> Markdown version of [/jobs/ext/1137310-director-network-architect](https://www.wearedevelopers.com/jobs/ext/1137310-director-network-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Director, Network Architect - **Company:** Fmr LLC - **Location:** Westlake, TX, United States (Remote available) - **Contract:** Permanent contract - **Skills:** Secure Shell (SSH), Microsoft Access, Access Network, Amazon Web Services, Microsoft Azure, Border Gateway Protocol, Cloud Computing, Cyber Security, Data Centers, Dynamic Host Configuration Protocol, Domain Name System (DNS), Datagram Transport Layer Security, Internet Control Message Protocol, Multi-protocol Systems, Session Initiation Protocols, Kerberos (Protocol), Key Management, Network Security, Lightweight Directory Access Protocols (LDAP), Network Architecture, Network Segmentation, Open Shortest Path First (OSPF), NT LAN Manager, Akamai, Zero Trust Network Access, SAP Sales and Distribution, Simple Network Management Protocols, Syslog, Transmission Control Protocol (TCP), Virtual Local Area Networks, Wide Area Networks, Remote Desktop Protocol (RDP), Network Access Control, Computer Network Technologies, Multi-Cloud, Firewalls (Computer Science), Templating, Palo Alto Networks, Cisco - **Published:** July 2, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=ea1917cb89cfed2a ## About the Role * Required Experience: Network engineering and architecture. Focus on network security and segmentation initiatives. Core networking protocol knowledge: BGP, OSPF, EVPN-VXLAN, MPLS, VRF-Lite, and VLAN design. * Segmentation Expertise: Hands-on experience and architectural design using technologies such as Cisco TrustSec/ISE, Cisco Tetration/Secure Workload, Akamai Guardicore, Illumio, and/or Palo Alto Networks NGFW/App-ID. * Enterprise Security: Strong understanding of Zero-Trust Network Access (ZTNA), Secure Access Service Edge (SASE) architectures, and stateful firewalling. + In-depth knowledge of L3/4 protocols such as TCP,UDP, ICMP, and L7 protocols such as DNS, DHCP, Kerberos/NTLM, LDAP, SSH, RDP, DTLS, SMB, IKE, ISAKMP, HTTP/s, SIP, SNMP, Syslog, etc. + Strong understanding of encryption methods and technologies at all layers: network, link, file/block, table column/row/field, associated ciphers, and key management practices for both certificate private/public asymmetric keys as well as symmetric keys ## Description Role is for a visionary and highly technical Network Architect to protect critical assets, and enforce zero-trust principles. This architect will specialize in Network Segmentation technologies to design, implement, and evolve our next-generation enterprise network security architecture. In this role, you will be the primary blueprint contributor to define how our global network separates networks, isolates endpoint threats, and segments workloads. You will lead the strategic shift from traditional flat networks to highly secure, micro-segmented environments across on-premises data centers, global offices, and multi-cloud infrastructure., * Architecture and Strategy * Design Zero-Trust Frameworks: Define the overarching architectural strategy for macro- and micro-segmentation solutions across various areas of the Fidelity Multiservice Network: global WAN, regional centers, domestic and international satellite sites, data centers, colocation centers, investor centers, and public cloud environments (AWS, Azure). * Technology Selection: Evaluate, pilot, and select enterprise-grade segmentation technologies, including Software-Defined Access (SD-Access), Software-Defined WAN (SD-WAN), Zero Trust Network Access (ZTNA), Next-Generation Firewalls, and workload micro-segmentation * Standardization: Develop and maintain network and security standards, reference architectures, blueprint designs and Fact Sheets, and design templates. * Engineering and Implementation * Micro-Segmentation Deployment: Architect and oversee the deployment of host-based and fabric-based micro-segmentation solutions to protect critical workloads and applications. * Identity and Access Integration: Integrate network segmentation policies with enterprise identity providers (IdP) and Network Access Control (NAC) systems to enforce dynamic, identity-aware access controls. * Cloud and Hybrid Connectivity: Design secure, seamless, yet segmented connectivity between on-premise and cloud environments. * Collaboration and Governance * Cross-Functional Alignment: Partner closely with partners in Enterprise Cybersecurity and Network Engineering teams to translate architectural visions, strategies, and blueprints into deployment plans. * Risk and Compliance Support: Ensure network architectures comply with all relevant policies, standards and guidelines. * Mentorship: Provide technical leadership and mentorship to network engineering and operations teams, ensuring smooth operational handoffs. ## Related Videos - [How Cisco embraced a DevOps culture within its network engineering team](https://www.wearedevelopers.com/videos/99-how-cisco-embraced-a-devops-culture-within-its-network-engineering-team) - [What the Heck is Edge Computing Anyway?](https://www.wearedevelopers.com/videos/593-what-the-heck-is-edge-computing-anyway) - [Better Together: Leveraging Your Observability Tools as a SIEM](https://www.wearedevelopers.com/videos/2118-better-together-leveraging-your-observability-tools-as-a-siem) - [Small, Secure, Interconnected: The next Internet Protocol](https://www.wearedevelopers.com/videos/100062-small-secure-interconnected-the-next-internet-protocol) - [Your Infrastructure Is Not a Playground: AI Agents for Infra Done Right](https://www.wearedevelopers.com/videos/2084-your-infrastructure-is-not-a-playground-ai-agents-for-infra-done-right) - [Computer Vision from the Edge to the Cloud done easy](https://www.wearedevelopers.com/videos/263-computer-vision-from-the-edge-to-the-cloud-done-easy) ## Related Articles - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)