Senior Network Engineer (Chicago)

Fitch Group • Chicago, IL

10d • Hybrid

About The Position

Fitch Group is seeking a Senior Network Engineer for its Chicago office. The role is part of the Network Engineering team, which designs, operates, and continuously improves secure connectivity platforms that support reliable work across office, remote, and cloud environments. The engineer will partner with Security, Endpoint, Cloud, Reliability Engineering, Operations, and business teams to deliver supportable secure-access designs and reduce operational reliance on a small number of subject matter experts.

The role centers on engineering and operating Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA), advancing Zero Trust and secure access across remote, office, and cloud environments, and enabling secure connectivity to applications and workloads in AWS, Azure, OCI, and GCP. It also involves setting and enforcing security policies, troubleshooting complex access and connectivity issues, and supporting network modernization. The position is based in a hybrid work environment, with two to three days per week in the office required based on line of business and location.

Fitch offers learning and mobility programs, retirement planning and tuition reimbursement, comprehensive healthcare offerings, parental leave, an inclusive workplace with Employee Resource Groups, and paid volunteer days and matched donation funding. For New York roles only, the stated expected base pay is $180,000–$200,000 per year; this pay range does not apply specifically to the Chicago role in the posting.

Requirements

• Hands-on engineering experience with Zscaler ZIA and ZPA.
• Strong understanding of SSE, SASE, Zero Trust, secure web gateways, private application access, DLP, CASB, SSL inspection, and cloud security concepts.
• Strong networking fundamentals across routing, switching, DNS, proxy behavior, firewall policy, internet edge design, cloud connectivity, and troubleshooting.
• Ability to evaluate security-sensitive access designs, policy changes, traffic flows, and exceptions using sound judgment to balance business needs, risk reduction, and protection of sensitive data.
• Ability to work effectively across engineering, security, cloud, endpoint, operations, and business teams, with strong ownership, clear communication, and a focus on supportable outcomes.

Nice To Haves

• Experience with scripting, APIs, automation, log analysis, packet-capture tools, configuration validation, policy reporting, health checks, change readiness, or operational dashboards.
• Cisco, Meraki, SD-WAN, or traditional enterprise networking experience, especially in environments undergoing network modernization.
• Experience contributing to modernization programs such as Office Zero Trust, Wi-Fi, Meraki, cloud security enhancements, SD-WAN planning, and east-west inspection initiatives.
• Experience creating architecture diagrams, design documentation, standards, runbooks, troubleshooting guides, and knowledge-transfer materials that improve supportability and reduce single points of expertise.

Responsibilities

• Design, deploy, operate, and continuously improve Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) for secure internet access, private application access, and user-to-application connectivity.
• Implement and mature Zero Trust Network Access, application segmentation, least-privilege access controls, and secure access patterns across remote, office, and cloud environments.
• Define, tune, and enforce security policies covering URL filtering, SSL inspection, cloud application controls, browser isolation, DLP, and AI/LLM usage controls.
• Enable secure access to workloads and applications hosted in AWS, Azure, OCI, and GCP, while aligning access designs with operational resilience, supportability, and long-term network modernization goals.
• Lead complex troubleshooting of user access, application connectivity, authentication, policy enforcement, service health, and performance issues, including log analysis, packet captures, and high-impact incident escalation support.
• Work with Security, Endpoint, Cloud, Reliability Engineering, Operations, and business teams to deliver supportable secure-access designs.
• Contribute to network modernization programs and create documentation or knowledge-transfer materials that improve supportability and reduce single points of expertise.

Benefits

• Dedicated trainings, leadership development, and mentorship programs.
• Retirement planning programs.
• Tuition reimbursement.
• Comprehensive healthcare offerings supporting physical, mental, financial, social, and occupational wellbeing.
• A global parental leave plan.
• Employee Resource Groups.
• Paid volunteer days and matched funding for donations.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed