentation and micro segmentation strategies across data center environments
Develop Zero Trust network architectures aligned with enterprise security policies
Define segmentation models (application-centric, environment-based, etc.)
Implementation
Deploy and configure:
Segmentation Platforms across On-Prem and Cloud Data Centers
Create and enforce security policies for east-west traffic
Integrate segmentation tooling with:
Firewalls
SIEM/SOAR platforms
CMDB / asset inventory systems
Traffic Analysis and Policy Creation
Analyze application dependencies and traffic flows
Build and validate allow/deny rules and segmentation policies
Support policy simulation, testing, and enforcement phases
Operations and Optimization
Monitor segmentation effectiveness and tune policies
Troubleshoot connectivity issues related to segmentation enforcement
Ensure high availability and scalability of segmentation deployments
Collaboration
Partner with:
Application owners
Security teams
Infrastructure/Cloud teams
Drive workshops and onboarding sessions for segmentation adoption
Qualifications and Skills
7 – 10 plus years of experience in:
Network engineering
Data center networking
Prior experience in large-scale segmentation or migration projects
Hands‑on experience with Segmentation platforms (Illumio, Guardicore (Akamai), Cisco Secure Workload/Tetration)
Strong understanding of:
Networking: Cisco, HP, Arista, Palo Alto, Check Point, Juniper
TCP/IP, routing, switching
Firewalls and ACLs
Network security principles
Experience with:
Application dependency mapping
East‑west traffic inspection
Experience with Enterprise Security:
Strong understanding of Zero‑Trust Network Access (ZTNA), Secure Access Service Edge (SASE) architectures, and stateful firewalling.
Experience with:
Cloud platforms (AWS, Azure, GCP)
Kubernetes / container networking
Scripting/automation skills:
Python, PowerShell, or APIs
Experience CMDB Tools and Technologies (ServiceNow)
Familiarity with Linux and Windows server environments
Experience working in financial services or highly regulated environments
Fidelity’s Onsite Working Model
Fidelity’s Onsite Working Model Fidelity is transitioning to a full-time onsite working model through a phased rollout across regions and roles. Currently, some roles and locations require 100% onsite presence, while others require less. Onsite expectations are likely to evolve as the rollout continues. This transition does not apply to fully remote roles.
Legal Notice
Note: Fidelity is not providing immigration sponsorship for this position.
Information Technology Please be advised that Fidelity’s business is governed by the provisions of the Securities Exchange Act of 1934, the Investment Advisers Act of 1940, the Investment Company Act of 1940, ERISA, numerous state laws governing securities, investment and retirement-related financial activities and the rules and regulations of numerous self-regulatory organizations, including FINRA, among others. Those laws and regulations may restrict Fidelity from hiring and/or associating with individuals with certain Criminal Histories.