Vice President; Infrastructure Engineer Lead

HITEC; Atlanta (GA); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Bank of America N.A. is seeking an experienced infrastructure security engineer in Atlanta to design and deploy tool/service solutions within architectural governance.

You will lead deployment efforts, develop templates, and automate processes across Fortinet/Check Point firewalls and perimeter security for the enterprise DMZ. Responsibilities include building and operating firewall platforms, managing DMZ topology, and collaborating with bank resources to drive strategic initiatives while

Qualifications

• Bachelor's degree in Computer Science, MIS, Engineering, or related field.
• Minimum 5 years of progressively responsible IT experience.
• Hands-on with Fortinet/Check Point firewalls in large enterprise settings.
• Experience with Splunk, FireMon and Skybox for security policy management.

Responsibilities

• Design infrastructure tools and services within architectural governance.
• Lead deployment of tools and services; create templates and automation.
• Build/operate Fortinet and Check Point firewall platforms.
• Support DMZ network infrastructure, perimeters, and related devices.
• Engineer perimeter security solutions for enterprise DMZ environments.
• Manage multiple technical projects and BAU work; coordinate with teams.

Education

Bachelor's degree in Computer Science / MIS / Engineering

Tools

Fortinet firewalls

Check Point firewalls

TippingPoint IDS/IPS

Splunk

FireMon

Skybox

Shell scripting

Python scripting

DMZ networking

BGP routing

Job description

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day. Being a Great Place to Work and providing a culture of caring is core to how we drive Responsible Growth. We are intentional about fostering an inclusive workplace where every teammate has the opportunity to succeed, build a career and contribute to our shared success. This includes attracting and developing exceptional talent, recognizing and rewarding performance, and supporting our teammates’ physical, emotional, and financial wellness through affordable, competitive and flexible benefits. We value the unique perspectives individuals bring from all backgrounds and career paths - whether shaped by military service, community college education, or a wide range of work and life experiences. These journeys foster resilience, leadership and innovation, strengthening our workforce and positively impact the communities we serve. Bank of America is committed to an in-office culture that supports collaboration, engagement, and career development. Our approach includes clear in-office expectations, while providing an appropriate level of flexibility based on role-specific responsibilities and business needs. At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!

Job Description

This job is responsible for infrastructure tool/service designs within technical domains in accordance with architectural governance, standards and policies. Key responsibilities include facilitating deployment of tools/services by leading others in solution development, maintenance of templates, playbooks and automation used during implementation. Job expectations include demonstrating expertise within technical domains, decomposing issues or objectives into work units, advancing efficient solution delivery practices, and promoting exceptional design, engineering and organizational practices.

Responsibilities

• Being accountable for infrastructure tool and/or service designs within one or more technical domains that enable business strategies in accordance with architectural governance, standards and policies.
• Facilitating the deployment of tools and services by leading other Infrastructure engineers in solution development, in addition to the development and maintenance of templates, playbooks and automation to be used during implementation.
• Building/operating various firewall platforms, including Fortinet and Check Point.
• Leveraging a functional understanding of a diverse set of networked applications requiring perimeter management solutions, including HTTP, HTTPS, SSH, FTP, DNS, NTP, ANYCAST services, and others to support technical/engineering initiatives.
• Being responsible for DMZ Network infrastructure knowledge, including topology, security policies, firewalls and the L2/L3 switch and router.
• Being responsible for in-depth engineering in perimeter solutions, including in the design, low level engineering, and delivery of new hardware systems for client applications across the enterprise DMZ.
• Directing and supporting all technical and strategic initiatives with bank resources, contractors and professional services personnel.
• Managing multiple technical project engagements, strategic initiatives and BAU work.
• Remote work may be permitted within a commutable distance from the worksite.

Required Skills & Experience

• Bachelor's degree or equivalent in Computer Science, Computer Information Systems, Management Information Systems, Engineering (any), or related: and
• 5 years of progressively responsible experience in the job offered or a related IT occupation.
• Must include 5 years of experience in each of the following:
• Building, deploying, and operating Fortinet and Check Point firewalls and TippingPoint IDS/IPS solutions in a large enterprise environment, supporting new implementations, lifecycle upgrades, migrations, and capacity expansions;
• Overseeing cybersecurity projects from requirements intake through design review and implementation, ensuring change execution with no production impact;
• Improving operational processes by leveraging Splunk for traffic analysis, FireMon and Skybox for security policy management, and developing Shell and Python automation scripts to analyze, organize, and compare large-scale datasets;
• Designing, engineering, and testing perimeter security solutions for enterprise DMZ environments, including ClusterXL, CoreXL, DHCP Relay, BGP routing, GeoSync, IDS/IPS, NetFlow, and STUN, while deploying hardware and security controls to mitigate risk and ensure regulatory compliance;
• Validating and troubleshooting network connectivity using packet sniffers, debug utilities, and tcpdump, and applying expertise in routing protocols, multicast, and LAN technologies; and,
• Expanding and optimizing network capacity through phased assessment, planning, and implementation, including DMZ infrastructure buildouts and firewall performance enhancements including Hyperscale features to reduce latency and mitigate DDoS threats.

EMPLOYER: Bank of America N.A.

Shift: 1st shift (United States of America)

Hours Per Week: 405 years experience