Principal Network Engineer

Fidelity • Durham, NC

1d

About The Position

The Principal Network Engineer on Fidelity Investments’ Network Core and Site Engineering team designs, engineers, and implements datacenter and co-location core network routing and switching, with a focus on stability, automation, and innovation. The role engineers and operates VXLAN overlay and underlay network environments across multiple platforms and supports Enterprise Infrastructure projects, including implementing new network hardware, upgrading existing hardware, certifying code, and securing the network through tactical change management.

The position also provides operational support and participates in an on-call rotation. It contributes to the secure, resilient, and highly available network and infrastructure services delivered by Fidelity’s Data Center & Network Services team within Enterprise Infrastructure & Operations.

Requirements

• 5–8+ years of progressive network security or firewall engineering experience.
• Bachelor’s degree preferred, or equivalent experience.
• Strong written and verbal communication skills, including the ability to convey technical concepts and recommendations to engineers and business partners.
• Advanced analytical and problem-solving capabilities, including structured troubleshooting in complex network and firewall environments.
• Effective collaboration across domains, peers, and cross-functional partners.
• Continuous learning and technical curiosity, including staying current with evolving network and security technologies.
• Operational discipline, initiative, and compliance with standards, change controls, and regulatory expectations.
• Strong working knowledge of networking fundamentals, including TCP/IP, routing, and switching, and the ability to independently troubleshoot moderate to complex enterprise network issues.
• Experience engineering and supporting large-scale enterprise infrastructure connectivity over EVPN-VXLAN overlay networks.
• Expertise configuring and supporting HPE and Cisco networking platforms.
• Knowledge of routing protocols including BGP, OSPF, and VRF.
• Knowledge of switched protocols including PVST, RPVST, and HSRP/VRRP.
• Knowledge of monitoring protocols including SNMP, Syslog, and Telemetry.
• Datacenter design and support experience, including VXLAN overlay technologies and EVPN-BGP.
• Experience configuring and troubleshooting EVPN-VXLAN.
• Knowledge of common network services including DNS, DHCP, HTTP, and SSH.
• Infrastructure automation experience and familiarity with scripting languages such as Bash, Python, and Ansible, and with interacting with REST APIs.
• Solid understanding of network observability and monitoring systems.
• Focused curiosity, initiative, logical and inquisitive mindset, communication skills (listening, speaking, writing, and presentation), time management, results orientation, and tactical planning.

Nice To Haves

• Bachelor’s degree in Computer Science or Network Engineering, or 8+ years of related experience.
• Cisco CCNA, CCNP, CCIE, or other network engineering certifications.

Responsibilities

• Design, engineer, and implement datacenter and co-location core network routing and switching.
• Engineer and operate VXLAN overlay and underlay network environments across multiple platforms.
• Support Enterprise Infrastructure projects, including implementing new and upgrading existing network hardware.
• Perform code certification and help keep the network secure through tactical change management.
• Provide operational support and participate in an on-call rotation.
• Provide technical support and assist with troubleshooting during on-call periods and for impacting issues.
• Document complex technologies and network topologies using Visio.
• Advise business partners on network and firewall security considerations.

What This Job Offers

• Job Type: Full-time
• Career Level: Principal