Technical DMZ Architect

Bank of America; Plano (TX); On-site; USD 95,000 - 145,000; Full time

Job summary

An established industry player is seeking a Technical DMZ Network Architect to shape the architectural vision for complex DMZ solutions. This role involves leading the design of network infrastructures, ensuring compliance with security standards, and collaborating across teams to deliver innovative solutions. With a focus on SASE and Cloud designs, the position offers the opportunity to work with cutting-edge technologies and make a significant impact on the organization. If you are a self-starter with a passion for technology and a knack for problem-solving, this is the perfect opportunity to advance your career in a dynamic environment.

Qualifications

• 10+ years of experience in technology domains, focusing on network architecture.
• Solid understanding of complex network environments and security compliance.

Responsibilities

• Define architectural vision for complex DMZ solutions and ensure alignment with enterprise strategy.
• Lead design discussions and create innovative solutions through practical experiments.

Skills

Cloud Integration

Routing and Switching

Network Security

TCP/IP Concepts

SDWAN

DDoS Mitigation

Scripting Languages

Education

Technology Degree

Equivalent Experience

Tools

Arista

Cisco Nexus

Firepower/ASA

Fortinet

Job description

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.

Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being an inclusive workplace, attracting and developing exceptional talent, supporting our teammates’ physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve.

Bank of America is committed to an in-office culture with specific requirements for office-based attendance and which allows for an appropriate level of flexibility for our teammates and businesses based on role-specific considerations.

At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!

Job Description:
This role is responsible for defining an architectural vision and architecture for large, complex DMZs, which align with the enterprise architecture strategy, technology, and platform choices for the defined technology. Key responsibilities include describing the DMZ intent/associated operating environment, evaluating system impacts and determining the primary systems/subsystems and their interfaces, assisting with end-to-end solution design where needed, defining nonfunctional requirements/architectural runway to support new epics/features and expand into new opportunities. This role ensures the solution is fit for purpose and use by working with stakeholders, vendors/service providers, and evaluating the impact of strategic design decisions. They also contribute to best practices, standard templates, and the architecture roadmap for defined domains.

Responsibilities:

• Works across the business, operations and technology to create the solution intent and architectural vision for complex solutions and prioritize functional and non-functional requirements into a technology backlog to enable the technology roadmap and functionality to support evolving capabilities and services
• Contributes to the creation of the architecture roadmap of defined domains (Business, Application, Data, and Technology) in support of the product roadmap and the development of best practices including standardized templates
• Clarifies the architecture, assists with system design to support implementation, and provides solution options to resolve any architectural impediments
• Facilitates solution driven discussions, leads the design of complex architectures, and finds creative solutions through knowledge of domain, practical experiments, and proof of concepts while ensuring architecture is flexible, modular, and adaptable
• Educates team members on the technology practices, standardization strategies, and best practices to create innovative solutions
• Supports the team as needed to select the technology stack required for solutions and helps select preferred technology products
• Performs design and code reviews to ensure all non-functional requirements are sufficiently met (for example, security, performance, maintainability, scalability, usability, and reliability)

Position Summary:

Technical DMZ network architect responsible for DMZ network project designs with focus on SASE and Cloud designs.Also provide DMZ/Remote Access/SDWAN/Hosting/B2B/VPN Infrastructure Architecture for various LOB and B2B customers across various DMZ Zones including creation of network level HLD and LLD designs and solution delivery.

Assess design submissions for security compliance against baselines. Shepard requestors through technical challenges until designs are complete. Act in a liaison role between Global Information Security and as an escalation point for engineering / operations.

Self-starter who can lead projects.Must be able to troubleshoot multivendor solutions in lab or POC environments.Manage assigned networking projects, program components and deployments to deliver services in accordance with established company objectives.Maintain a thorough understanding of Network Infrastructure, IPv4/v6, IP Routing, DNS, Security, HTTP(S), VPN, and Network Monitoring tools.

Required Qualifications:

10 years industry experience with technology domain experience

• Experience integrating solutions with Cloud provider environments such as MS Azure, AWS, Google, IBM

• Must have solid routing, switching, Arista, Cisco Nexus, Firepower/ASA, Fortinet router and DMZ/ISP experience.

• Solid understanding of TCP/IP concepts, SDN, OSPF, BGP, VLAN, IPSEC, ISAKMP, PKI, QOS, Multicast, trunking/port-channeling, VRRP, FHRP protocols, enterprise level MPLS, VDC, flavors of VPC, SDN.

• Ability to utilize DDoS tools like Arbor and Prolexic/Akamai & F5/Silverline for mitigations to include Application layer, TCP state table and Bandwidth DDoS threats.

• Experience with large scale, complex network/DMZ environments and Authentication mechanisms (e.g. Active Directory, Ping federate)

•Contribute to the creation of the architecture roadmap of defined technology domains in support of the product roadmap.

•Work across business and technology to create the solution intent and architectural vision for large complex solutions and evolve it based on an emerging requirements.

•Lead rapid shaping of a high-level architecture with details filled in with emerging business requirements; ensure architecture is flexible, modular, and designed to adapt easily.

•Facilitate solution driven discussions, lead the design of complex architectures, and find creative solutions through their knowledge of the domain, practical experiments, and Proof of Concepts (POCs).

•Clarify the architecture and assist with system design (where needed) for the development teams to support implementation and provide solution options to resolve any architectural impediments.

•Perform design and code reviews to ensure all nonfunctional requirements for a solution are sufficiently met (for example, security, performance, maintainability, scalability, usability, and reliability).

Desired Qualifications

• Familiar with best practices to install and deploy various Arista & Cisco routing and switching platforms such as ISR, ASR, Catalyst and Nexus.

• Technology degree or substantial equivalent experience

• Experience with scripting languages

•Support the Principal Engineer as needed to select the technology stack required for solutions and help select preferred technology products.

•Contribute to the development of best practices including standardized templates.

Bank of America is committed to help employees through the transition period when they’re displaced as a result of a workforce reduction, realignment or similar measure. Please review the resume writing and interviewing tips provided below to help prepare you for your next career opportunity.

Regardless of the position you are interested in, the starting points to building your resume are the same:
1.Determine the job or types of jobs you want to do and research their responsibilities and qualifications.
2.Think about why you can do the job and make a list of your skills that are relative to the job.
3.Identify experiences or accomplishments that show your proficiency in the skills required for the job.
4.Summarize your abilities, accomplishments and skills into a brief, concise document.

Considerations when writing a resume
•Do be brief. Resumes should be 1-2 pages in length.
•Do be upbeat and active in your wording.
•Do emphasize what you have done clearly and concretely.
•Do be neat and well organized.
•Do have others proofread and critique your resume. Spell check. Make it error free.
•Do use high quality, white or light colored 8½ x 11 paper. Use a laser printer if possible.
•Don't be dishonest, always tell the truth about yourself in the most flattering light.
•Don't include salary history or requirements.
•Don't include references.
•Don't include accomplishments that do not support your professional goals.
• Don't include anything that isn't relevant. (For example, don't mention your fondness for swimming unless you want to work on the water.)
•Don't use italics, underlining, shadows or other fancy treatments.

Seven steps to a successful interview
1.Anticipate –Put yourself in the interviewer's position. What do you believe the interviewer is most interested in? Why do you think you have been invited to interview?
2.Research –What are the primary functions of the line of business? What are the success factors for the job? Is there a job description available?
3.Assess –Think about your skills, abilities, knowledge, interests, traits, values and accomplishments. Match them to what you know about the job. Consider which ones you should highlight.
4.Prepare Answers –Think about what the interviewer may ask, determine what the best answer is and write it down.
5.Prepare Questions – Interviewing is a two-way street. By asking thoughtful questions, you communicate your interest and learn a lot about the job. Choose two or three questions to ask your interviewer. Avoid asking a lot of questions about vacation time or breaks.
6.Practice – It may seem awkward, but it is the best way to come across well in an interview. Practice your own "great responses" with others or in front of a mirror until you appear relaxed and at ease.
7.Follow-up – Send a brief follow-up letter to the interviewer. Keep in mind that the many job searchers will not send a follow-up letter. Sending one can become a competitive advantage.