Principal Network Engineer

Fidelity will not provide immigration sponsorship for this position.

Principal Network Engineer, Grade 6

The Role

The Principal Network Engineer on the Network Core and Site Engineering team is responsible for the design, engineering, and implementation of Fidelity Investments’ datacenter and co-location core network routing and switching with a focus on stability, automation, and innovation. Engineer and operate the VXLAN overlay and underlay network environments traversing multiple platforms, supporting Enterprise Infrastructure teams on projects including engineering and implementing new and upgrading existing network hardware, code certification as well as keeping the network secure through tactical change management. Additional duties include operational support and participation in on-call rotation.

The Expertise and Skills You Bring

• 5 – 8 plus years of progressive network security or firewall engineering experience.
• Bachelor’s Degree Preferred (or equivalent experience).
• Strong written and verbal communication skills, clearly conveying technical concepts and recommendations to engineers and business partners.
• Advanced analytical and problem‑solving capabilities, leading structured troubleshooting in complex network and firewall environments.
• Effective collaboration skills across domains, peers and cross‑functional partners.
• Continuous learning and technical curiosity, experience staying current with evolving network and security technologies.
• Consistent operational discipline, takes initiative in work complying with standards, change controls, and regulatory expectations.
• Operates as a trusted active advisor, proactively guiding business partners on network and firewall security considerations.
• Focused Curiosity, Initiative, Logical Mindset, Inquisitive, Communication (listening, speaking, writing, presentation), Time Management, Results driven, Tactical Planning
• Strong working knowledge of networking fundamentals, including TCP/IP, routing, and switching, with the ability to independently troubleshoot and resolve moderate to complex network issues across enterprise environments.
• Experienced in engineering and supporting large scale enterprise infrastructure technologies for compute infrastructure connectivity over EVPN-VXLAN overlay networks.
• Expert knowledge configuring and supporting HPE and Cisco networking platforms.
• Network Engineering and Troubleshooting skills:
  • Routing Protocols: BGP, OSPF, VRF
  • Switched Protocols: PVST, RPVST, HSRP/VRRP
  • Monitoring Protocols: SNMP, Syslog, Telemetry
• Datacenter design and support experience:
  • Overlay technologies – VXLAN
  • EVPN-BGP
• Experience with EVPN-VXLAN configuration and troubleshooting.
• Documentation of complex technologies and topologies using Visio.
• Knowledge of common network services (DNS/DHCP/HTTP/SSH)
• Infrastructure automation experience and familiarity of scripting languages (bash/python/ansible) and interacting with Rest APIs
• Provide technical support and assistance troubleshooting during on-call period and for impacting issues.
• Solid understanding of network observability and monitoring systems

Desired Experience

• Computer Science/Network Engineering Bachelor’s degree or 8 plus years of related experience
• Cisco CCNA/CCNP/CCIE or other network engineer certifications preferred

The Team

As part of Fidelity’s Enterprise Infrastructure & Operations (EI&O) organization, the Data Center & Network Services (DCNS) team plays a critical role in delivering the secure, resilient, and highly available network and infrastructure services that power Fidelity’s business. DCNS supports an increasingly digital and always‑on environment by enabling enterprise connectivity, network security, and operational stability at scale. Within EI&O—which serves as the backbone of Fidelity’s technology ecosystem—DCNS partners closely with technology and business teams to modernize infrastructure, simplify operations, and ensure reliable experiences for both associates and customers. Joining this team means contributing to mission‑critical services while building foundational experience in a dynamic, evolving network and security landscape.

Fidelity’s Onsite Working Model
Fidelity is transitioning to a full-time onsite working model through a phased rollout across regions and roles. Currently, some roles and locations require 100% onsite presence, while others require less. Onsite expectations are likely to evolve as the rollout continues. This transition does not apply to fully remote roles.

Please be advised that Fidelity’s business is governed by the provisions of the Securities Exchange Act of 1934, the Investment Advisers Act of 1940, the Investment Company Act of 1940, ERISA, numerous state laws governing securities, investment and retirement-related financial activities and the rules and regulations of numerous self-regulatory organizations, including FINRA, among others. Those laws and regulations may restrict Fidelity from hiring and/or associating with individuals with certain Criminal Histories.