> Markdown version of [/jobs/ext/4389735-senior-network-engineer-chicago](https://www.wearedevelopers.com/jobs/ext/4389735-senior-network-engineer-chicago). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Network Engineer (Chicago)

- **Company:** Fitch Group, Inc.
- **Location:** Chicago, IL, United States
- **Experience:** Expert
- **Salary:** $180,000.0 - $200,000.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Access, Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, Microsoft Azure, Software as a Service, Cloud Computing, Cloud Computing Security, Domain Name System (DNS), Log Analysis, Routing, Packet Analyzer, Reliability Engineering, Zero Trust Network Access, Web Application Security, Wide Area Networks, Wi-Fi Technology, Scripting, Transport Layer Security, Google Cloud, Cloud Platform System, Large Language Models, Firewalls (Computer Science), Oracle Cloud Infrastructure, Cisco
- **Published:** October 27, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=4d2d954435b83e2c

## About the Role

* You have hands-on engineering experience with Zscaler ZIA and ZPA, along with a strong understanding of SSE, SASE, Zero Trust, secure web gateway, private application access, DLP, CASB, SSL inspection, and cloud security concepts.

 * You bring strong networking fundamentals across routing, switching, DNS, proxy behavior, firewall policy, internet edge design, cloud connectivity, and troubleshooting.

 * You are comfortable evaluating security-sensitive access designs, policy changes, traffic flows, and exceptions using sound judgment that balances business needs, risk reduction, and protection of sensitive data.

 * You can work effectively across engineering, security, cloud, endpoint, operations, and business teams with strong ownership, clear communication, and a focus on supportable outcomes.

What Would Make You Stand Out:

 * Experience with scripting, APIs, automation, log analysis, packet capture tools, configuration validation, policy reporting, health checks, change readiness, or operational dashboards.

 * Cisco, Meraki, SD-WAN, or traditional enterprise networking experience, especially in environments undergoing network modernization.

 * Experience contributing to modernization programs such as Office Zero Trust, Wi-Fi, Meraki, cloud security enhancements, SD-WAN planning, and east-west inspection initiatives.

 * A track record of creating architecture diagrams, design documentation, standards, runbooks, troubleshooting guides, and knowledge-transfer materials that improve supportability and reduce single points of expertise.

## Description

The Network Engineering team designs, operates, and continuously improves the secure connectivity platforms that enable Fitch colleagues to work reliably across office, remote, and cloud environments. This role will partner closely with Security, Endpoint, Cloud, Reliability Engineering, Operations, and business teams to deliver supportable secure access designs and reduce operational dependency on a small number of subject matter experts.

How You'll Make an Impact:

 * Design, deploy, operate, and continuously improve Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) as core platforms for secure internet access, private application access, and user-to-application connectivity.

 * Implement and mature Zero Trust Network Access, application segmentation, least-privilege access controls, and secure access patterns across remote, office, and cloud environments.

 * Define, tune, and enforce security policies including URL filtering, SSL inspection, cloud application controls, browser isolation, DLP, and AI/LLM usage controls.

 * Enable secure access to workloads and applications hosted in AWS, Azure, OCI, and GCP while aligning access designs with operational resilience, supportability, and long-term network modernization goals.

 * Lead complex troubleshooting for user access, application connectivity, authentication, policy enforcement, service health, and performance issues, including log analysis, packet captures, and high-impact incident escalation support.