Job Description:This job is responsible for defining an architectural vision and solution that supports the strategic outcomes of the Business' Products and Services. Key responsibilities include defining the target operating environment, designing for client resiliency, assisting with solution design, and defining non-functional requirements. Job expectations include working with stakeholders and service providers aligned to the Business' strategic objectives, evaluating the impact of strategic design decisions, and contributing to the architecture roadmap.
DMZ ArchitectTechnical DMZ network architect responsible for DMZ network project designs with focus on SASE and Cloud designs. Also provide DMZ/Remote Access/SDWAN/Hosting/B2B/VPN Infrastructure Architecture for various LOB and B2B customers across various DMZ Zones including creation of network level HLD and LLD designs and solution delivery.
Assess design submissions for security compliance against baselines. Shepard requestors through technical challenges until designs are complete. Act in a liaison role between Global Information Security and as an escalation point for engineering / operations.
Self-starter who can lead projects. Must be able to troubleshoot multivendor solutions in lab or POC environments. Manage assigned networking projects, program components and deployments to deliver services in accordance with established company objectives. Maintain a thorough understanding of Network Infrastructure, IPv4/v6, IP Routing, DNS, Security, HTTP(S), VPN, and Network Monitoring tools.
Responsibilities:- Works across the business, operations and technology to create the solution intent and architectural vision for complex solutions and prioritize functional and non-functional requirements into a technology backlog to enable the technology roadmap and functionality to support evolving capabilities and services
- Contributes to the creation of the architecture roadmap of defined domains (Business, Application, Data, and Technology) in support of the product roadmap and the development of best practices including standardized templates
- Clarifies the architecture, assists with system design to support implementation, and provides solution options to resolve any architectural impediments
- Facilitates solution driven discussions, leads the design of complex architectures, and finds creative solutions through knowledge of domain, practical experiments, and proof of concepts while ensuring architecture is flexible, modular, and adaptable
- Educates team members on the technology practices, standardization strategies, and best practices to create innovative solutions
- Supports the team as needed to select the technology stack required for solutions and helps select preferred technology products
- Performs design and code reviews to ensure all non-functional requirements are sufficiently met (for example, security, performance, maintainability, scalability, usability, and reliability)
- Contribute to the creation of the architecture roadmap of defined technology domains in support of the product roadmap
- Contribute to the development of best practices including standardized templates
- Work across business and technology to create the solution intent and architectural vision for large complex solutions and evolve it based on an emerging requirements
- Lead rapid shaping of a high-level architecture with details filled in with emerging business requirements; ensure architecture is flexible, modular, and designed to adapt easily
- Support the Principal Engineer as needed to select the technology stack required for solutions and help select preferred technology products
Required Qualifications:- 10+ years industry experience with technology domain experience
- Experience integrating solutions with Cloud provider environments such as MS Azure, AWS, Google, IBM
- Strong understanding of network security architecture and traffic segmentation
- Working knowledge of public cloud networking concepts within GCP, AWS, and Azure environments
- Must have solid routing, switching, Arista, Cisco Nexus, Firepower/ASA, Fortinet router and DMZ/ISP experience
- Solid understanding of TCP/IP concepts, SDN, OSPF, BGP, VLAN, IPSEC, ISAKMP, PKI, QOS, Multicast, trunking/port-channeling, VRRP, FHRP protocols, enterprise level MPLS, VDC, flavors of VPC, SDN
- Ability to utilize DDoS tools like Arbor and Prolexic/Akamai & F5/Silverline for mitigations to include Application layer, TCP state table and Bandwidth DDoS threats
- Familiar with best practices to install and deploy various Arista & Cisco routing and switching platforms such as ISR, ASR, Catalyst and Nexus
- Experience with large scale, complex network/DMZ environments and Authentication mechanisms (e.g. Active Directory, Ping federate) Experience with scripting languages
Desired Qualifications:Experience integrating enterprise networks with:- Google Cloud Platform (GCP)
- AWS
- Microsoft Azure
Understanding of cloud connectivity services such as: - Cloud Interconnect
- Direct Connect
- ExpressRoute
Desired Qualifications:(con't)- Site-to-site VPN architectures
- Experience test tools including Quali Cloud Shell, and Viavi Tera VM
- General experience with security technologies, such as firewalls, intrusion detection, threat mitigation
- Exposure to EOS and IOS-XR routing
- IPv6 Knowledge/experience to support certification testing of IPv6 capabilities
- Experience with automation and development of automation scripts
- Python experience
- Experience with automation skills/tools such as: Arista CloudVision, Terraform, Ansible, Netconf, YANG
Skills:- Analytical Thinking
- Architecture
- Result Orientation
- Solution Design
- Technical Strategy Development
- Application Development
- Collaboration
- Data Management
- DevOps Practices
- Risk Management
- Agile Practices
- Automation
- Influence
- Solution Delivery Process
- Test Engineering
Hours Per Week:40
Travel Required: Yes, 5% of the time
Pay Transparency detailsUS - NJ - Jersey City - 101 Hudson St - 101 Hudson (NJ2101)
Pay and benefits information
Pay range
$140,500.00 - $205,000.00 annualized salary, offers to be determined based on experience, education and skill set.
Discretionary incentive eligible
This role is eligible to participate in the annual discretionary plan. Employees are eligible for an annual discretionary award based on their overall individual performance results and behaviors, the performance and contributions of their line of business and/or group; and the overall success of the Company.
Benefits
This role is currently benefits eligible. We provide industry-leading benefits, access to paid time off, resources and support to our employees so they can make a genuine impact and contribute to the sustainable growth of our business and the communities we serve.
