Senior DMZ & Cloud Networking Architect

Bank of America; Chandler (AZ); On-site; USD 150,000 - 210,000; Full time

Job summary

Bank of America seeks a highly skilled DMZ Architect to craft and deliver secure, scalable network designs for complex DMZ environments. You will define target operating environments, ensure client resiliency, and guide solution choices with stakeholders and engineering teams.

You will lead architecture discussions, verify designs against security baselines, and drive rapid shaping of high-level architectures while coordinating across global security and technology teams.

Qualifications

• 10+ years industry experience with technology domain experience.
• Experience integrating solutions with Cloud provider environments such as MS Azure, AWS, Google, IBM
• Strong understanding of network security architecture and traffic segmentation
• Working knowledge of public cloud networking concepts within GCP, AWS, and Azure environments
• Must have solid routing, switching, Arista, Cisco Nexus, Firepower/ASA, Fortinet router and DMZ/ISP experience
• Solid understanding of TCP/IP concepts, SDN, OSPF, BGP, VLAN, IPSEC, ISAKMP, PKI, QOS, Multicast, trunking/port-channeling, VRRP, FHRP protocols, enterprise level MPLS, VDC, flavors of VPC, SDN
• Ability to utilize DDoS tools like Arbor and Prolexic/Akamai & F5/Silverline for mitigations to include Application layer, TCP state table and Bandwidth DDoS threats
• Familiar with best practices to install and deploy various Arista & Cisco routing and switching platforms such as ISR, ASR, Catalyst and Nexus
• Experience with large scale, complex network/DMZ environments and Authentication mechanisms (e.g. Active Directory, Ping federate) Experience with scripting languages
• Experience integrating enterprise networks with: Google Cloud Platform (GCP); AWS; Microsoft Azure
• Understanding of cloud connectivity services such as: Cloud Interconnect; Direct Connect; ExpressRoute
• Site-to-site VPN architectures
• Experience test tools including Quali Cloud Shell, and Viavi Tera VM
• General experience with security technologies, such as firewalls, intrusion detection, threat mitigation
• Exposure to EOS and IOS-XR routing
• IPv6 Knowledge/experience to support certification testing of IPv6 capabilities
• Experience with automation and development of automation scripts
• Python experience
• Experience with automation skills/tools such as: Arista CloudVision, Terraform, Ansible, Netconf, YANG

Responsibilities

• Lead architectural vision for complex DMZ solutions and ensure alignment with security and performance requirements.
• Define high-level architecture roadmaps and translate needs into actionable designs.
• Clarify architecture and provide design options to overcome impediments.
• Drive solution discussions and lead design of architectures that are flexible and scalable.
• Educate teams on technology practices and standardization strategies.
• Support technology stack decisions and vendor/product selection.
• Review designs for non-functional requirements like security and reliability.
• Contribute to technology domain roadmaps and best practices.
• Collaborate across business and tech to evolve architectures with new requirements.
• Lead rapid shaping of high-level architecture and adapt it to evolving needs.

Skills

Analytical Thinking

Architecture

Result Orientation

Solution Design

Technical Strategy Development

Application Development

Collaboration

Data Management

DevOps Practices

Risk Management

Agile Practices

Automation

Influence

Solution Delivery Process

Test Engineering

Tools

Arista CloudVision

Terraform

Ansible

Netconf

YANG

Python

Job description

Bank of America seeks a highly skilled DMZ Architect to craft and deliver secure, scalable network designs for complex DMZ environments. You will define target operating environments, ensure client resiliency, and guide solution choices with stakeholders and engineering teams.

You will lead architecture discussions, verify designs against security baselines, and drive rapid shaping of high-level architectures while coordinating across global security and technology teams.