Senior Architect

Bank of America

Chandler (AZ)

On-site

USD 150,000 - 210,000

Full time

3 days ago

Be an early applicant

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

Bank of America seeks a highly skilled DMZ Architect to craft and deliver secure, scalable network designs for complex DMZ environments. You will define target operating environments, ensure client resiliency, and guide solution choices with stakeholders and engineering teams.

You will lead architecture discussions, verify designs against security baselines, and drive rapid shaping of high-level architectures while coordinating across global security and technology teams.

Qualifications

10+ years industry experience with technology domain experience.
Experience integrating solutions with Cloud provider environments such as MS Azure, AWS, Google, IBM
Strong understanding of network security architecture and traffic segmentation
Working knowledge of public cloud networking concepts within GCP, AWS, and Azure environments
Must have solid routing, switching, Arista, Cisco Nexus, Firepower/ASA, Fortinet router and DMZ/ISP experience
Solid understanding of TCP/IP concepts, SDN, OSPF, BGP, VLAN, IPSEC, ISAKMP, PKI, QOS, Multicast, trunking/port-channeling, VRRP, FHRP protocols, enterprise level MPLS, VDC, flavors of VPC, SDN
Ability to utilize DDoS tools like Arbor and Prolexic/Akamai & F5/Silverline for mitigations to include Application layer, TCP state table and Bandwidth DDoS threats
Familiar with best practices to install and deploy various Arista & Cisco routing and switching platforms such as ISR, ASR, Catalyst and Nexus
Experience with large scale, complex network/DMZ environments and Authentication mechanisms (e.g. Active Directory, Ping federate) Experience with scripting languages
Experience integrating enterprise networks with: Google Cloud Platform (GCP); AWS; Microsoft Azure
Understanding of cloud connectivity services such as: Cloud Interconnect; Direct Connect; ExpressRoute
Site-to-site VPN architectures
Experience test tools including Quali Cloud Shell, and Viavi Tera VM
General experience with security technologies, such as firewalls, intrusion detection, threat mitigation
Exposure to EOS and IOS-XR routing
IPv6 Knowledge/experience to support certification testing of IPv6 capabilities
Experience with automation and development of automation scripts
Python experience
Experience with automation skills/tools such as: Arista CloudVision, Terraform, Ansible, Netconf, YANG

Responsibilities

Lead architectural vision for complex DMZ solutions and ensure alignment with security and performance requirements.
Define high-level architecture roadmaps and translate needs into actionable designs.
Clarify architecture and provide design options to overcome impediments.
Drive solution discussions and lead design of architectures that are flexible and scalable.
Educate teams on technology practices and standardization strategies.
Support technology stack decisions and vendor/product selection.
Review designs for non-functional requirements like security and reliability.
Contribute to technology domain roadmaps and best practices.
Collaborate across business and tech to evolve architectures with new requirements.
Lead rapid shaping of high-level architecture and adapt it to evolving needs.

Skills

Analytical Thinking

Architecture

Result Orientation

Solution Design

Technical Strategy Development

Application Development

Collaboration

Data Management

DevOps Practices

Risk Management

Agile Practices

Automation

Influence

Solution Delivery Process

Test Engineering

Tools

Arista CloudVision

Terraform

Ansible

Netconf

YANG

Python

Job description

Job Description:
At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.
Being a Great Place to Work and providing a culture of caring is core to how we drive Responsible Growth. We are intentional about fostering an inclusive workplace where every teammate has the opportunity to succeed, build a career and contribute to our shared success. This includes attracting and developing exceptional talent, recognizing and rewarding performance, and supporting our teammates’ physical, emotional, and financial wellness through affordable, competitive and flexible benefits.
We value the unique perspectives individuals bring from all backgrounds and career paths - whether shaped by military service, community college education, or a wide range of work and life experiences. These journeys foster resilience, leadership and innovation, strengthening our workforce and positively impact the communities we serve.
Bank of America is committed to an in-office culture that supports collaboration, engagement, and career development. Our approach includes clear in-office expectations, while providing an appropriate level of flexibility based on role-specific responsibilities and business needs.
At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!
This job is responsible for defining an architectural vision and solution that supports the strategic outcomes of the Business' Products and Services. Key responsibilities include defining the target operating environment, designing for client resiliency, assisting with solution design, and defining non-functional requirements. Job expectations include working with stakeholders and service providers aligned to the Business' strategic objectives, evaluating the impact of strategic design decisions, and contributing to the architecture roadmap.
DMZ Architect
Technical DMZ network architect responsible for DMZ network project designs with focus on SASE and Cloud designs. Also provide DMZ/Remote Access/SDWAN/Hosting/B2B/VPN Infrastructure Architecture for various LOB and B2B customers across various DMZ Zones including creation of network level HLD and LLD designs and solution delivery.
Assess design submissions for security compliance against baselines. Shepard requestors through technical challenges until designs are complete. Act in a liaison role between Global Information Security and as an escalation point for engineering / operations.
Self-starter who can lead projects. Must be able to troubleshoot multivendor solutions in lab or POC environments. Manage assigned networking projects, program components and deployments to deliver services in accordance with established company objectives. Maintain a thorough understanding of Network Infrastructure, IPv4/v6, IP Routing, DNS, Security, HTTP(S), VPN, and Network Monitoring tools.
Responsibilities:

Works across the business, operations and technology to create the solution intent and architectural vision for complex solutions and prioritize functional and non-functional requirements into a technology backlog to enable the technology roadmap and functionality to support evolving capabilities and services
Contributes to the creation of the architecture roadmap of defined domains (Business, Application, Data, and Technology) in support of the product roadmap and the development of best practices including standardized templates
Clarifies the architecture, assists with system design to support implementation, and provides solution options to resolve any architectural impediments
Facilitates solution driven discussions, leads the design of complex architectures, and finds creative solutions through knowledge of domain, practical experiments, and proof of concepts while ensuring architecture is flexible, modular, and adaptable
Educates team members on the technology practices, standardization strategies, and best practices to create innovative solutions
Supports the team as needed to select the technology stack required for solutions and helps select preferred technology products
Performs design and code reviews to ensure all non-functional requirements are sufficiently met (for example, security, performance, maintainability, scalability, usability, and reliability)
Contribute to the creation of the architecture roadmap of defined technology domains in support of the product roadmap
Contribute to the development of best practices including standardized templates
Work across business and technology to create the solution intent and architectural vision for large complex solutions and evolve it based on an emerging requirements
Lead rapid shaping of a high-level architecture with details filled in with emerging business requirements; ensure architecture is flexible, modular, and designed to adapt easily
Support the Principal Engineer as needed to select the technology stack required for solutions and help select preferred technology products

Required Qualifications:

10+ years industry experience with technology domain experience
Experience integrating solutions with Cloud provider environments such as MS Azure, AWS, Google, IBM
Strong understanding of network security architecture and traffic segmentation
Working knowledge of public cloud networking concepts within GCP, AWS, and Azure environments
Must have solid routing, switching, Arista, Cisco Nexus, Firepower/ASA, Fortinet router and DMZ/ISP experience
Solid understanding of TCP/IP concepts, SDN, OSPF, BGP, VLAN, IPSEC, ISAKMP, PKI, QOS, Multicast, trunking/port-channeling, VRRP, FHRP protocols, enterprise level MPLS, VDC, flavors of VPC, SDN
Ability to utilize DDoS tools like Arbor and Prolexic/Akamai & F5/Silverline for mitigations to include Application layer, TCP state table and Bandwidth DDoS threats
Familiar with best practices to install and deploy various Arista & Cisco routing and switching platforms such as ISR, ASR, Catalyst and Nexus
Experience with large scale, complex network/DMZ environments and Authentication mechanisms (e.g. Active Directory, Ping federate) Experience with scripting languages

Desired Qualifications:
Experience integrating enterprise networks with:

Google Cloud Platform (GCP)
AWS
Microsoft Azure

Understanding of cloud connectivity services such as:

Cloud Interconnect
Direct Connect
ExpressRoute

Desired Qualifications:(con't)

Site-to-site VPN architectures
Experience test tools including Quali Cloud Shell, and Viavi Tera VM
General experience with security technologies, such as firewalls, intrusion detection, threat mitigation
Exposure to EOS and IOS-XR routing
IPv6 Knowledge/experience to support certification testing of IPv6 capabilities
Experience with automation and development of automation scripts
Python experience
Experience with automation skills/tools such as: Arista CloudVision, Terraform, Ansible, Netconf, YANG

Skills: