Senior MFT Platform Engineer | Automation & Security

BBH New York; Boston (MA); On-site; USD 90,000 - 130,000; Full time

Job summary

BBH is seeking an experienced Managed File Transfer Engineer to design, build, and operate enterprise MFT platforms, ensuring security, reliability, and automation across source‑to‑destination data flows. The role emphasizes modernizing legacy components, reducing manual work, and strong collaboration with security and operations teams.

You will implement scalable, highly available file transfer solutions, monitor health with Splunk, and contribute to platform lifecycle activities including

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field, or equivalent relevant professional experience.
• 5+ years of experience with middleware, Managed File Transfer, or closely related enterprise infrastructure technologies.
• Demonstrated experience engineering and supporting mission‑critical production platforms. Financial‑services experience is preferred.
• Hands‑on experience installing, configuring, upgrading, patching, migrating, and troubleshooting Managed File Transfer platforms.
• Strong understanding of MFT architecture and secure file‑transfer design.
• Strong knowledge of file‑transfer and communication protocols, including SFTP, HTTPS, AS2, and FTP.
• Strong knowledge of network concepts including LAN, VLAN, DMZ, firewalls, load balancing, and network segmentation.
• Hands‑on experience with Windows Server and Linux.
• Strong scripting and automation skills using one or more of PowerShell, Python, Shell, and Ansible.
• Experience developing automated deployment, administration, validation, or operational processes.
• Experience with logging and observability platforms such as Splunk.
• Experience with SSL/TLS certificates, certificate lifecycle management, and certificate‑related troubleshooting.
• Understanding of PGP encryption, authentication, privileged access, service accounts, and least‑privilege security principles.
• Experience providing Level 3 engineering support for business‑critical technology services.

Responsibilities

• MFT Platform Engineering & Architecture Design, build, maintain, and enhance enterprise Managed File Transfer infrastructure and supporting technologies.
• MFT Platform Engineering & Architecture Engineer secure, scalable, highly available file‑transfer solutions from source through destination.
• MFT Platform Engineering & Architecture Develop and maintain technical standards and engineering controls for MFT platforms and services.
• MFT Platform Engineering & Architecture Analyze application and infrastructure performance and implement improvements that increase stability, reliability, and availability.
• MFT Platform Engineering & Architecture Review new file‑transfer requirements and ensure implementations accurately represent the intended source‑to‑target data flow.
• MFT Platform Engineering & Architecture Evaluate technical debt, unsupported components, architectural limitations, and modernization opportunities.
• Automation & Observability Develop automation using PowerShell, Python, Shell, Ansible, Linux tooling, and other appropriate technologies.
• Automation & Observability Automate deployments, administration, validation, monitoring, and repetitive operational processes to reduce manual effort and operational risk.
• Automation & Observability Use Splunk and other observability technologies to develop effective platform monitoring, health checks, dashboards, alerts, and incident detection.
• Automation & Observability Improve centralized logging, event correlation, incident pattern recognition, and actionable alerting.
• Automation & Observability Ensure appropriate diagnostic and audit information is available for troubleshooting and incident investigation.
• Security Engineering Define and implement secure MFT standards covering SFTP, HTTPS, AS2, encryption, authentication, SSL/TLS certificates, service accounts, privileged access, and least‑privilege principles.
• Security Engineering Support modernization and remediation of legacy file‑transfer technologies, protocols, and configurations.
• Security Engineering Manage and troubleshoot SSL/TLS certificates and related security dependencies.
• Security Engineering Partner with Information Security, Networking, Infrastructure, and application teams to remediate vulnerabilities and strengthen platform controls.
• Platform Lifecycle & Production Engineering Engineer and implement operating systems, middleware, database, application, and infrastructure upgrades required to maintain supported platforms.
• Platform Lifecycle & Production Engineering Participate in platform upgrades, migrations, patching, and infrastructure changes from technical design through production implementation.
• Platform Lifecycle & Production Engineering Develop repeatable deployment procedures, technical validation criteria, rollback procedures, and implementation documentation.
• Platform Lifecycle & Production Engineering Support Business Continuity and Disaster Recovery planning, testing, and remediation activities.
• Platform Lifecycle & Production Engineering Maintain architecture diagrams, engineering standards, technical documentation, and support procedures.
• Level 3 Support & Problem Management Provide Level 3 engineering support for complex MFT, infrastructure, connectivity, and Data Movement incidents.
• Level 3 Support & Problem Management Partner with Operations and global support teams during critical production incidents to restore service and identify corrective actions.
• Level 3 Support & Problem Management Conduct root‑cause analysis for recurring issues and develop permanent engineering solutions where possible.
• Level 3 Support & Problem Management Document technical findings and reusable resolutions to improve operational support.

Skills

MFT architecture

Scripting & automation

Automation & observability

Security principles

Observability tooling

Troubleshooting

Networking concepts

Windows & Linux

Root cause analysis

Education

Bachelor’s degree in CS/IT or related field

Tools

Splunk

PowerShell

Python

Shell

Ansible

Job description

BBH is seeking an experienced Managed File Transfer Engineer to design, build, and operate enterprise MFT platforms, ensuring security, reliability, and automation across source‑to‑destination data flows. The role emphasizes modernizing legacy components, reducing manual work, and strong collaboration with security and operations teams.

You will implement scalable, highly available file transfer solutions, monitor health with Splunk, and contribute to platform lifecycle activities including