Principal Network Engineer

Job Title – Principal Network Engineer (Network Segmentation)

Principal Network Engineer – Network Segmentation will be responsible for designing, implementing, and ensuring the stability of Network Segmentation and Zero Trust Architecture (ZTA) across the enterprise environment. The role involves active participation and leadership in major engineering initiatives within DCNS, working with various business units to deliver secure, scalable, and high-performance network segmentation solutions that enhance overall application experience and security posture.

The Purpose of This Role

The Datacenter Core Network Services (DCNS) group within Fidelity Business Services India Pvt Limited supports Fidelity’s network infrastructure including Firewalls, Micro-Segmentation Platforms, ZTNA (Zscaler/Netskope), Load Balancers, Proxy Infrastructure, and Network Security Systems.

Our mission is to provide secure, resilient, and segmented network infrastructure through standards, best practices, automation, and operational excellence, while ensuring high levels of customer satisfaction.

As per business needs, shift timings and holiday support may vary.

The Value You Deliver

As the Principal Network Engineer in the DCNS team, you will lead and contribute to network segmentation and zero trust initiatives across enterprise environments.

In this role, you will collaborate with cross-functional teams to:

• Design and implement network segmentation (L3/L7, micro-segmentation) strategies
• Deploy and manage segmentation policies using firewalls, ZTNA, and security platforms
• Implement Zero Trust Network Access (ZTNA) solutions (Zscaler/Netskope/Broadcom)
• Perform application dependency mapping and traffic flow analysis
• Configure and manage internal segmentation firewalls and policy enforcement
• Automate network and security processes using Python and Ansible
• Manage and optimize firewall rules, ACLs, and segmentation controls
• Support 3rd level engineering escalation and troubleshooting
• Validate and onboard new applications into segmented environments
• Conduct risk assessments and segmentation gap analysis
• Recommend and implement new segmentation technologies and architectures
• Configure monitoring and observability solutions to ensure network stability and visibility
• Collaborate with Security, Cloud, and Application teams to enhance secure application access and user experience

The Skills that are Key to this role

Key Responsibilities 

Design & Architecture

• Design and implement network segmentation and micro segmentation strategies across data center environments
• Develop Zero Trust network architectures aligned with enterprise security policies
• Define segmentation models (application-centric, environment-based, etc.)

Implementation

• Deploy and configure:
  • Segmentation Platforms across On-Prem and Cloud Data Centers
• Create and enforce security policies for east-west traffic
• Integrate segmentation tooling with:
  • Firewalls
  • SIEM/SOAR platforms
  • CMDB / asset inventory systems

Traffic Analysis & Policy Creation

• Analyze application dependencies and traffic flows
• Build and validate allow/deny rules and segmentation policies
• Support policy simulation, testing, and enforcement phases

Operations & Optimization

• Monitor segmentation effectiveness and tune policies
• Troubleshoot connectivity issues related to segmentation enforcement
• Ensure high availability and scalability of segmentation deployments

Collaboration

• Partner with:
  • Application owners
  • Security teams
  • Infrastructure/Cloud teams
• Drive workshops and onboarding sessions for segmentation adoption

Qualifications & Skills 

• 7 – 10+ years of experience in:
  • Network engineering
  • Data center networking
• Prior experience in large-scale segmentation or migration projects
• Hands-on experience with Segmentation platforms (Illumio, Guardicore (Akamai), Cisco Secure Workload/Tetration)
• Strong understanding of:
  • Networking: Cisco, HP, Arista, Palo Alto, Check Point, Juniper
    • TCP/IP, routing, switching
    • Firewalls and ACLs
    • Network security principles
• Experience with:
  • Application dependency mapping
  • East-west traffic inspection
• Experience with Enterprise Security:
  • Strong understanding of Zero-Trust Network Access (ZTNA), Secure Access Service Edge (SASE) architectures, and stateful firewalling. 
• Experience with:
  • Cloud platforms (AWS, Azure, GCP)
  • Kubernetes / container networking
• Scripting/automation skills:
  • Python, PowerShell, or APIs
• Experience CMDB Tools & Technologies (ServiceNow)
• Familiarity with Linux and Windows server environments
• Experience working in financial services or highly regulated environments

The Skills that are Good To Have for this role

• Experience with micro-segmentation tools (Illumio, Guardicore, VMware NSX)
• Exposure to cloud networking (AWS, Azure, GCP security controls)
• Knowledge of SASE/SSE architectures
• Expertise in Tableau, advanced Excel, and PowerPoint
• Strong communication and presentation skills, with ability to present to SLT

How Your Work Impacts the Organization

DCNS manages all critical network infrastructure for Fidelity. As a Principal Network Engineer focusing on Network Segmentation, you will play a key role in:

• Enhancing security posture by reducing lateral movement risks
• Enabling Zero Trust adoption across enterprise environments
• Improving application performance and secure access
• Delivering scalable and compliant network architectures
• Supporting business units with secure, optimized connectivity solutions

Your contributions will directly impact the organization’s ability to secure critical applications and data while maintaining seamless user experience.

The Expertise We’re Looking For

• 9+ years of IT experience in Network Security / Infrastructure
• Proven experience in network segmentation or Zero Trust projects
• Graduate (Bachelor’s Degree in Engineering / Technology or related field)
• Hands-on expertise in:
• Firewalls (Checkpoint / Palo Alto / Juniper)
• ZTNA (Zscaler / Netskope / Broadcom)
• Network segmentation tools and architectures
• Automation and scripting

Location : Bangalore - EGL

Shift timings  : 2:00 PM IST – 11:00 PM IST