Job Description:

Job Title – Senior Network Engineer – Employee Remote Acces

Shape the future of secure remote connectivity by working on enterprise-scale Zero Trust, VPN modernization, and remote access solutions that support employees across the globe.

The Purpose of This Role

We are seeking a skilled Senior Network Engineer with expertise in VPN, Zero Trust, and secure remote access technologies to support the design, implementation, and operations of our Enterprise Remote Access (ERA) platform. In this role, you will help deliver secure, reliable, and seamless connectivity solutions that enable employees to access enterprise resources from anywhere while maintaining the highest standards of security and user experience. You will contribute to strategic initiatives such as remote access modernization, network segmentation, and data protection, while ensuring operational excellence, service availability, and business continuity through robust architecture, resiliency planning, and disaster recovery solutions.

The Value You Deliver

•        Design and implement robust and cost-effective Remote Access solutions exploiting emerging technologies and innovative ideas to provide compelling client solutions.

•        Develop and manage an engineering plan, based on provided architectural documents.

•        Document and communicate engineering and operational deliverables.

•        Manage product lifecycle.

•        Assist with the evaluation and engineering of software products and technologies and provide recommendations regarding selection and adoption, backed by rigorous analysis and justification.

•        Assist with pilots for new products and technologies, analyse the value and impact from technical perspectives, and effectively communicate results and recommendations.

•        Be an active advisor for operational processes and policies mandated by the enterprise.

•        Provide operational support on current Remote Access solutions like Ivanti/Pulse and Zscaler Private Access VPN technologies.

•        Member of 3rd level engineering escalation assists in troubleshooting remote access issues.

•        Work closely with EI support partners to ensure availability of Remote Access infrastructure.

The Skills that are Key to this role

Core Network Security & Architecture

·        Advanced expertise in enterprise Network Segmentation and Recovery Planning design infrastructure.

·        Hands-on engineering of Layer 2 through Layer 7 segmentation frameworks (VLANs, VRFs, micro-segmentation).

·        Proven mastery of Software-Defined Networking (SDN) and automated micro-segmentation deployment strategies.

·        Designing end-to-end Traffic Isolation policies and enterprise-wide security policy enforcement.

·        Integrating segmentation controls with Next-Gen Firewalls, IDS/IPS, SIEM, EDR, and NAC platforms.

·        Architecting hybrid-cloud segmentation blueprints across AWS, Azure, or on-premises environments.

·        Practical implementation of Zero Trust Network Access (ZTNA) frameworks to reduce lateral attack surfaces(ZIA, ZPA, ZDX).

Remote Access & Network Operations

·        Design and deploy ZPA application segments with least-privilege access policies, eliminating implicit trust and reducing lateral movement risk across the enterprise.

·        Deep engineering knowledge of secure enterprise Remote Access and Zscaler Private Access (ZPA) VPN solutions.

·        Architect and deliver enterprise Zscaler solutions supporting and migrating from legacy VPN technologies to Zscaler Private Access (ZPA) cloud infrastructure.

·        Deploy, configure, and optimized Zscaler Client Connector (ZCC, ZIA, ZPA) policies, secure access controls across enterprise endpoints, resolving complex policy enforcement and connectivity issues.

·        Engineer and deploy highly available ZPA App Connectors and Network connectors implementing redundancy, failover, and scalable secure connectivity for private enterprise applications

·        Architect secure connectivity for private data center applications to, defining access policies, traffic routing, authentication flows, and security controls to enable resilient hybrid-cloud application access.

·        Execute end-to-end validation of application connectivity, traffic flows, authentication, and policy enforcement to ensure successful production onboarding and operational readiness. 

·        Collaborate with Network, infrastructure, and security teams to deliver enterprise security initiatives, troubleshoot deployment challenges, and support secure access transformations.

·        Perform advanced L3–L7 troubleshooting across TCP/IP, DNS, HTTP/S, SSL/TLS, and proxy traffic using Wireshark to identify and resolve complex network and application issues.

·        Participate in customer-facing troubleshooting and root cause analysis for proxy, authentication, and secure access related issues.

·        Collaborate with cross-functional teams to improve security posture through granular access controls, DLP policy validation, and secure browser access strategies.

·        Advanced configuration and management of Application Delivery Controllers (ADCs) and load-balancing technologies.

·        Infrastructure automation and network scripting using Python, Ansible, or equivalent toolsets.

·        Infrastructure performance tuning and configuration optimization for highly segmented traffic

Cryptography & Data Protection

·        Comprehensive understanding of Public Key Infrastructure (PKI), Certificate Authorities, and enterprise certificate lifecycle management.

·        Mastery of operating system key stores, including CryptoAPI (CAPI), macOS Keychain, key escrow, and key history.

·        Deep theoretical and practical knowledge of symmetric/asymmetric encryption and cryptographic hashing algorithms.

·        Strong familiarity with endpoint web security suites, identity verification systems, etc.

Technical /  Behavioral

·        You should have strong analytical mindset focused on data-driven technology evaluation and product justification.

·        You need to have an excellent cross-functional communication skills to articulate technical security frameworks to diverse stakeholders.

·        You need to be a proactive technical leadership capable of managing Tier-3 incident escalations under pressure.

The Skills that are Good To Have for this role

·        Understanding of AI/ML concepts and their application in network operations, security monitoring, and predictive analytics.

·        Experience with AI-driven Network Operations (AIOps) platforms for event correlation, anomaly detection, and automated incident remediation.

·        Awareness of emerging AI-driven capabilities in Zero Trust Network Access (ZTNA), Secure Access Service Edge (SASE), and Enterprise Remote Access solutions.

How Your Work Impacts the Organization

As a core member of the Enterprise Cloud, Infrastructure & Operations (ECIO) team, you will directly influence the stability, security, and efficiency of the foundational technology powering our global financial services. Your engineering expertise ensures that critical data centers, cloud networks, and storage systems remain completely secure yet highly accessible. By pioneering advanced network segmentation models and architecting resilient recovery planning and design strategies, you safeguard the enterprise against lateral cyber threats and ensure uninterrupted business continuity. Operating within an innovative, agile, and collaborative US-India ecosystem, your work empowers our workforce with the secure, high-performance remote access needed to deliver a premium, seamless customer experience.

The Expertise We’re Looking For

·        Professional Experience: 6–8 years of total IT experience, with a strict minimum of 5 years dedicated to engineering core network segmentation, traffic isolation models, and Zscaler Private Access (ZPA) VPN solutions.

·        Educational Background: Bachelor of Engineering (B.E.) or Bachelor of Technology (B.Tech) in Computer Science, Information Technology, Electronics, or a related technical stream.

·        Disaster Recovery Skills: Proven hands-on track record in business continuity infrastructure, failover design, and infrastructure recovery planning and design.

·        Industry Certifications: ITIL Foundation or formal IT Service Management (ITSM) certifications are highly preferred and considered a strong advantage.

Company Overview

Fidelity Investments is one of the world's largest providers of financial services. Headquartered in Boston, US, Fidelity's goal is to make financial expertise broadly accessible and effective in helping people live the lives they want. Privately held for nearly 70 years, Fidelity employs 45,000 associates who are focused on the long-term success of our customers. FMR (Fidelity Management & Research) India is the Global Inhouse Center of Fidelity Investments. Headquartered at Bangalore, where operations commenced in 2003, FMR India has another fully-functional unit at Chennai. To know more

visit: FMR India

Location : Bangalore - EGL / Chennai

Shift timings: Rotational coverage windows including 2:00 PM – 11:00 PM IST and 5:30 PM – 2:30 AM IST to ensure seamless overlap with global teams.

Certifications:

Category: