Senior Vice President, DMZ Network Engineer

BNY; Pittsburgh (Allegheny County); On-site; USD 120,000 - 160,000; Full time

Job summary

BNY is seeking a DMZ Network Engineer to join the Network Services team in its Infrastructure Platform in Pittsburgh or Lake Mary. The role focuses on designing secure, scalable DMZ architectures and aligning network designs with enterprise requirements.

You will collaborate with security, application, and operations teams to implement routing, firewall, load balancing, and web proxy patterns, while documenting standards and plans for ongoing reliability.

Qualifications

• 8+ years of network engineering experience with design/architecture.
• Expertise in DMZ design and enterprise network architecture.
• Strong routing knowledge with emphasis on BGP.
• Experience with firewalls, load balancers, and web proxies in enterprises.
• Hands-on Cisco ACI and SD-WAN knowledge.
• Ability to translate requirements into scalable network designs.

Responsibilities

• Design and implement DMZ network architectures for secure, scalable connectivity.
• Develop designs for routing, firewalls, load balancing, and web proxies.
• Define application service patterns and authentication-integrated connectivity.
• Engineer segmentation and controlled communications across environments.
• Create and maintain network diagrams and documentation.
• Translate business and security requirements into practical designs.
• Collaborate with security, application, and operations teams.
• Lead or contribute to new services and modernization efforts.
• Evaluate designs and recommend improvements for security and performance.
• Support troubleshooting and change planning for DMZ connectivity.
• Promote repeatable engineering practices and documentation.

Skills

DMZ network design

BGP routing

Firewall design

Cisco IOS-XE

NX-OS

SD-WAN

Cisco ACI

Communication

Job description

Job Description

At BNY, our culture allows us to run our company better and enables employees’ growth and success. As a leading global financial services company, we influence nearly 20% of the world’s investible assets. Every day, our teams harness cutting‑edge AI and breakthrough technologies to collaborate with clients, driving transformative solutions that redefine industries and uplift communities worldwide.

We’re seeking a future team member for the role of DMZ Network Engineer to join our Infrastructure Platform via our Network Services team. This role is located in Pittsburgh, Pa or Lake Mary, FL.

Responsibilities

• Design and implement DMZ network architectures to support secure, highly available, and scalable application connectivity.
• Develop and maintain network designs covering routing, firewalls, load balancing, and web proxy services within DMZ and adjacent network zones.
• Define and implement application service patterns, including traffic flow design, break/inspect architectures, and authentication‑integrated connectivity patterns.
• Engineer solutions that support strong network segmentation and controlled communication between internal, external, and partner‑facing environments.
• Create and maintain logical and physical network designs, standards, diagrams, and supporting technical documentation.
• Translate business, application, and security requirements into practical network designs and implementation plans.
• Partner with security, application, platform, and operations teams to ensure network solutions align with enterprise architecture, resiliency, and control requirements.
• Lead or contribute to implementation activities for new services, enhancements, and infrastructure modernization efforts.
• Evaluate current‑state designs and recommend improvements to increase security, performance, scalability, and operational supportability.
• Support complex troubleshooting and design review efforts related to DMZ connectivity, routing behavior, segmentation, and application traffic patterns.
• Participate in change planning and implementation activities to ensure controlled and successful deployment of network solutions.
• Promote repeatable engineering practices and clear documentation to support long‑term platform stability and operational readiness.

Qualifications

• Minimum of 8 years of experience in network engineering, with significant experience in design/architecture and implementation roles.
• Strong expertise in DMZ design and enterprise network architecture.
• Strong understanding of network routing, including experience with routing protocols, with particular focus on BGP.
• Strong knowledge of network segmentation principles and secure network design patterns.
• Experience with firewall, load balancing, and web proxy design in enterprise environments.
• Experience designing or supporting application service patterns, including break/inspect and authentication‑related traffic flows.
• Hands‑on knowledge of Cisco ACI and SDWAN.
• Strong experience with Cisco IOS‑XE and Cisco NX‑OS.
• Ability to create high‑quality architecture and engineering documentation, including diagrams, standards, and implementation details.
• Strong ability to work across teams and communicate technical concepts clearly to both technical and non‑technical stakeholders.
• Demonstrated ability to translate business requirements into effective and supportable technical solutions.

Benefits and Rewards

BNY offers highly competitive compensation, benefits, and wellbeing programs rooted in a strong culture of excellence and our pay‑for‑performance philosophy. We provide access to flexible global resources and tools for your life’s journey. Focus on your health, foster your personal resilience, and reach your financial goals as a valued member of our team, along with generous paid leaves, including paid volunteer time, that can support you and your family through moments that matter.

Compensation

The expected base salary for this position when employment commences can be found in the Job Info section at the bottom of the posting. Base salary offered may vary depending on multiple individualized factors, including market location, job‑related knowledge, skills, and experience. Base salary is only part of the total rewards package, which may include eligibility for an annual discretionary incentive award. Eligible employees may enroll in a 401(k) plan and participate in company‑sponsored medical, dental, vision, and basic life insurance plans for the employee and the employee’s eligible dependents.

EEO Statement

BNY is an Equal Employment Opportunity/Affirmative Action Employer – Underrepresented racial and ethnic groups/Females/Individuals with Disabilities/Protected Veterans.