Managed File Transfer Engineer

Brown Brothers Harriman; Boston (MA); On-site; USD 90,000 - 130,000; Full time

Job summary

BBH is seeking an experienced MFT Engineer to engineer, secure, automate, and support enterprise MFT and Enterprise Fax services.

The role focuses on platform architecture, reliability, security, observability, and lifecycle management, with emphasis on reducing manual processes and technical debt in a complex enterprise.

You will partner with Data Movement Technology leadership and cross‑functional teams to deliver scalable, secure, and highly available file-transfer solutions.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or related field, or equivalent professional experience.
• 5+ years of experience with middleware, Managed File Transfer, or related enterprise infrastructure technologies.
• Hands-on experience installing, configuring, upgrading, patching, migrating, and troubleshooting MFT platforms.
• Strong understanding of MFT architecture and secure file-transfer design.
• Strong knowledge of file-transfer protocols (SFTP, HTTPS, AS2, FTP).
• Strong scripting and automation skills using PowerShell, Python, Shell, and Ansible.

Responsibilities

• Design, build, and maintain enterprise MFT infrastructure and supporting technologies.
• Engineer secure, scalable, highly available file-transfer solutions from source to destination.
• Develop and maintain technical standards and engineering controls for MFT platforms and services.
• Develop automation to deploy, validate, monitor, and operate MFT platforms.
• Provide Level 3 engineering support for complex MFT and infrastructure incidents.
• Document technical findings and reusable resolutions.

Skills

MFT architecture

Automation engineering

Windows and Linux

Scripting & automation

Education

Bachelor's degree in CS/IT

Tools

PowerShell

Python

Shell

Ansible

Splunk

Job description

At BBH, Partnership is more than a form of ownership—it’s our approach to business and relationships. We know that supporting your professional and personal goals is the best way to help our clients and advance our business. We take that responsibility seriously. With a 200-year legacy and a shared passion for what’s next, this is the right place to build a fulfilling career.

Position Summary

We are seeking an experienced Managed File Transfer (MFT) Engineer to help engineer, secure, automate, and support the technology platforms that provide enterprise Managed File Transfer and Enterprise Fax services.

Working closely with Data Movement Technology leadership and partner technology teams, this individual contributor will provide deep technical expertise across MFT platforms and their supporting infrastructure. The engineer will be responsible for platform architecture and engineering, reliability, security, automation, observability, lifecycle management, and Level 3 production support.

A key focus of this position is continuous improvement. You will identify opportunities to improve resiliency, security, scalability, automation, monitoring, and operational supportability while modernizing legacy technologies and reducing manual processes and technical debt.

The ideal candidate combines strong MFT and infrastructure engineering experience with hands‑on automation, troubleshooting, and problem‑solving skills and is comfortable supporting mission‑critical services in a complex enterprise environment.

Key Responsibilities

MFT Platform Engineering & Architecture

• Design, build, maintain, and enhance enterprise Managed File Transfer infrastructure and supporting technologies.
• Engineer secure, scalable, highly available file‑transfer solutions from source through destination.
• Develop and maintain technical standards and engineering controls for MFT platforms and services.
• Analyze application and infrastructure performance and implement improvements that increase stability, reliability, and availability.
• Review new file‑transfer requirements and ensure implementations accurately represent the intended source‑to‑target data flow.
• Evaluate technical debt, unsupported components, architectural limitations, and modernization opportunities.

Automation & Observability

• Develop automation using PowerShell, Python, Shell, Ansible, Linux tooling, and other appropriate technologies.
• Automate deployments, administration, validation, monitoring, and repetitive operational processes to reduce manual effort and operational risk.
• Use Splunk and other observability technologies to develop effective platform monitoring, health checks, dashboards, alerts, and incident detection.
• Improve centralized logging, event correlation, incident pattern recognition, and actionable alerting.
• Ensure appropriate diagnostic and audit information is available for troubleshooting and incident investigation.

Security Engineering

• Define and implement secure MFT standards covering SFTP, HTTPS, AS2, encryption, authentication, SSL/TLS certificates, service accounts, privileged access, and least‑privilege principles.
• Support modernization and remediation of legacy file‑transfer technologies, protocols, and configurations.
• Manage and troubleshoot SSL/TLS certificates and related security dependencies.
• Partner with Information Security, Networking, Infrastructure, and application teams to remediate vulnerabilities and strengthen platform controls.

Platform Lifecycle & Production Engineering

• Engineer and implement operating systems, middleware, database, application, and infrastructure upgrades required to maintain supported platforms.
• Participate in platform upgrades, migrations, patching, and infrastructure changes from technical design through production implementation.
• Develop repeatable deployment procedures, technical validation criteria, rollback procedures, and implementation documentation.
• Support Business Continuity and Disaster Recovery planning, testing, and remediation activities.
• Maintain architecture diagrams, engineering standards, technical documentation, and support procedures.

Level 3 Support & Problem Management

• Provide Level 3 engineering support for complex MFT, infrastructure, connectivity, and Data Movement incidents.
• Partner with Operations and global support teams during critical production incidents to restore service and identify corrective actions.
• Conduct root‑cause analysis for recurring issues and develop permanent engineering solutions where possible.
• Document technical findings and reusable resolutions to improve operational support.

Required Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field, or equivalent relevant professional experience.
• 5+ years of experience with middleware, Managed File Transfer, or closely related enterprise infrastructure technologies.
• Demonstrated experience engineering and supporting mission‑critical production platforms. Financial‑services experience is preferred.
• Hands‑on experience installing, configuring, upgrading, patching, migrating, and troubleshooting Managed File Transfer platforms.
• Strong understanding of MFT architecture and secure file‑transfer design.
• Strong knowledge of file‑transfer and communication protocols, including SFTP, HTTPS, AS2, and FTP.
• Strong knowledge of network concepts including LAN, VLAN, DMZ, firewalls, load balancing, and network segmentation.
• Hands‑on experience with Windows Server and Linux.
• Strong scripting and automation skills using one or more of PowerShell, Python, Shell, and Ansible.
• Experience developing automated deployment, administration, validation, or operational processes.
• Experience with logging and observability platforms such as Splunk.
• Experience with SSL/TLS certificates, certificate lifecycle management, and certificate‑related troubleshooting.
• Understanding of PGP encryption, authentication, privileged access, service accounts, and least‑privilege security principles.
• Experience providing Level 3 engineering support for business‑critical technology services.

Preferred Qualifications

• Experience in a highly regulated or financial‑services environment.
• Experience with VMware or comparable virtualization technologies.
• Working knowledge of SQL and Transact‑SQL, with exposure to Oracle databases.
• Familiarity with .NET or C#.
• Experience with enterprise workload/job‑scheduling technologies such as AutoSys or similar platforms.
• Experience with enterprise Business Continuity and Disaster Recovery testing.
• Experience modernizing legacy infrastructure or file‑transfer technologies.

Communication & Collaboration

• Strong written and verbal communication skills.
• Ability to explain complex technical concepts to technical and non‑technical audiences.
• Strong analytical, troubleshooting, and root‑cause‑analysis skills.
• Ability to manage multiple priorities and coordinate work across Engineering, Operations, Infrastructure, Networking, Information Security, and client‑facing technology teams.
• Strong customer‑service orientation and sense of ownership.
• Ability to work effectively with globally distributed teams supporting mission‑critical services.

Salary Range

$90,000 - $130,000 base salary + annual target bonus

BBH and its affiliates' compensation program includes base salary, discretionary bonuses, and profit‑sharing. The anticipated base salary range(s) shown above are only for the indicated location(s) and may differ in other locations due to cost of living and labor considerations. Base salaries may vary based on factors such as skill, experience and qualification for the role. BBH's total rewards package recognizes your contributions with more than just a paycheck—providing you with benefits that enhance your experience at BBH from long‑term savings, healthcare, and income protection to professional development opportunities and time off, our programs support your overall well‑being.

We value diverse experiences. We value diverse experiences and transferrable skillsets. If your career hasn’t followed a traditional path, includes alternative experiences, or doesn’t meet every qualification or skill listed in the job description, please do go ahead and apply.

About BBH

Brown Brothers Harriman (BBH) is a premier global financial services firm, known for premium service, specialist expertise, technology solutions and partnership approach to client management. Across Investor Services and Capital Partners, we work with an enviable roster of sophisticated clients who make BBH their first call when they are tackling their hardest challenges. Delivering for our clients and each other energizes us.

We believe that how we do our work is just as important as what we do. We are relentless problem solvers who know our best ideas come from collective debate and development—so we are never possessive about our ideas. Every day we come together as a diverse community of smart and caring people to deliver exceptional service and expert advice—creating success that lasts. No matter where you sit in the organization, everyone is empowered to contribute their ideas. BBHers can pick up the phone and call any colleague, and they are happy to help. Expanding your impact beyond your daily role is part of how we operate as trusted partners to one another.

We believe stability is a competitive advantage, but being stable means having the knowledge, skill, and discipline to evolve, often—pushing the boundaries of innovation. As a private partnership, every investment we make is in the relationships, technologies, products and development we believe are in the long‑term interests of our clients and our people. Our long‑tenured leaders are experts in their areas and are actively involved in the day‑to‑day business, taking the time to provide guidance and mentoring to build the next generation of BBHers. Because we know, our success begins with yours.

Go to BBH.com to learn more about our rewards and benefits, philanthropy, approach to sustainability or how we support you to thrive personally, physically and financially.

We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, national origin, age, genetic information, creed, marital status, sexual orientation, gender identity, disability status, protected veteran status, or any other protected status under federal, state or local law.