LOG IN
SIGN UP
Canary Wharfian - Online Investment Banking & Finance Community.
Sign In
or continue with e-mail and password
Forgot password?
Don't have an account?
Create an account
or continue with e-mail and password
By signing up, you agree to our Terms & Conditions and Privacy Policy.

Principal Network Engineer – Network Segmentation

ExperiencedNo visa sponsorship
Fidelity Investments logo

at Fidelity Investments

Asset Management

Posted 6 days ago

No clicks

**Principal Network Engineer - Network Segmentation** Lead data center network segmentation, implementing micro segmentation and Zero Trust architecture. Design, deploy, and optimize segmentation policies using platforms like Illumio, Guardicore, and Cisco Secure Workload. Enhance east-west traffic visibility, reduce attack surface, and enforce least-privilege communication. Collaborate with security, infrastructure, and application teams. 7-10 years in network engineering with large-scale segmentation experience. Hands-on with relevant tools and cloud platforms. Proficient in networking, firewalls, and security principles. Strong scripting/automation skills. Onsite in Westlake, Texas.

Compensation
Not specified

Currency: Not specified

City
Westlake
Country
United States

Full Job Description

Job Description:

Note: Fidelity is not providing immigration sponsorship for this position.

Job Title: Principal Network Engineer Network Segmentation

Role Summary

We are seeking an experienced Network Engineer to support a data center network segmentation initiative focused on implementing micro segmentation and Zero Trust architecture. The role involves designing, deploying, and optimizing segmentation policies using Segmentation platforms. You will be part of the team that leads the strategic shift from traditional flat networks to highly secure, micro-segmented environments across on-premises data centers, global offices, and multi-cloud infrastructure.

You will work closely with security, infrastructure, and application teams to improve east-west traffic visibility, reduce attack surface, and enforce least-privilege communication.

Location

Westlake, Texas (Onsite)

Key Responsibilities

Design and Architecture

  • Design and implement network segmentation and micro segmentation strategies across data center environments
  • Develop Zero Trust network architectures aligned with enterprise security policies
  • Define segmentation models (application-centric, environment-based, etc.)

Implementation

  • Deploy and configure:
  • Segmentation Platforms across On-Prem and Cloud Data Centers
  • Create and enforce security policies for east-west traffic
  • Integrate segmentation tooling with:
  • Firewalls
  • SIEM/SOAR platforms
  • CMDB / asset inventory systems

Traffic Analysis and Policy Creation

  • Analyze application dependencies and traffic flows
  • Build and validate allow/deny rules and segmentation policies
  • Support policy simulation, testing, and enforcement phases

Operations and Optimization

  • Monitor segmentation effectiveness and tune policies
  • Troubleshoot connectivity issues related to segmentation enforcement
  • Ensure high availability and scalability of segmentation deployments

Collaboration

  • Partner with:
  • Application owners
  • Security teams
  • Infrastructure/Cloud teams
  • Drive workshops and onboarding sessions for segmentation adoption

Qualifications and Skills

  • 7 10 plus years of experience in:
  • Network engineering
  • Data center networking
  • Prior experience in large-scale segmentation or migration projects
  • Hands-on experience with Segmentation platforms (Illumio, Guardicore (Akamai), Cisco Secure Workload/Tetration)
  • Strong understanding of:
  • Networking: Cisco, HP, Arista, Palo Alto, Check Point, Juniper
  • TCP/IP, routing, switching
  • Firewalls and ACLs
  • Network security principles
  • Experience with:
  • Application dependency mapping
  • East-west traffic inspection
  • Experience with Enterprise Security:
  • Strong understanding of Zero-Trust Network Access (ZTNA), Secure Access Service Edge (SASE) architectures, and stateful firewalling.
  • Experience with:
  • Cloud platforms (AWS, Azure, GCP)
  • Kubernetes / container networking
  • Scripting/automation skills:
  • Python, PowerShell, or APIs
  • Experience CMDB Tools and Technologies (ServiceNow)
  • Familiarity with Linux and Windows server environments
  • Experience working in financial services or highly regulated environments

Certifications:

Category:

Information Technology

Please be advised that Fidelitys business is governed by the provisions of the Securities Exchange Act of 1934, the Investment Advisers Act of 1940, the Investment Company Act of 1940, ERISA, numerous state laws governing securities, investment and retirement-related financial activities and the rules and regulations of numerous self-regulatory organizations, including FINRA, among others. Those laws and regulations may restrict Fidelity from hiring and/or associating with individuals with certain Criminal Histories.

Apply

All fields are required.

Benefits that balance life and work

From our fully paid parent leave to our on-site health and wellness centers, our benefits support the belief that more balance you have, the better you can achieve your goals.

Benefits

Company overview

Company overview 

At Fidelity, we are passionate about making our financial expertise broadly accessible and effective in helping people live the lives they want. We are a privately held company that places a high degree of value in creating and nurturing a work environment that attracts the best talent and reflects our commitment to our associates. We are proud of our diverse and inclusive workplace where we respect and value our associates for their unique perspectives and experience. 

Reasonable accommodations

Fidelity will reasonably accommodate applicants with disabilities who need adjustments to participate in the application or interview process. To initiate a request for an accommodation contact the HR Accommodation Team by sending an email to accommodations@fmr.com, or by calling 800-835-5099, prompt 2, option 3.

Equal opportunity employer

Fidelity Investments is an equal opportunity employer. We believe that the most effective way to attract, develop, and retain a diverse workforce is to build an enduring culture of inclusion and belonging.

Applicant screening

At Fidelity, we value honesty, integrity, and the safety of our associates and customers within a heavily regulated industry. Certain roles may require candidates to go through a preliminary credit check during the screening process. Candidates who are presented with a Fidelity offer will need to go through a background investigation and may be asked to provide additional documentation as requested. This investigation includes but is not limited to a criminal, civil litigations and regulatory review, employment, education, and credit review (role dependent). These investigations will account for 7 years or more of history, depending on the role. Where permitted by federal or state law, Fidelity will also conduct a pre-employment drug screen, which will review for the following substances: Amphetamines, THC (marijuana), cocaine, opiates, phencyclidine.

AI Guidelines

Learn about our guidelines for use of AI when applying for a Fidelity job

Return to job search

Principal Network Engineer – Network Segmentation

Compensation

Not specified

City: Westlake

Country: United States

Fidelity Investments logo
Asset Management

6 days ago

No clicks

at Fidelity Investments

ExperiencedNo visa sponsorship

**Principal Network Engineer - Network Segmentation** Lead data center network segmentation, implementing micro segmentation and Zero Trust architecture. Design, deploy, and optimize segmentation policies using platforms like Illumio, Guardicore, and Cisco Secure Workload. Enhance east-west traffic visibility, reduce attack surface, and enforce least-privilege communication. Collaborate with security, infrastructure, and application teams. 7-10 years in network engineering with large-scale segmentation experience. Hands-on with relevant tools and cloud platforms. Proficient in networking, firewalls, and security principles. Strong scripting/automation skills. Onsite in Westlake, Texas.

Full Job Description

Job Description:

Note: Fidelity is not providing immigration sponsorship for this position.

Job Title: Principal Network Engineer Network Segmentation

Role Summary

We are seeking an experienced Network Engineer to support a data center network segmentation initiative focused on implementing micro segmentation and Zero Trust architecture. The role involves designing, deploying, and optimizing segmentation policies using Segmentation platforms. You will be part of the team that leads the strategic shift from traditional flat networks to highly secure, micro-segmented environments across on-premises data centers, global offices, and multi-cloud infrastructure.

You will work closely with security, infrastructure, and application teams to improve east-west traffic visibility, reduce attack surface, and enforce least-privilege communication.

Location

Westlake, Texas (Onsite)

Key Responsibilities

Design and Architecture

  • Design and implement network segmentation and micro segmentation strategies across data center environments
  • Develop Zero Trust network architectures aligned with enterprise security policies
  • Define segmentation models (application-centric, environment-based, etc.)

Implementation

  • Deploy and configure:
  • Segmentation Platforms across On-Prem and Cloud Data Centers
  • Create and enforce security policies for east-west traffic
  • Integrate segmentation tooling with:
  • Firewalls
  • SIEM/SOAR platforms
  • CMDB / asset inventory systems

Traffic Analysis and Policy Creation

  • Analyze application dependencies and traffic flows
  • Build and validate allow/deny rules and segmentation policies
  • Support policy simulation, testing, and enforcement phases

Operations and Optimization

  • Monitor segmentation effectiveness and tune policies
  • Troubleshoot connectivity issues related to segmentation enforcement
  • Ensure high availability and scalability of segmentation deployments

Collaboration

  • Partner with:
  • Application owners
  • Security teams
  • Infrastructure/Cloud teams
  • Drive workshops and onboarding sessions for segmentation adoption

Qualifications and Skills

  • 7 10 plus years of experience in:
  • Network engineering
  • Data center networking
  • Prior experience in large-scale segmentation or migration projects
  • Hands-on experience with Segmentation platforms (Illumio, Guardicore (Akamai), Cisco Secure Workload/Tetration)
  • Strong understanding of:
  • Networking: Cisco, HP, Arista, Palo Alto, Check Point, Juniper
  • TCP/IP, routing, switching
  • Firewalls and ACLs
  • Network security principles
  • Experience with:
  • Application dependency mapping
  • East-west traffic inspection
  • Experience with Enterprise Security:
  • Strong understanding of Zero-Trust Network Access (ZTNA), Secure Access Service Edge (SASE) architectures, and stateful firewalling.
  • Experience with:
  • Cloud platforms (AWS, Azure, GCP)
  • Kubernetes / container networking
  • Scripting/automation skills:
  • Python, PowerShell, or APIs
  • Experience CMDB Tools and Technologies (ServiceNow)
  • Familiarity with Linux and Windows server environments
  • Experience working in financial services or highly regulated environments

Certifications:

Category:

Information Technology

Please be advised that Fidelitys business is governed by the provisions of the Securities Exchange Act of 1934, the Investment Advisers Act of 1940, the Investment Company Act of 1940, ERISA, numerous state laws governing securities, investment and retirement-related financial activities and the rules and regulations of numerous self-regulatory organizations, including FINRA, among others. Those laws and regulations may restrict Fidelity from hiring and/or associating with individuals with certain Criminal Histories.

Apply

All fields are required.

Benefits that balance life and work

From our fully paid parent leave to our on-site health and wellness centers, our benefits support the belief that more balance you have, the better you can achieve your goals.

Benefits

Company overview

Company overview 

At Fidelity, we are passionate about making our financial expertise broadly accessible and effective in helping people live the lives they want. We are a privately held company that places a high degree of value in creating and nurturing a work environment that attracts the best talent and reflects our commitment to our associates. We are proud of our diverse and inclusive workplace where we respect and value our associates for their unique perspectives and experience. 

Reasonable accommodations

Fidelity will reasonably accommodate applicants with disabilities who need adjustments to participate in the application or interview process. To initiate a request for an accommodation contact the HR Accommodation Team by sending an email to accommodations@fmr.com, or by calling 800-835-5099, prompt 2, option 3.

Equal opportunity employer

Fidelity Investments is an equal opportunity employer. We believe that the most effective way to attract, develop, and retain a diverse workforce is to build an enduring culture of inclusion and belonging.

Applicant screening

At Fidelity, we value honesty, integrity, and the safety of our associates and customers within a heavily regulated industry. Certain roles may require candidates to go through a preliminary credit check during the screening process. Candidates who are presented with a Fidelity offer will need to go through a background investigation and may be asked to provide additional documentation as requested. This investigation includes but is not limited to a criminal, civil litigations and regulatory review, employment, education, and credit review (role dependent). These investigations will account for 7 years or more of history, depending on the role. Where permitted by federal or state law, Fidelity will also conduct a pre-employment drug screen, which will review for the following substances: Amphetamines, THC (marijuana), cocaine, opiates, phencyclidine.

AI Guidelines

Learn about our guidelines for use of AI when applying for a Fidelity job

Return to job search