Network Infrastructure Engineer, AVP

State Street; Boston (MA); On-site; USD 90,000 - 158,000; Full time

Benefits offered by this job

401K with company match

Medical, dental, vision insurance

Paid time off

Employee Assistance Program

Flexible work options

Job summary

State Street in Boston seeks a Network Infrastructure Engineer to design, build, and operate a modern global network using Versa, Cisco, and Arista technologies, including SD‑WAN, segmentation, wireless, and cloud connectivity.

The role spans campus, office, WAN, cloud, and third-party access, focusing on security, Zero Trust, and evolving the firm’s network posture. 5–10 years of enterprise experience and a relevant degree are preferred.

Qualifications

• Bachelor's degree in computer science, engineering, or equivalent practical experience.
• 5–10 years of experience in enterprise network engineering roles.
• Relevant networking or security certifications desirable but not mandatory.
• Past banking/finance experience is a plus.

Responsibilities

• Design, build, and operate a modern global network based on Versa, Cisco, and Arista technologies including SD-WAN, network segmentation, wireless, client, and vendor connectivity.
• Manage third-party connectivity for SD-WAN and IPSec access.
• Implement and enforce Zero Trust and cloud-first architecture across campus, WAN, cloud, and third-party access environments.
• Collaborate across networking, security, and cloud teams; communicate complex concepts clearly.
• Configure and troubleshoot across WAN, LAN, wireless, and secure access domains using management tools and CLI.
• Deploy and manage security and segmentation controls across global networks.

Skills

BGP routing

OSPF routing

SD-WAN

Network segmentation

Wireless networking

IPSec VPNs

CLI management

Port security

Zero Trust

Security integration

Education

Bachelor's degree in Computer Science or related field

Tools

Palo Alto Firewall

Splunk

Forward Networks

ServiceNOW

Cisco ISE

Arista Agni

Job description

What You Will Be Responsible For

We are seeking a Network Infrastructure Engineer to design, build, and operate a modern global network based on Versa, Cisco and Arista technologies including SD-WAN, Network Segmentation, Wireless, Client and Vendor Connectivity and Cloud Computing. The engineer will also be responsible for third party connectivity for SD-WAN and IPSec access. This role sits at the intersection of networking and security and is critical to our transition toward Zero Trust and cloud-first architectures. The engineer will work across campus, office, WAN, cloud, and third party access environments within large, globally distributed enterprise environments, integrating SD‑WAN, segmentation, and cloud‑delivered security controls to deliver resilient, scalable, and secure connectivity. This role plays a key part in evolving the firm’s global network, security and segmentation posture. The engineer will implement standards and architecture decisions across campus, branch, and cloud environments globally.

What You Will Be Responsible For

We are seeking a Network Infrastructure Engineer to design, build, and operate a modern global network based on Versa, Cisco and Arista technologies including SD-WAN, Network Segmentation, Wireless, Client and Vendor Connectivity and Cloud Computing. The engineer will also be responsible for third party connectivity for SD-WAN and IPSec access. This role sits at the intersection of networking and security and is critical to our transition toward Zero Trust and cloud-first architectures. The engineer will work across campus, office, WAN, cloud, and third party access environments within large, globally distributed enterprise environments, integrating SD‑WAN, segmentation, and cloud‑delivered security controls to deliver resilient, scalable, and secure connectivity. This role plays a key part in evolving the firm’s global network, security and segmentation posture. The engineer will implement standards and architecture decisions across campus, branch, and cloud environments globally.

This role is ideal for an engineer who is strong in one or more of these domains and motivated to deepen their expertise across secure edge, Zero Trust, and modern network architectures.

We value curiosity, adaptability, and sound engineering judgment as much as prior exposure to specific tools or platforms.

What You Will Be Responsible For

Candidates are not expected to have deep expertise in every area listed below. Strength in several of these domains, combined with the ability to learn and adapt, is highly valued.

• Strong routing and switching especially strong BGP and BGP to OSPF routing redistribution.
• SD-WAN technologies and architectures (Versa SD-WAN preferred).
• Network segmentation including VRFs, VLANs, access control, and micro segmentation.
• Designing and supporting enterprise campus networks, including wired and wireless with Cisco and Arista technology.
• Engineering and configuration of IPSec VPNs.
• Configuration and Troubleshooting skills across WAN, LAN, wireless, and secure access domains both with management tools and CLI.
• Experience with Dot1X and Port Level Security deployments.

What We Value

These skills will help you be successful

Candidates are not expected to have deep expertise in every area listed below. Strength in several of these domains, combined with the ability to learn and adapt, is highly valued.

• Strong understanding of why the technology is being deployed.
• Strong sense of ownership and accountability.
• Ability to work across networks, security, and cloud teams.
• Clear and effective communication of complex technical concepts.
• Analytical thinking and structured problem-solving.
• Continuous learning mindset in a rapidly evolving technology landscape.

Education & Preferred Qualifications

• Bachelor's degree in computer science, Engineering, or equivalent practical experience.
• 5-10 years of experience in enterprise network engineering roles.
• Relevant networking or security certifications are desirable but not mandatory.
• Past experience in Banking or the Finance vertical

Experience or exposure to

• Security Service Edge / Zero Trust platforms such as Zscaler (ZIA, ZPA, ZDX, Zero Trust Branch) or similar.
• Identity–aware networking and integration with NAC / identity platforms – Cisco ISE and Arista Agni.
• Palo Alto Firewall Configuration and Troubleshooting
• Enterprise Network tooling – Splunk, Forward Networks and Service NOW

Salary Range

$90,000 - $157,500 Annual

The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.

Employees are eligible to participate in State Street’s comprehensive benefits program, which includes: our retirement savings plan (401K) with company match; insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages; paid-time off including vacation, sick leave, short term disability, and family care responsibilities; access to our Employee Assistance Program; incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans); and, eligibility for certain tax advantaged savings plans.

For a full overview, visit https://hrportal.ehr.com/statestreet/Home.

About State Street

Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.

We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.

As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.

Discover more information on jobs at StateStreet.com/careers

Read our CEO Statement

Job Application Disclosure

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Job ID: R-784829