Technical Consultant - Enterprise Network Security Services

About the Opportunity

Job Type: Permanent

Application Deadline: 31 January 2027

Title Technical Consultant – Enterprise Network Security Services

Department Enterprise Network & Multimedia Services

Location Dalian

Reports To Senior Technical Manager – Enterprise Network Security Services

Level Grade 5

Fidelity International offers world class investment solutions and retirement expertise. As a privately owned, independent company, investment is our only business. We are driven by the needs of our clients, not by shareholders. Our vision is to deliver innovative client solutions for a better future.

Our people are passionate, engaged, smart and curious, and we give them the independence and the confidence to make a difference. While we take pride in the excellence of our investment solutions and client service, we know we can always do better. We are honest, respectful and make tough calls, challenging the status quo to achieve better outcomes through innovation. Above all else, we always put our clients first.

About your team

The Enterprise Network Security Services team is part of the Enterprise Network & Multimedia Services group, within the Enterprise Infrastructure Services technical division.

The Enterprise Infrastructure Services (EIS) division delivers secure, reliable, and globally accessible IT infrastructure (both on-premises and cloud) supporting Fidelity’s applications, services, and dynamic working environment. The Enterprise Network & Multimedia Services group provides global network connectivity solutions across 60+ office locations, core data centers, and cloud partners. It also delivers multimedia connectivity through telephony and conferencing systems both on-premises and in the cloud. The group aims to ensure resilient, high-performance network and multimedia services company-wide and on a global scale.

The Enterprise Network Security Services team is a dynamic global unit with members across APAC, India, and the UK. It is responsible for the full lifecycle of network security services, covering product strategy, architecture, implementation, operations, and lifecycle governance. The team manages and continuously evolves key security platforms including Palo Alto next-generation firewall technologies and Cisco Secure Workload (CSW) alongside identity-based access control and secure internet access services. Working closely with Cyber Security, Architecture, Engineering, and Infrastructure teams, the group continually enhances Fidelity's security posture through network segmentation, Zero Trust principles, automation, AI-assisted security capabilities, and continuous compliance improvement.

• About your role
• As a Technical Consultant within the Enterprise Network Security Services team, you will play a key role in the design, implementation, governance, and continuous improvement of Fidelity's global network security platforms and services. You will work closely with Engineering teams, Cyber Security, Enterprise Architecture, and business stakeholders to deliver and maintain secure, scalable, and resilient network security solutions.

The role combines deep technical expertise with solution design, project delivery, operational excellence, and technology modernization. You will contribute to strategic initiatives, support major transformation programs, and help evolve the network security portfolio through automation, cloud adoption, zero-trust architectures, and AI-enabled security capabilities.

About you

The ideal candidate brings extensive experience in enterprise network security engineering and architecture, with a proven track record of delivering complex security solutions and supporting large-scale technology transformation initiatives within enterprise environments. Experience within financial services or other highly regulated industries is highly advantageous. You should be comfortable working across architecture, engineering, operations, and project delivery, ensuring security solutions are effectively designed, implemented, and transitioned into service.

You should have strong experience translating business and security requirements into practical technical solutions and operational processes. This includes developing and reviewing solution designs, supporting technology roadmaps, defining technical standards, and ensuring solutions meet requirements for security, resilience, compliance, and operational efficiency. Experience participating in major programs, technology migrations, vendor engagements, and cross-functional delivery projects will be highly valued.

You are expected to demonstrate strong technical expertise across enterprise network security domains, including next-generation firewalls, network segmentation, Zero Trust architectures, identity-based security controls, secure internet access, threat prevention, and security operations. In particular, hands-on experience with Palo Alto next-generation firewalls and Cisco Secure Workload (CSW) or equivalent workload segmentation platforms is highly desirable. The ideal candidate should also possess solid networking fundamentals across routing and switching, data center networking, DNS, load balancing, VPN technologies, and cloud networking, enabling effective design and troubleshooting of end-to-end enterprise solutions. Knowledge of cloud security, security automation, DevOps-aligned practices, AI-assisted security operations, and regulatory frameworks such as the Digital Operational Resilience Act (DORA) would be advantageous. Strong stakeholder management, analytical thinking, problem-solving skills, and the ability to influence technical decisions across multiple teams are essential.

Technical Skills & Experience

• •Strong hands-on experience supporting and operating enterprise security platforms, particularly Palo Alto next-generation firewalls and Cisco Secure Workload (CSW) or equivalent segmentation technologies.
• •Proven experience delivering security solutions within large-scale enterprise or hybrid cloud environments.
• •Experience participating in complex infrastructure transformation, security modernization, or regulatory compliance initiatives.
• •Good understanding of security automation, Infrastructure-as-Code (IaC), DevOps practices, and modern operational models.
• •Professional certifications such as CCNP Security, PCNSE, CISSP, CCIE Security, TOGAF, as well as recognized certifications in cloud platforms (AWS, Azure, or Google Cloud), DevOps and Infrastructure-as-Code technologies (such as Terraform or Kubernetes), and AI-related technologies are highly desirable.

Responsibilities

In this role, you will contribute to the delivery, operation, and continuous evolution of Fidelity's network security services while supporting strategic initiatives and maintaining operational excellence.

Network Security Solution Design & Engineering

Design, implement, and maintain enterprise network security solutions across on-premises and cloud environments, with particular focus on Palo Alto firewalls, Cisco Secure Workload (CSW), network segmentation, Zero Trust controls, and security policy enforcement.

• •Develop and review High-Level Designs (HLDs), Low-Level Designs (LLDs), standards, and implementation documentation.
• •Support security architecture reviews and provide technical guidance on network security best practices.
• •Contribute to network segmentation, Zero Trust, identity-based access control, and secure connectivity initiatives.
• •Evaluate emerging technologies and assist with Proof of Concept (PoC) activities and technical assessments.

Project Delivery & Technical Leadership

• •Participate in major infrastructure and security transformation programs from design through production deployment.
• •Support end-to-end project delivery activities including requirements gathering, design, testing, implementation, and operational handover.
• •Coordinate with Product Owners, Engineering teams, and project managers to ensure suc