Principal Cybersecurity Engineer

The job involves performing functions related to Network Security Engineering and Perimeter Defense, with a primary focus on Network Segmentation, DNS Security, Cloud Security, Network Access Control (NAC), and enterprise network protection technologies. We are seeking an energetic, highly motivated cybersecurity professional who can thrive in a dynamic security operations environment while supporting several high-impact initiatives designed to strengthen Fidelity's overall security posture.

The successful candidate will play a key role in advancing enterprise security architecture through the implementation and governance of network segmentation strategies, access control frameworks, and security enforcement technologies that reduce organizational risk and limit lateral movement across the enterprise. The candidate will operate in a rapidly evolving threat landscape, collaborating with network engineers, cybersecurity architects, incident responders, and security operations teams to protect critical infrastructure and business services.

This role requires adaptability, strong analytical skills, and the ability to quickly understand new technologies, architectures, and security requirements in a fast-paced environment.

The Principal Cybersecurity Platform Operator will be a key member of the Network and Perimeter Security organization, responsible for strengthening Fidelity's network defense capabilities through effective implementation of network security controls, NAC solutions, segmentation strategies, and threat detection technologies.

This role partners closely with Security Operations, Incident Response, Threat Intelligence, Vulnerability Management, Cloud Security, Network Engineering, and Security Architecture teams to ensure threats are rapidly identified, contained, and mitigated. The position will also collaborate with Information Security Officers (ISOs), business-unit stakeholders, and internal engineering organizations to develop and maintain secure network architectures that support Fidelity's strategic security objectives.

The successful candidate will help drive the organization's network security roadmap by enhancing visibility, reducing attack surfaces, improving access controls, and supporting the adoption of Zero Trust security principles across the enterprise.

• Strong experience in Network Segmentation, Network Security, Network Access Control (NAC), IDS/IPS, DNS Security, and Cloud Security technologies.
• Experience designing, implementing, and maintaining enterprise network segmentation strategies that align with Zero Trust and defense-in-depth security principles.
• Expertise with NAC platforms and policy-based access controls to enforce device authentication, authorization, visibility, and compliance across wired, wireless, and remote access environments.
• Strong understanding of east-west and north-south traffic flows and the application of segmentation controls to reduce attack surfaces and prevent lateral movement.
• Experience analyzing network traffic patterns, NetFlow data, packet captures, and security telemetry to identify threats, policy violations, and segmentation gaps.
• Experience with Splunk or other SIEM platforms for security monitoring, log analysis, threat hunting, and operational reporting.
• Strong understanding of routing, switching, firewalls, VLANs, ACLs, VPNs, TCP/IP, DNS, HTTP/HTTPS, load balancing, and other core networking technologies.
• Experience developing and enforcing network security policies, segmentation standards, and access control requirements across enterprise environments.
• Ability to review and validate security policy change requests, conduct technical requirements gathering, and ensure alignment with security architecture standards.
• Experience supporting network security architecture initiatives in on-premises, hybrid, and cloud environments.
• Strong knowledge of cybersecurity frameworks and best practices including Zero Trust Architecture, NIST, CIS Controls, and defense-in-depth methodologies.
• Experience with cloud security technologies and architectures across AWS or other IaaS/PaaS/SaaS environments.
• Knowledge of Agile, DevSecOps, Infrastructure as Code, automation, and scripting/programming languages is highly desirable.
• 7 to 9 years of cybersecurity experience desired, preferably in a large-scale enterprise or matrix-driven corporate environment.
• Ability to communicate effectively with both technical and non-technical stakeholders, including management and executive leadership.
• Strong understanding of network security controls, micro-segmentation principles, NAC enforcement models, and enterprise security governance.
• Familiarity with threat actor tactics, techniques, and procedures (TTPs) and how network-based security controls can mitigate cyber threats.
• Experience conducting technical risk assessments and making information security risk determinations based on security intelligence and operational findings.
• Understanding of cyber threats, threat actor motivations, attack methodologies, and techniques used to exploit enterprise network environments.

Information Technology