Senior Architect
Bank of America · Plano, TX · Yesterday
Art & CreativeFull-time
Key Responsibilities
- Define the target operating environment
- Design for client resiliency
- Assist with solution design
- Define non-functional requirements
Job Expectations
- Work with stakeholders and service providers aligned to the Business' strategic objectives
- Evaluate the impact of strategic design decisions
- Contribute to the architecture roadmap
Technical DMZ Architect
- Provide DMZ/Remote Access/SDWAN/Hosting/B2B/VPN Infrastructure Architecture
- Create network level HLD and LLD designs
- Solution delivery
- Assess design submissions for security compliance against baselines
- Shepard requestors through technical challenges until designs are complete
- Act in a liaison role between Global Information Security and as an escalation point for engineering / operations
- Self-starter who can lead projects
- Must be able to troubleshoot multivendor solutions in lab or POC environments
- Manage assigned networking projects, program components and deployments to deliver services in accordance with established company objectives
Required Qualifications
- 10+ years industry experience with technology domain experience
- Experience integrating solutions with Cloud provider environments such as MS Azure, AWS, Google, IBM
- Strong understanding of network security architecture and traffic segmentation
- Working knowledge of public cloud networking concepts within GCP, AWS, and Azure environments
- Solid routing, switching, Arista, Cisco Nexus, Firepower/ASA, Fortinet router and DMZ/ISP experience
- Solid understanding of TCP/IP concepts, SDN, OSPF, BGP, VLAN, IPSEC, ISAKMP, PKI, QOS, Multicast, trunking/port-channeling, VRRP, FHRP protocols, enterprise level MPLS, VDC, flavors of VPC, SDN
- Familiar with best practices to install and deploy various Arista & Cisco routing and switching platforms such as ISR, ASR, Catalyst and Nexus
- Experience with large scale, complex network/DMZ environments and Authentication mechanisms (e.g. Active Directory, Ping federate)
- Experience with scripting languages
Desired Qualifications
- Experience integrating enterprise networks with: Google Cloud Platform (GCP), AWS, Microsoft Azure
- Understanding of cloud connectivity services such as: Cloud Interconnect, Direct Connect, ExpressRoute
- Site-to-site VPN architectures
- Experience test tools including Quali Cloud Shell, and Viavi Tera VM
- General experience with security technologies, such as firewalls, intrusion detection, threat mitigation
- Exposure to EOS and IOS-XR routing
- IPv6 Knowledge/experience to support certification testing of IPv6 capabilities
- Experience with automation and development of automation scripts
- Python experience
- Experience with automation skills/tools such as: Arista CloudVision, Terraform, Ansible, Netconf, YANG