Vice President; Infrastructure Engineer Lead

Bank of America; Atlanta (GA); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Bank of America is seeking an infrastructure security professional to design, deploy, and operate tools and services within enterprise technical domains. The role focuses on enabling business strategies through governance-compliant architectures and templates, leading engineering teams, and delivering robust perimeter security across the DMZ.

You will work with Fortinet/Check Point firewalls, IDS/IPS, and automation scripts to support secure, scalable infrastructure and network services.

Qualifications

• Bachelor's degree or equivalent in Computer Science, Computer Information Systems, MIS, Engineering, or related field.
• 5 years of progressively responsible experience in IT/related occupation.
• 5 years of experience building, deploying, and operating Fortinet and Check Point firewalls and IDS/IPS solutions in large enterprise environments.
• Experience overseeing cybersecurity projects from requirements through design and implementation.
• Experience using Splunk for traffic analysis and policy management with automation scripting in Shell/Python.
• Designing, engineering, and testing perimeter security for enterprise DMZ environments and related hardware and controls.
• Ability to validate and troubleshoot network connectivity using packet sniffers and tcpdump; strong routing, multicast and LAN knowledge.
• Experience expanding network capacity and DMZ infrastructure, firewall performance enhancements, and DDoS mitigation.

Responsibilities

• Design and deploy infrastructure tools/services within technical domains per governance and policies.
• Lead other engineers in solution development and maintain templates, playbooks, and automation.
• Build and operate firewall platforms (Fortinet, Check Point) and DMZ infrastructure.
• Manage perimeter security and a range of networked applications requiring perimeter controls.
• Direct and support strategic initiatives with bank resources and vendors.
• Coordinate multiple technical project engagements and BAU work.
• Remote work may be permitted within a commutable distance from the worksite.

Skills

Firewall management

Fortinet

Check Point

Networking

Security policy management

Scripting (Shell, Python)

DMZ architecture

Perimeter security

IDS/IPS

DDoS mitigation

Education

Bachelor's degree in CS/IS/Engineering or related

Tools

Splunk

FireMon

Skybox

tcpdump

Job description

Job Description:

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day. Being a Great Place to Work and providing a culture of caring is core to how we drive Responsible Growth. We are intentional about fostering an inclusive workplace where every teammate has the opportunity to succeed, build a career and contribute to our shared success. This includes attracting and developing exceptional talent, recognizing and rewarding performance, and supporting our teammates' physical, emotional, and financial wellness through affordable, competitive and flexible benefits. We value the unique perspectives individuals bring from all backgrounds and career paths - whether shaped by military service, community college education, or a wide range of work and life experiences. These journeys foster resilience, leadership and innovation, strengthening our workforce and positively impact the communities we serve. Bank of America is committed to an in-office culture that supports collaboration, engagement, and career development. Our approach includes clear in-office expectations, while providing an appropriate level of flexibility based on role-specific responsibilities and business needs. At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!

Job Description:

This job is responsible for infrastructure tool/service designs within technical domains in accordance with architectural governance, standards and policies. Key responsibilities include facilitating deployment of tools/services by leading others in solution development, maintenance of templates, playbooks and automation used during implementation. Job expectations include demonstrating expertise within technical domains, decomposing issues or objectives into work units, advancing efficient solution delivery practices, and promoting exceptional design, engineering and organizational practices.

Responsibilities:

• Being accountable for infrastructure tool and/or service designs within one or more technical domains that enable business strategies in accordance with architectural governance, standards and policies.
• Facilitating the deployment of tools and services by leading other Infrastructure engineers in solution development, in addition to the development and maintenance of templates, playbooks and automation to be used during implementation.
• Building/operating various firewall platforms, including Fortinet and Check Point.
• Leveraging a functional understanding of a diverse set of networked applications requiring perimeter management solutions, including HTTP, HTTPS, SSH, FTP, DNS, NTP, ANYCAST services, and others to support technical/engineering initiatives.
• Being responsible for DMZ Network infrastructure knowledge, including topology, security policies, firewalls and the L2/L3 switch and router.
• Being responsible for in-depth engineering in perimeter solutions, including in the design, low level engineering, and delivery of new hardware systems for client applications across the enterprise DMZ.
• Directing and supporting all technical and strategic initiatives with bank resources, contractors and professional services personnel.
• Managing multiple technical project engagements, strategic initiatives and BAU work.
• Remote work may be permitted within a commutable distance from the worksite.

Required Skills & Experience:

• Bachelor's degree or equivalent in Computer Science, Computer Information Systems, Management Information Systems, Engineering (any), or related: and
• 5 years of progressively responsible experience in the job offered or a related IT occupation.
• Must include 5 years of experience in each of the following:
• Building, deploying, and operating Fortinet and Check Point firewalls and TippingPoint IDS/IPS solutions in a large enterprise environment, supporting new implementations, lifecycle upgrades, migrations, and capacity expansions;
• Overseeing cybersecurity projects from requirements intake through design review and implementation, ensuring change execution with no production impact;
• Improving operational processes by leveraging Splunk for traffic analysis, FireMon and Skybox for security policy management, and developing Shell and Python automation scripts to analyze, organize, and compare large-scale datasets;
• Designing, engineering, and testing perimeter security solutions for enterprise DMZ environments, including ClusterXL, CoreXL, DHCP Relay, BGP routing, GeoSync, IDS/IPS, NetFlow, and STUN, while deploying hardware and security controls to mitigate risk and ensure regulatory compliance;
• Validating and troubleshooting network connectivity using packet sniffers, debug utilities, and tcpdump, and applying expertise in routing protocols, multicast, and LAN technologies; and,
• Expanding and optimizing network capacity through phased assessment, planning, and implementation, including DMZ infrastructure buildouts and firewall performance enhancements including Hyperscale features to reduce latency and mitigate DDoS threats.

EMPLOYER: Bank of America N.A.

Shift:

1st shift (United States of America)

Hours Per Week:

40