Senior Architect

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We drive Responsible Growth and deliver for our clients, teammates, communities, and shareholders every day. Our inclusive workplace supports teammates’ physical, emotional, and financial wellness through affordable, competitive, and flexible benefits. We value diverse perspectives shaped by military service, community college education, and varied work and life experiences, fostering resilience, leadership, and innovation.

Bank of America supports an in-office culture with clear expectations and role-specific flexibility to encourage collaboration, engagement, and career development.

About the role

This role is responsible for defining an architectural vision and solution that supports the strategic outcomes of the Business' Products and Services. Key responsibilities include defining the target operating environment, designing for client resiliency, assisting with solution design, and defining non-functional requirements. The DMZ Architect will focus on DMZ network project designs with an emphasis on SASE and Cloud designs, providing DMZ/Remote Access/SDWAN/Hosting/B2B/VPN Infrastructure Architecture for various lines of business and B2B customers across multiple DMZ Zones.

Responsibilities

• Work across business, operations, and technology to create the solution intent and architectural vision for complex solutions, prioritizing functional and non-functional requirements into a technology backlog.
• Contribute to the architecture roadmap of defined domains (Business, Application, Data, and Technology) in support of the product roadmap and develop best practices, including standardized templates.
• Clarify the architecture, assist with system design to support implementation, and provide solution options to resolve architectural impediments.
• Facilitate solution-driven discussions, lead the design of complex architectures, and find creative solutions through domain knowledge, experiments, and proof of concepts while ensuring flexibility and modularity.
• Educate team members on technology practices, standardization strategies, and best practices to create innovative solutions.
• Support the team in selecting the technology stack required for solutions and help select preferred technology products.
• Perform design and code reviews to ensure all non-functional requirements are met (e.g., security, performance, maintainability, scalability, usability, and reliability).
• Create high-level architecture with details evolving based on business requirements, ensuring adaptability and modularity.
• Assess design submissions for security compliance against baselines and guide requestors through technical challenges until designs are complete.
• Act as a liaison between Global Information Security and as an escalation point for engineering/operations.
• Troubleshoot multivendor solutions in lab or POC environments.
• Manage assigned networking projects, program components, and deployments to deliver services in accordance with company objectives.
• Maintain a thorough understanding of Network Infrastructure, IPv4/v6, IP Routing, DNS, Security, HTTP(S), VPN, and Network Monitoring tools.

Requirements

• 10+ years of industry experience with technology domain expertise.
• Experience integrating solutions with Cloud provider environments such as MS Azure, AWS, and Google.
• Strong understanding of network security architecture and traffic segmentation.
• Working knowledge of public cloud networking concepts within GCP, AWS, and Azure environments.
• Solid routing, switching, Arista, Cisco Nexus, Firepower/ASA, Fortinet router, and DMZ/ISP experience.
• Solid understanding of TCP/IP concepts, SDN, OSPF, BGP, VLAN, IPSEC, ISAKMP, PKI, QoS, Multicast, trunking/port-channeling, VRRP, FHRP protocols, enterprise-level MPLS, VDC, flavors of VPC, and SDN.
• Ability to utilize DDoS tools like Arbor and Prolexic/Akamai & F5/Silverline for mitigations, including Application layer, TCP state table, and Bandwidth DDoS threats.
• Familiarity with best practices to install and deploy various Arista & Cisco routing and switching platforms such as ISR, ASR, Catalyst, and Nexus.
• Experience with large-scale, complex network/DMZ environments and Authentication mechanisms (e.g., Active Directory, Ping Federate).
• Experience with scripting languages.

Qualifications

• Experience integrating enterprise networks with Google Cloud Platform (GCP), AWS, and Microsoft Azure.
• Understanding of cloud connectivity services such as Cloud Interconnect, Direct Connect, and ExpressRoute.
• Experience with site-to-site VPN architectures.
• Experience with test tools including Quali Cloud Shell and Viavi Tera VM.
• General experience with security technologies, such as firewalls, intrusion detection, and threat mitigation.
• Exposure to EOS and IOS-XR routing.
• IPv6 knowledge/experience to support certification testing of IPv6 capabilities.
• Experience with automation and development of automation scripts.
• Python experience.
• Experience with automation skills/tools such as Arista CloudVision, Terraform, Ansible, Netconf, and YANG.

Skills

• Analytical Thinking
• Architecture
• Result Orientation
• Solution Design
• Technical Strategy Development
• Application Development
• Collaboration
• Data Management
• DevOps Practices
• Risk Management
• Agile Practices
• Automation
• Influence
• Solution Delivery Process
• Test Engineering

Schedule

1st shift (United States of America), 40 hours per week.