Network Engineer

Description

Fidelitys Global Network Team is adding a Network Engineer to the Perimeter Security Internetwork engineering team. We are a dynamic group of professionals looking to leverage emerging Network technologies to rapidly improve the ability of Fidelity's Business Units. We strive to be fastest to deliver and easiest to consume technology services.
As a Network Engineer supporting Fidelitys Network environment, you will be joining the Internetwork engineering team and will engage in multiple Internet and Cloud related projects providing 3rd Line complex operational support and problem resolution. You will support the operational teams in handling incident and requests and will collaborate and work extensively with technology partners across the Fidelity enterprise.
The Expertise were looking for
Manage and Design highly complex firewall and network environments for security of Fidelitys critical resources and enablement of revenue producing services Security Engineering through use of Firewalls, IDS/IPS, various proxy gateway and other network security devices to provide defenseindepth protection from cyber security threats Engineering customer connectivity/onboarding based on requirements Consulting with customers on best practices and options
Business to Customer as well as Business to Business Connectivity
(Internet, Extranet, Market Data, MPLS, and VPN connections) Troubleshoot issues related to the network or security environment (oncall rotation) Documentation of complex technologies and topologies based on security based practices Management of life cycle for various technologies within the space (includes vendor management) Shiftoriented operations support, in collaboration with operations and engineering staff Work closely with all divisions to ensure 24x7 availability GNS services Escalating issues as needed Assisting in trouble shooting network issues Member of 3rd level engineering escalation oncall rotation
The Value you deliver
A Network Engineer will be responsible for performing the following Manage and Design highly complex firewall and network environments for security of Fidelitys critical resources and enablement of revenue producing services Update security groups and NACLs in various cloud service provider environments Advanced routing configurations within cloud service provider environments Elastic load balancing technologies Familiarity with CI/CD methodology Work with our automation teams to enable automation of both on premise traditional networks and cloud service provider network Hi level understanding of infrastructure as Code (IaC) Security Engineering through use of Firewalls, IDS/IPS, various proxy gateway and other network security devices to provide defenseindepth protection from cyber security threats Engineering customer connectivity/onboarding based on requirements Consulting with customers on best practices and options Work with our internal business partners to enable applications to function in both our internal and external cloud environments in a scalable and secure fashion Business to Customer as well as Business to Business Connectivity
(Internet, Extranet, Market Data, MPLS, and VPN connections)
Troubleshoot issues related to the network or security environment (oncall rotation) Documentation of complex technologies and topologies based on security based best practices Management of life cycle for various technologies within the space (includes vendor management) Shiftoriented operations support, in collaboration with operations and engineering staff Work closely with all divisions to ensure 24x7 availability GNS services Escalating issues as needed Assisting in trouble shooting network issues Member of 3rd level engineering escalation oncall rotation
The Skills you bring
Extensive knowledge of TCP/IP, including application knowledge Familiarity with Microsoft Azure, Google and Amazon AWS cloud service offerings Network Security skills Firewall, IPS/IDS, Malware Detection, Web filtering etc. Network Engineering and Troubleshooting skills Routed/Routing Protocols BGP, OSPF, MPLS, VRF, VPNs Application Traffic Analysis
SDN Previous experience with attack mitigation, design concepts, and data protection Enterprise Security Policy knowledge and best practices Knowledge of audit process Skilled verbally and with presenting to senior team members on strategic idea innovations Ability to work in a team environment Development / Automation experience strongly desired Security Certifications a plus