Principal Network Engineer

Position Description:

Crafts new enterprise solutions, enables new customer connectivity, secures the environment through tactical change management, and works in a cross-organizational fashion. Supports and designs F5 and load balancing solutions for critical applications running on-prem, at multiple Cloud Service Providers (CSPs), and hybrid environments. Manages the overall F5 and AVI Load Balancing design. Provides secure connectivity solutions to the enterprise, allowing business teams and customers to be more driven, productive, and profitable in a global business environment. Uses business knowledge to translate the vision for divisional initiatives into business solutions. 

Primary Responsibilities:

• Designs new enterprise network solutions, enables new customer connectivity, secures environments through tactical change management, and works in a cross-organizational fashion to consult and enable services.
• Advises business partners on standard methodologies and technology platform options .
• Solves Application Traffic Management environment (F5 and AVI) issues.
• Provides shift-oriented operations support, in collaboration with network operations and engineering teams.
• Works closely with business partners and teams to ensure 24x7 availability.
• Documents complex technologies and topologies based on security-based practices.
• Advises on risk assessment and risk management strategies for projects.
• Plans and coordinates project schedules and assignments for multiple projects.
• Advises senior management on technical strategy.
• Mentors junior team members.
• Ensures constant availability of services and assists in troubleshooting network issues.

Education and Experience:

Bachelor’s degree in Computer Science, Engineering, Information Technology, Information Systems, or a closely related field (or foreign education equivalent) and five (5) years of experience as a Principal Network Engineer (or closely related occupation) managing global application traffic and domain name resolution across on-prem and cloud environments to deliver automated, scalable, and compliant global network services. 

Or, alternatively, Master’s degree in Computer Science, Engineering, Information Technology, Information Systems, or a closely related field (or foreign education equivalent) and three (3) years of experience as a Principal Network Engineer (or closely related occupation) managing global application traffic and domain name resolution across on-prem and cloud environments to deliver automated, scalable, and compliant global network services.

Skills and Knowledge:

Candidate must also possess:

• Demonstrated Expertise (“DE”) designing advance traffic control mechanisms to enable precise traffic steering, smart redirection, and header rewriting for secure http and https traffic flows, using iRule scripting; implementing encrypted traffic offloading to reduce backend server load and improve performance, using BIG-IP Local Traffic Manager (LTM) profiles; and optimizing Transmission Control Protocol (TCP) connection reuse and session continuity to ensure efficient resource utilization and seamless user experience, using OneConnect and persistence profiles.  
• DE implementing global traffic distribution strategies using F5 BIG-IP Global Traffic Manager (GTM), to ensure high availability and disaster recovery across geographically distributed data centers (using F5 BIG-IP GTM health checks); configuring intelligent domain name system (DNS) balancing based on geolocation, using Topology records, server health, and performance metrics (using Datadog, BIG-IP Dashboards, and Splunk); and designing failover mechanisms and real-time traffic steering policies, using irules and F5 health Monitors. 
• DE performing F5 upgrades and Return Merchandise Authorization (RMA) processes  to ensure minimal downtime and seamless reintegration with validated failover, using F5 configuration utility and Traffic Management Shell (TMSH); integrating telemetry and Simple Network Management Protocol (SNMP) traps for real-time monitoring, using Splunk and Grafana; and tuning TCP profiles and analyzing traffic to resolve latency, Secure Socket Layer, and persistence issues, using Wireshark and tcpdump. 
• DE performing software lifecycle management for enterprise networks (including lab testing, certification, and change schedules aligned with IT Service Management practices), using Jira tool by Atlassian; and streamlining incident, problem, change, and request workflows, with customizations based on Information Technology Infrastructure Library (ITIL) standards, using ServiceNow.

#PE1M2

#LI-DNI

Most roles at Fidelity are Hybrid, requiring associates to work onsite every other week (all business days, M-F) in a Fidelity office. This does not apply to Remote or fully Onsite roles. Some roles may have unique onsite requirements. Please consult with your recruiter for the specific expectations for this position.

Please be advised that Fidelity’s business is governed by the provisions of the Securities Exchange Act of 1934, the Investment Advisers Act of 1940, the Investment Company Act of 1940, ERISA, numerous state laws governing securities, investment and retirement-related financial activities and the rules and regulations of numerous self-regulatory organizations, including FINRA, among others. Those laws and regulations may restrict Fidelity from hiring and/or associating with individuals with certain Criminal Histories.