Principal ZTNA Network Engineer - Employee Remote Access

Soteria Reinsurance Ltd.

# Principal ZTNA Network Engineer – Employee Remote AccessApplylocations: Durham, NCtime type: Full timeposted on: Posted Yesterdayjob requisition id: 2130740## ## Job Description:**Note: Fidelity will not provide immigration sponsorship for this position.**The Role We are seeking a Senior ZTNA (Zero Trust Network Access) Network Engineer to lead the engineering, deployment, and optimization of secure remote access solutions across the enterprise. This role will drive the transition from legacy VPN technologies to modern Zero Trust architectures, with a strong focus on Zscaler (ZPA/ZIA) and enterprise ZVPN initiatives. You will design and implement secure, scalable, and resilient access solutions that enable seamless, secure connectivity to enterprise applications while eliminating implicit trust. This includes architecting Zero Trust segmentation, application-level access controls, and robust connectivity strategies for a global workforce. Responsibilities will include:* Lead design and implementation of ZTNA solutions (Zscaler ZPA/ZIA, ZVPN) to replace legacy VPN technologies* On call required rotation* Define and deliver modern Zero Trust architecture patterns, including application-level segmentation and identity-based access* Drive legacy VPN decommissioning and migration to ZTNA platforms* Develop and execute engineering roadmaps aligned to enterprise remote access strategy* Partner with security, infrastructure, and business units to ensure coordinated rollout and adoption* Document architecture, operational models, and implementation standards* Evaluate emerging ZTNA and secure access technologies and provide data-driven recommendations* Lead pilots and phased deployments, including testing, validation, and performance benchmarking* Act as a Tier-3 escalation lead for complex remote access and connectivity issues* Ensure high availability and resilience of remote access infrastructure in a 24x7 global environment* Assess and mitigate risks related to latency, scale, and user experience during migrationsThe Expertise and Skills You Bring* 6–10 years of network/security engineering experience, including 4+ years in ZTNA or remote access transformations* Bachelor’s degree in Computer Science, Information Technology, or related field* Hands-on experience with Zscaler (ZPA/ZIA) or comparable Zero Trust platforms* Proven success migrating legacy VPNs to Zero Trust, cloud-delivered access solutions* Deep expertise in ZTNA design, implementation, and Zero Trust principles (least privilege, continuous verification, no implicit trust)* Experience designing application segmentation and identity-based access policies* Strong knowledge of traffic steering, split tunneling, and secure access routing (ZVPN architectures)* Experience with load balancing, gateways, and access control layers* Advanced troubleshooting across network layers (L3–L7)* Familiarity with hybrid environments (on-prem, cloud, SaaS)* Ability to optimize latency, performance, and user experience in ZTNA environments* Experience with high availability, disaster recovery, and failover strategies in global, always-on environments* Experience with network automation tools (Python, Ansible, APIs)* Familiarity with endpoint management and deployment tools (Intune, SCCM)* Strong understanding of identity providers (Azure AD / Entra ID), SSO, and conditional access* Knowledge of PKI, certificates, and modern authentication methods* Experience integrating with SIEM, EDR, and security monitoring platforms* Strong ownership mindset with a focus on execution and delivery* Ability to thrive in fast-paced, ambiguous environments with competing priorities* Excellent communication skills across technical and business stakeholders* Proven ability to lead incident response and drive resolution under pressure* Preferred certifications: Zscaler (ZCCA / ZCCP / ZCSE), CCNP/CCIE (Security or Enterprise), CISSP (or equivalent), ITIL FoundationThe Team You will be part of the Enterprise Cloud, Infrastructure, and Operations (ECIO) organization, playing a central role in transforming the enterprise’s remote access strategy from legacy VPN to Zero Trust. This is a high-visibility, high-impact team focused on ZVPN rollout and enterprise-wide adoption, legacy VPN decommissioning, and Zscaler-driven Zero Trust transformation.The team operates in a global, 24x7 environment and partners closely with security, infrastructure, and business stakeholders. Together, you enable secure, seamless access to applications for a distributed workforce—reducing cyber risk, improving resilience, and supporting business continuity at scale.## ## Certifications:## ## Category:## Information TechnologyPlease be advised that Fidelity’s business is governed by the provisions of the Securities Exchange Act of 1934, the Investment Advisers Act of 1940, the Investment Company Act of 1940, ERISA, numerous state laws governing securities, investment and retirement-related financial activities and the rules and regulations of numerous self-regulatory organizations, including FINRA, among others. Those laws and regulations may restrict Fidelity from hiring and/or associating with individuals with certain Criminal Histories.
J-18808-Ljbffr

Vacancy posted 1 day ago

Similar jobs that could be interesting for youBased on the Principal ZTNA Network Engineer - Employee Remote Access in Durham, NC vacancy

Principal Network Engineer
...Cloud Infrastructure, Networking & Connected... ...days/week. The Principal Network Engineer serves as the senior-... ...data center, cloud, and remote workforce connectivity... ...NAC IDS/IPS ZTNA SSL Inspection... ...Wireless Security Guest Access Design Education...
Remote work
Principal
Contract work
Work at office
Arctiq
Charlotte, NC
5 days ago
Infrastructure & Digital Employee Experience, Principal Program Manager
$156k - $234k
...initiatives. We partner across engineering, infrastructure,... ...and Digital Employee Experience (DEX) portfolio... ...RoleWorkday is seeking a Principal Program Manager to lead... ...: in-person time and remote. Our approach enables... ...committed to providing an accessible and inclusive hiring...
Remote work
Principal
Full time
Work at office
Home office
Flexible hours
Shift work
Workday
Pleasanton, CA
2 days ago
Principal Network Engineer
...Role Overview The Principal Network Architect is the highest-level individual contributor in the Network Engineering organization and the technical authority for the entire... ..., private peering, internet exchange access, and cloud on-ramps - and specify the provisioning...
Remote work
Principal
Flexible hours
Cyxtera
United States
1 day ago
Network Engineer Senior/Principal
$96.57k - $130.65k
...: Any Location / Remote Full Part/Time:... ...Skills: Enterprise Network, Network Firewalls... ...as a Network Engineer Senior and help ensure... ...Engineer Senior/Principal , you will help... ...Manager, Prisma Access, GlobalProtect, Juniper... ...for all US-based employees includes a variety...
Remote work
Principal
Full time
Temporary work
Part time
For subcontractor
Immediate start
Work from home
Worldwide
Flexible hours
GDIT
Louisiana
2 days ago
Principal Network Sales Engineer - Service Provider
$199k - $411.5k
Principal Network Sales Engineer - Service ProviderThis role has been designated as ‘Remote/Teleworker’, which means you will primarily work from... ...Strong knowledge of routing in access, metro, and core backbone... ...75%/25%."Information about employee benefits offered in the US...
Remote work
Principal
Full time
Work experience placement
Local area
Immediate start
Work from home
Hewlett Packard Enterprise
Texas
20 hours ago
Principal OR Sr. Principal Electronics Engineer - Network Engineer
$114k - $171k
...Northrop Grumman, our employees have incredible opportunities... ...is looking to add a Principal or a Sr. Principal Electronics Engineer - Network Engineer to join our... ...our facility.There is NO remote / hybrid / telework... ...security features like IP access-listsExperience with network...
Remote work
Principal
Full time
Relocation package
Shift work
Northrop Grumman
San Diego, CA
4 days ago
Technical Principal - Global Network Engineer
...days a week/3 days remote) at our Arlington... ...VRF, and QoSCampus network switching design... ...Equinix, Azure)Network Access Control using... ...years in network engineering and design strongly... ...assistance, training, GM employee auto discount,... ...Network Technical Principal, under the general...
Remote work
Principal
Work experience placement
Work at office
Flexible hours
2 days per week
GM Financial
Arlington, TX
20 hours ago
Principal Network Engineer
...operational foundation to support a growing network of manufacturing companies,... ...technology infrastructure. The Principal Network Engineer will be the senior technical owner of... ...next-generation firewalls and secure remote access, including jump/bastion hosts into...
Remote work
Principal
VAYLENT
Santa Fe Springs, CA
2 days ago
Principal Network Engineer
...Description Job Description Principal Network Engineer Why Texas Association of... ...it serves. Today, 500 employees work together to promote... ...program, tuition reimbursement, remote and hybrid work options for... ...in Juniper EX Series (access/distribution/core switching...
Remote work
Principal
Local area
Flexible hours
Texas Association of School Boards
Austin, TX
17 days ago
Principal Network Engineer
$160k - $220k
...Montera is seeking a Principal Network Engineer to owns the architecture, security... ...— so the customer data-access model (what the customer sees... ...architecture and policy, secure remote-access patterns, role-based... ...90% of health premiums for employees and their dependents....
Remote work
Principal
Immediate start
Montera
United States
2 days ago
Principal Network Engineer
$141.5k - $236k
...Principal Network Engineer Unlock the secrets of intelligence with MANTECH! Join... ...about inside the office to access file cabinets, office... ..., geographic location (For Remote Opportunities), education and... ...addition, MANTECH invests in its employees beyond just compensation....
Remote work
Principal
Hourly pay
Contract work
Temporary work
Work experience placement
Work at office
Local area
ManTech
Chantilly, Loudoun County, VA
20 hours ago
Consulting/Principal AWS Network Infrastructure Engineer
$104.9k - $174.7k
...We are open to hiring on a remote basis in the United States... ...150 countries with 11,800 employees globally. We are part of... ...As a Consulting AWS Cloud Network Infrastructure Engineer, you will help define best... ...specific benefits. Click** **to access benefits specific to your...
Remote work
Principal
Temporary work
Local area
Immediate start
Flexible hours
LexisNexis Risk Solutions
Raleigh, NC
1 day ago
Remote Epic Principal Trainer - Patient Access
...A leading health technology provider is seeking an Epic Principal Trainer for Patient Access in Raleigh, NC. This remote position requires certification as a Principal Trainer for specific Epic applications and extensive experience in instruction design. The role involves...
Remote work
Principal
Software Technology Inc
Raleigh, NC
4 days ago
Principal Network Engineer - F5
$172k - $215k
...of institutions to increase access to financial services and... ...Overall Purpose The F5 Principal Network Engineer acts as a subject matter expert... ..., securing local and remote networks and routing protocols... .../or external customers. Employee must be able to perform...
Remote work
Principal
Hourly pay
Work at office
Local area
Immediate start
Visa sponsorship
Work visa
Flexible hours
Early Warning Services
Chicago, IL
3 days ago
Network Engineer, Principal Specialist, Onsite, Marlborough, MA
$86.8k - $165.2k
...required on day 1Network Engineer, Principal Specialist (P3)... ...high impact team as a Network Engineer, Principal Specialist... .... Experience with access control list,... ...classified as:.Onsite: Employees who are working in Onsite... ...on-site, hybrid or remote.The salary range for...
Remote work
Principal
Temporary work
Work experience placement
Interim role
Work at office
Local area
Worldwide
Relocation
Relocation package
Flexible hours
Weekend work
Afternoon shift
Raytheon
Boston, MA
2 days ago
Network Engineer Principal
DescriptionMay design, analyze, plan, modify, and maintain networks and network components supporting data, voice and/or audio communication... ...organizations. Will perform network monitoring of on-prem and remote systems. Will perform troubleshooting and operations/...
Remote work
Principal
Science Applications International Corporation
Chantilly, Loudoun County, VA
2 days ago
Principal Cloud Engineer
Role Description Our Principal Cloud Engineer is a senior technical... ...level knowledge of Azure networking including hub-spoke... ..., least-privilege access, and certificate lifecycle... ...Network Access (ZTNA) solutions preferred.... ...~An award-winning remote work environment....
Remote work
Principal
Full time
MRIoA
Remote
3 days ago
Principal Inbound Product Manager - AI Assistant (Employee Experience)- MoveWorks
$221.2k - $387.1k
Principal Inbound Product Manager - AI Assistant (Employee Experience)- MoveWorks Company Description It... ...2004 when a visionary engineer, Fred Luddy, saw the potential... ...personas (flexible, remote, or required in office)... ...We strive to create an accessible and inclusive...
Remote work
Principal
Work at office
Flexible hours
Moveworks
Mountain View, CA
3 days ago
Network Engineer Principal
...The Navy Tactical Common Data Link (NTCDL) team needs a Senior Network Engineer contractor to support networking efforts throughout the NTCDL... ...solve complex problems independently. The position is Hybrid/Remote located in San Diego, CA. JOB DUTIES:Analyze and administer...
Remote work
Principal
For contractors
Work at office
Local area
Science Applications International Corporation
San Diego, CA
2 days ago
Principal Network Engineer
$139.1k - $251.45k
Leidos has a new and exciting opportunity for a Principal Network Engineer in our Intelligence Sector’s, Cyber & Analytics Business Area (CABA).... ...scheduling and guaranteed on-call compensationProvide primarily remote on-call support; occasional on-site response may be...
Remote work
Principal
Full time
Immediate start
Flexible hours
Leidos
Columbia, MD
4 days ago
Principal Network Engineer
...Principal Network Engineer The client is seeking a principal network engineer to design, implement, and maintain highly available networking... .... This role is onsite in Gilbert, AZ, or Cheyenne, WY, but remote candidates willing to travel once a month will be considered...
Remote work
Principal
Night shift
RIT Solutions
United States
1 day ago
Principal Product Manager - Access Control
$158.8k - $279.2k
...a strategic and customer-focused Principal Product Manager to join the Access Control product team and help shape... ...This role collaborates closely with engineering, architecture, design, security,... ...security challenges. Location: Remote within US (not limited to the states...
Remote work
Principal
Full time
Work from home
Flexible hours
Genesys
Remote
20 hours ago
Principal/Sr Principal Network Engineer
$94.2k - $141.2k
...TimeDescriptionAt Northrop Grumman, our employees have incredible... ...are seeking an experienced Network Engineer to join our dynamic team of... ...position may be filled at the Principal Network Engineer level or the... ...hardening, secure configuration, access control) in collaboration...
Remote work
Principal
Full time
Relocation package
Shift work
Night shift
Northrop Grumman
San Antonio, TX
2 days ago
Principal Cloud & DevSecOps Architect
$178k - $195k
...the role:Bixal is seeking a Principal Cloud & DevSecOps Architect to... ...hands-on technical leadership to engineering teams. The ideal candidate is... ....Location:This is a fully remote position. Must be legally... ...container orchestration, identity/access management, and...
Remote work
Principal
Temporary work
Local area
Flexible hours
Weekend work
Bixal
Fairfax, VA
3 days ago
Principal Engineer Core Network & Ethernet Services (Remote) - Telecommunications
$145k
...Join a well-funded US fibee network operator expanding its next-... ...is ideal for an experienced Principal Engineer looking to take ownership of... ...core, aggregation, and XGS-PON access networks, playing a critical... ...: ~ Medical cover ~ Remote flexibility (Dallas preferred...
Remote work
Principal
Full time
Dallas, TX
11 days ago
Principal Network Engineer
...sponsorship for this position. Job Title: Principal Network Engineer - Network Segmentation   Role Summary... ...understanding of Zero-Trust Network Access (ZTNA), Secure Access Service Edge (SASE)... ...transition does not apply to fully remote roles.Certifications:Category:Information...
Principal
Full time
Shift work
Fidelity Investments
Westlake, LA
1 day ago
Principal PreSales Systems Engineer - HPE Networking (Southern California)
$199k - $411.5k
Principal PreSales Systems Engineer - HPE Networking (Southern California)This role has been designated as ‘Remote/Teleworker’, which means you will primarily work... ..., Cloud NAC, Juniper Access Assurance.Wireless Design... ...25%."Information about employee benefits offered in the...
Remote work
Principal
Full time
Work experience placement
Local area
Immediate start
Work from home
Hewlett Packard Enterprise
Los Angeles, CA
20 hours ago
Principal Cloud Services Architect
$111k - $207k
...thrive.Your day at NTT DATAAs a Principal Cloud Services Architect at... ...of cloud technologies, networking, security, and system administration... ...starting pay range for this remote role is [annual salary range... ...countries. We also offer clients access to a robust ecosystem of...
Remote work
Principal
Hourly pay
Full time
NTT DATA
Texas
1 day ago
Sr Principal Network Engineer - Secret
$129.3k - $193.9k
...TimeDescriptionAt Northrop Grumman, our employees have incredible opportunities... ...by expanding your personal network and developing skills,... ...is seeking a Sr. Network Engineer to support information system... ...ability to obtain, and maintain, access to Special Programs as a...
Remote work
Principal
Full time
Relocation package
Flexible hours
Shift work
Weekend work
Northrop Grumman
San Diego, CA
1 day ago
Senior Principal Network Engineer, onsite, Tucson, AZ
$107.5k - $204.5k
...clearance required on day 1Senior Principal Network EngineerManager,... ...of experience and renowned engineering expertise to meet the needs... ...position is classified as:Onsite: Employees who are working in Onsite... ...as on-site, hybrid or remote.The salary range for this role...
Remote work
Principal
Temporary work
Work experience placement
Work at office
Local area
Relocation
Relocation package
Flexible hours
Weekend work
Afternoon shift
Raytheon
Tucson, AZ
2 days ago

Do you want to receive more vacancies?

Subscribe and receive similar vacancies to Principal ZTNA Network Engineer - Employee Remote Access. Be the first to apply!