Perimeter Engineer presso Ghr

Job Description:

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.

Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being an inclusive workplace, attracting and developing exceptional talent, supporting our teammates’ physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve.

Bank of America is committed to an in-office culture with specific requirements for office-based attendance and which allows for an appropriate level of flexibility for our teammates and businesses based on role-specific considerations.

At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!
 

About the Role:

The Network Delivery and Execution Team is seeking a Perimeter Engineer to support Perimeter Release & Deployment (new deployments of Security Systems in support of high-profile projects) and Lifecycle Management Refresh initiatives (Upgrading Hardware and Software to mitigate End-of-Life equipment or Non-Permitted Technologies).

Position Summary:

The Perimeter Engineer will support technical initiatives addressing strategic projects and BAU work.  Responsibilities include technical planning, logistics, and successful execution to achieve annual commitments and targeted schedules while incurring zero impact to the network.  Work types include, but are not limited to deployment of new secure environments, increasing capacity, hardware and software refreshes, migrations and decommissions.

The candidate will require knowledge and real-world experience with Firewalls and IDS/IPS’s to deliver on the technical needs of this position.  Seeking a polished Engineer with excellent written and oral communication skills.  Must have a proven track record interacting with various levels of management, clients, and technical team members to plan and deliver technical Perimeter solutions.

The candidate must possess the ability to analyze and understand a variety of existing and evolving requirements and interact with peer technology teams to effectively deliver on business needs.  This position will require the ability to manage multiple technical project engagements requiring the candidate to be a team player that can also work independently to manage multiple deadlines, priorities and a diverse set of applications and requirements.

This job is responsible for tool and service designs within a technical domain that enable business strategies in accordance with architectural governance, standards and policies. Key responsibilities include creating infrastructure tools and their integration as a service, facilitating deployment of technical solutions by developing templates, playbooks and automation used during implementation. Job expectations include looking for opportunities to improve efficiency when implementing and maintaining tools/services and embracing a culture of innovation and continuous improvement.

Responsibilities:

• Responsible for Release & Deployment project delivery and Lifecycle Management activities.  
• Performs technical assessments to fully understand a variety of complex technical requests, vetting of the proposed solution, plan development, scheduling, and the implementation of these changes, which delivers the intended outcome along with zero impact to the production network.
• Detailed implementation plans will be reviewed for all designs, pre and post validation procedures, UAT acceptance criteria, and back-out plans. Candidate must understand how designs turn into implementation, and those implementations to be based upon standards and predefined runbooks.
• Operate quality assurance functions prior to each implementation to meet engineering standards and mitigate risks. Proactively raise questions and/or concerns to the Design Engineering team to address them prior to change implementation.
• Build and Operate various Firewall platforms (Fortinet, Checkpoint, TippingPoint IDS/IPS) and respective management systems.
• Adheres to work effort and project close-out practices such as database updates, asset tracking, inventory systems, records retention, and the related systems, tools, and process updates.
• Works with Perimeter Security Architecture and Engineering Teams to share knowledge in support of new technology adoption, systems enhancements/automation, or process changes. Identify opportunities to improve service delivery and objectively measure the effects of these efforts over time.
• Ability to work nights and weekends as required to support implementation activities.
• Understanding of the Bank’s Network Infrastructure and associated Risk Management practices are highly recommended to remain successful.
• Knowledge of DMZ Networking and Cisco Routing/Switching is a plus

• Provides subject matter expertise and consulting services on a range of technologies and assists Technical Analysts and Infrastructure Engineers to ensure that technology solutions comply with enterprise system design and engineering standards
• Assists with translating business requirements into technical definitions, reference models, blueprints, and playbooks for deployment in compliance with architecture standards and policies
• Assists in the evaluation of reference models, blueprints and playbooks to ensure they are fit for purpose
• Develops software solutions to address manual and repeatable work or inefficient processes
• Conducts on-site evaluations of third-party products being considered for firm adoption
• Promotes an inclusive and healthy working environment and helps to resolve organizational impediments/blockers
• Contributes to the creation/selection of functional and non-functional product evaluation requirements within and across domains
• Ability to work nights and weekends as required to support implementation activities

Required Qualifications:

• 5+ years of IT experience with Firewall (FW) solutions (building FWs from scratch)
• Experience building/operating various firewall platforms including Fortinet and Check Point
• Excellent oral and written communication – must be able to communicate at all organizational levels.
• Strong communication skills to work with senior management to provide status updates, deliver requirements and report details at correct level
• Strong attention to detail and ability to follow an existing refined process, while also seeking continual improvements. Assess and advise of solutions to improve processes
• Strong analytical, problem solving, and organizational skills required
• Proven ability to effectively collaborate with others, make decisions to initiate action, and adapt to change
• Bank experience highly recommended along with comprehensive knowledge of business unit’s functions
• Proactively engage to assess readiness and ensure zero impact from changes
• Leadership skills during technical troubleshooting triages – strong analytical skills
• In depth engineering experience in perimeter solutions, including the design, low level engineering, and delivery of new hardware systems for client applications across the enterprise DMZ
• Development and maintenance of High Level and Low-Level Design diagrams/documentation
• Ability to work nights and weekends as required to support implementation activities

Desired Qualifications:

• Bachelor’s degree in technology or related field
• Experience with FortiManager, FortiAnalyzer, and Check Point Provider 1 Management Systems (Smartview Manager and Tracker)
• Experience with IDS/IPS products (i.e. TippingPoint and Fortinet)
• Strong knowledge of network routing/switching (routing protocols, multicast, other LAN protocols)
• Functional understanding of diverse set of networked applications requiring perimeter management solutions, including HTTP, HTTPS, SSH, FTP, DNS, NTP, ANYCAST services, and others
• DMZ Network infrastructure knowledge including topology, security policies, firewalls and the L2/L3 switch and router infrastructure
• Programming skills a plus: sh, Perl, Python, Golang, C, C++
• Administrator level ability with UNIX (Linux or another variant) is highly desirable

Skills:

• Analytical Thinking
• Application Development
• Automation
• Adaptability
• Business Acumen
• DevOps Practices
• Solution Delivery Process
• Solution Design

Shift:

1st shift (United States of America)

Hours Per Week: 

40

Pay Transparency details

US - NJ - Jersey City - 101 Hudson St - 101 Hudson (NJ2101)

Pay and benefits information

Pay range

$104,200.00 - $155,100.00 annualized salary, offers to be determined based on experience, education and skill set.

Discretionary incentive eligible

This role is eligible to participate in the annual discretionary plan. Employees are eligible for an annual discretionary award based on their overall individual performance results and behaviors, the performance and contributions of their line of business and/or group; and the overall success of the Company.

Benefits

This role is currently benefits eligible. We provide industry-leading benefits, access to paid time off, resources and support to our employees so they can make a genuine impact and contribute to the sustainable growth of our business and the communities we serve. Candidarsi ora