DMZ Network Architect - Secure, Scalable Connectivity

BNY; Pittsburgh (Allegheny County); On-site; USD 120,000 - 160,000; Full time

Job summary

BNY is seeking a DMZ Network Engineer to join the Network Services team in its Infrastructure Platform in Pittsburgh or Lake Mary. The role focuses on designing secure, scalable DMZ architectures and aligning network designs with enterprise requirements.

You will collaborate with security, application, and operations teams to implement routing, firewall, load balancing, and web proxy patterns, while documenting standards and plans for ongoing reliability.

Qualifications

• 8+ years of network engineering experience with design/architecture.
• Expertise in DMZ design and enterprise network architecture.
• Strong routing knowledge with emphasis on BGP.
• Experience with firewalls, load balancers, and web proxies in enterprises.
• Hands-on Cisco ACI and SD-WAN knowledge.
• Ability to translate requirements into scalable network designs.

Responsibilities

• Design and implement DMZ network architectures for secure, scalable connectivity.
• Develop designs for routing, firewalls, load balancing, and web proxies.
• Define application service patterns and authentication-integrated connectivity.
• Engineer segmentation and controlled communications across environments.
• Create and maintain network diagrams and documentation.
• Translate business and security requirements into practical designs.
• Collaborate with security, application, and operations teams.
• Lead or contribute to new services and modernization efforts.
• Evaluate designs and recommend improvements for security and performance.
• Support troubleshooting and change planning for DMZ connectivity.
• Promote repeatable engineering practices and documentation.

Skills

DMZ network design

BGP routing

Firewall design

Cisco IOS-XE

NX-OS

SD-WAN

Cisco ACI

Communication

Job description

BNY is seeking a DMZ Network Engineer to join the Network Services team in its Infrastructure Platform in Pittsburgh or Lake Mary. The role focuses on designing secure, scalable DMZ architectures and aligning network designs with enterprise requirements.

You will collaborate with security, application, and operations teams to implement routing, firewall, load balancing, and web proxy patterns, while documenting standards and plans for ongoing reliability.