Principal Network Engineer – Network SegmentationWe are seeking an experienced Network Engineer to support a data center network segmentation initiative focused on implementing micro segmentation and Zero Trust architecture.
The role involves designing, deploying, and optimizing segmentation policies using Segmentation platforms. You will be part of the team that leads the strategic shift from traditional flat networks to highly secure, micro-segmented environments across on-premises data centers, global offices, and multi-cloud infrastructure.You will work closely with security, infrastructure, and application teams to improve east-west traffic visibility, reduce attack surface, and enforce least-privilege communication.Location: Westlake, Texas (Onsite)Key ResponsibilitiesDesign and implement network segmentation and micro segmentation strategies across data center environmentsDevelop Zero Trust network architectures aligned with enterprise security policiesDefine segmentation models (application-centric, environment-based, etc.)ImplementationDeploy and configure:Segmentation Platforms across On-Prem and Cloud Data CentersCreate and enforce security policies for east-west trafficIntegrate segmentation tooling with:FirewallsSIEM/SOAR platformsCMDB / asset inventory systemsTraffic Analysis and Policy CreationAnalyze application dependencies and traffic flowsBuild and validate allow/deny rules and segmentation policiesSupport policy simulation, testing, and enforcement phasesOperations and OptimizationMonitor segmentation effectiveness and tune policiesTroubleshoot connectivity issues related to segmentation enforcementEnsure high availability and scalability of segmentation deploymentsCollaborationPartner with:Application ownersSecurity teamsInfrastructure/Cloud teamsDrive workshops and onboarding sessions for segmentation adoptionQualifications and Skills7 – 10 plus years of experience in:Network engineeringData center networkingPrior experience in large-scale segmentation or migration projectsHands-on experience with Segmentation platforms (Illumio, Guardicore (Akamai), Cisco Secure Workload/Tetration)Strong understanding of:Networking: Cisco, HP, Arista, Palo Alto, Check Point, JuniperTCP/IP, routing, switchingFirewalls and ACLsNetwork security principlesExperience with:Application dependency mappingEast-west traffic inspectionEnterprise Security:Strong understanding of Zero-Trust Network Access (ZTNA), Secure Access Service Edge (SASE) architectures, and stateful firewalling.Cloud platforms (AWS, Azure, GCP)Kubernetes / container networkingScripting/automation skills:Python, PowerShell, or APIsExperience CMDB Tools and Technologies (ServiceNow)Familiarity with Linux and Windows server environmentsExperience working in financial services or highly regulated environmentsFidelity's Onsite Working Model Fidelity is transitioning to a full-time onsite working model through a phased rollout across regions and roles. Currently, some roles and locations require 100% onsite presence, while others require less. Onsite expectations are likely to evolve as the rollout continues. This transition does not apply to fully remote roles.Category: Information Technology