Managed File Transfer Engineer

We are seeking an experienced Managed File Transfer (MFT) Engineer to help engineer, secure, automate, and support the technology platforms that provide enterprise Managed File Transfer and Enterprise Fax services.

Working closely with Data Movement Technology leadership and partner technology teams, this individual contributor will provide deep technical expertise across MFT platforms and their supporting infrastructure. The engineer will be responsible for platform architecture and engineering, reliability, security, automation, observability, lifecycle management, and Level 3 production support.

A key focus of this position is continuous improvement. You will identify opportunities to improve resiliency, security, scalability, automation, monitoring, and operational supportability while modernizing legacy technologies and reducing manual processes and technical debt.

The ideal candidate combines strong MFT and infrastructure engineering experience with hands-on automation, troubleshooting, and problem-solving skills and is comfortable supporting mission-critical services in a complex enterprise environment.

Key Responsibilities

MFT Platform Engineering & Architecture

·         Design, build, maintain, and enhance enterprise Managed File Transfer infrastructure and supporting technologies.

·         Engineer secure, scalable, highly available file-transfer solutions from source through destination.

·         Develop and maintain technical standards and engineering controls for MFT platforms and services.

·         Analyze application and infrastructure performance and implement improvements that increase stability, reliability, and availability.

·         Review new file-transfer requirements and ensure implementations accurately represent the intended source-to-target data flow.

·         Evaluate technical debt, unsupported components, architectural limitations, and modernization opportunities.

Automation & Observability

·         Develop automation using PowerShell, Python, Shell, Ansible, Linux tooling, and other appropriate technologies.

·         Automate deployments, administration, validation, monitoring, and repetitive operational processes to reduce manual effort and operational risk.

·         Use Splunk and other observability technologies to develop effective platform monitoring, health checks, dashboards, alerts, and incident detection.

·         Improve centralized logging, event correlation, incident pattern recognition, and actionable alerting.

·         Ensure appropriate diagnostic and audit information is available for troubleshooting and incident investigation.

Security Engineering

·         Define and implement secure MFT standards covering SFTP, HTTPS, AS2, encryption, authentication, SSL/TLS certificates, service accounts, privileged access, and least-privilege principles.

·         Support modernization and remediation of legacy file-transfer technologies, protocols, and configurations.

·         Manage and troubleshoot SSL/TLS certificates and related security dependencies.

·         Partner with Information Security, Networking, Infrastructure, and application teams to remediate vulnerabilities and strengthen platform controls.

Platform Lifecycle & Production Engineering

·         Engineer and implement operating systems, middleware, database, application, and infrastructure upgrades required to maintain supported platforms.

·         Participate in platform upgrades, migrations, patching, and infrastructure changes from technical design through production implementation.

·         Develop repeatable deployment procedures, technical validation criteria, rollback procedures, and implementation documentation.

·         Support Business Continuity and Disaster Recovery planning, testing, and remediation activities.

·         Maintain architecture diagrams, engineering standards, technical documentation, and support procedures.

Level 3 Support & Problem Management

·         Provide Level 3 engineering support for complex MFT, infrastructure, connectivity, and Data Movement incidents.

·         Partner with Operations and global support teams during critical production incidents to restore service and identify corrective actions.

·         Conduct root-cause analysis for recurring issues and develop permanent engineering solutions where possible.

·         Document technical findings and reusable resolutions to improve operational support.

Required Qualifications

·         Bachelor’s degree in Computer Science, Information Technology, or a related field, or equivalent relevant professional experience.

·         5+ years of experience with middleware, Managed File Transfer, or closely related enterprise infrastructure technologies.

·         Demonstrated experience engineering and supporting mission-critical production platforms. Financial-services experience is preferred.

·         Hands-on experience installing, configuring, upgrading, patching, migrating, and troubleshooting Managed File Transfer platforms.

·         Strong understanding of MFT architecture and secure file-transfer design.

·         Strong knowledge of file-transfer and communication protocols, including SFTP, HTTPS, AS2, and FTP.

·         Strong knowledge of network concepts including LAN, VLAN, DMZ, firewalls, load balancing, and network segmentation.

·         Hands-on experience with Windows Server and Linux.

·         Strong scripting and automation skills using one or more of PowerShell, Python, Shell, and Ansible.

·         Experience developing automated deployment, administration, validation, or operational processes.

·         Experience with logging and observability platforms such as Splunk.

·         Experience with SSL/TLS certificates, certificate lifecycle management, and certificate-related troubleshooting.

·         Understanding of PGP encryption, authentication, privileged access, service accounts, and least-privilege security principles.

·         Experience providing Level 3 engineering support for business-critical technology services.

Preferred Qualifications

·         Experience in a highly regulated or financial-services environment.

·         Experience with VMware or comparable virtualization technologies.

·         Working knowledge of SQL and Transact-SQL, with exposure to Oracle databases.

·         Familiarity with .NET or C#.

·         Experience with enterprise workload/job-scheduling technologies such as AutoSys or similar platforms.

·         Experience with enterprise Business Continuity and Disaster Recovery testing.

·         Experience modernizing legacy infrastructure or file-transfer technologies.

Communication & Collaboration

·         Strong written and verbal communication skills.

·         Ability to explain complex technical concepts to technical and non-technical audiences.

·         Strong analytical, troubleshooting, and root-cause-analysis skills.

·         Ability to manage multiple priorities and coordinate work across Engineering, Operations, Infrastructure, Networking, Information Security, and client-facing technology teams.

·         Strong customer-service orientation and sense of ownership.

·         Ability to work effectively with globally distributed teams supporting mission-critical services.

Salary Range

$90,000 - $130,000 base salary + annual target bonus

BBH and its affiliates' compensation program includes base salary, discretionary bonuses, and profit-sharing. The anticipated base salary range(s) shown above are only for the indicated location(s) and may differ in other locations due to cost of living and labor considerations. Base salaries may vary based on factors such as skill, experience and qualification for the role. BBH's total rewards package recognizes your contributions with more than just a paycheck—providing you with benefits that enhance your experience at BBH from long-term savings, healthcare, and income protection to professional development opportunities and time off, our programs support your overall well-being. 

We value diverse experiences. We value diverse experiences and transferrable skillsets. If your career hasn’t followed a traditional path, includes alternative experiences, or doesn’t meet every qualification or skill listed in the job description, please do go ahead and apply.