Principal Network Engineer

Fidelity will not provide immigration sponsorship for this position.

Job Description:

Position Description:

Supports LAN/WLAN/WAN environments traversing multiple platforms. Documents complex technologies and topologies using Visio. Supports Routed/Routing Protocols including BGP, OSPF, MPLS, VRF, and VPNs. Develops system engineering, software engineering, system integration, or distributed system architectures. Provides technical guidance or support for the development or troubleshooting of systems.

Primary Responsibilities:

• Designs, engineers, and implements switch and routed global network infrastructure.
• Supports enterprise infrastructure teams on projects including engineering.
• Implements new and upgrades existing network hardware.
• Implements and supports a secure enterprise-wide wireless infrastructure.
• Keeps the network secure through tactical change management.
• Identifies system data, hardware, or software components required to meet user needs.
• Defines and analyzes objectives, scope, issues, or organizational impact of information systems.
• Performs ongoing hardware and software maintenance operations, including installing or upgrading hardware or software.

• Demonstrated Expertise ("DE") architecting and engineering global network infrastructure, according to routing protocols -- BGP, EIGRP, and OSPF - and using MPLS and VPLS transport technologies.
• DE performing software lifecycle management for enterprise network infrastructure, including lab testing and certification, and defining multi-month change and release management schedules in alignment with enterprise IT Service Management (ITSM) practices.
• DE architecting and engineering multi-tiered datacenter network environments, deploying VxLan (Virtual extensible Local-Area Network) protocol for iSCSI Internet Small Computer Systems Interface, allowing storage devices to connect over a network using TCP/IP.
• DE performing automation using Python, ansible and service now to deploy applications including automated code upgrade, POAP (power on auto-provisioning), Config Compliance check, and Configuration Drift check; and engineering Role-Based Access Controls (RBAC) to ensure adherence to security control policies, utilizing Cisco ISE groups and Active Directory integration with ISE-based RADIUS.