We're seeking a future team member for the role of DMZ Network Engineer to join our Infrastructure Platform via our Network Services team. This role is located in Pittsburgh, Pa or Lake Mary, FL. In this role, you'll make an impact in the following ways: • Design and implement DMZ network architectures to support secure, highly available, and scalable application connectivity. • Develop and maintain network designs covering routing, firewalls, load balancing, and web proxy services within DMZ and adjacent network zones. • Define and implement application service patterns, including traffic flow design, break/inspect architectures, and authentication-integrated connectivity patterns. • Engineer solutions that support strong network segmentation and controlled communication between internal, external, and partner-facing environments. • Create and maintain logical and physical network designs, standards, diagrams, and supporting technical documentation. • Translate business, application, and security requirements into practical network designs and implementation plans. • Partner with security, application, platform, and operations teams to ensure network solutions align with enterprise architecture, resiliency, and control requirements. • Lead or contribute to implementation activities for new services, enhancements, and infrastructure modernization efforts. • Evaluate current-state designs and recommend improvements to increase security, performance, scalability, and operational supportability. • Support complex troubleshooting and design review efforts related to DMZ connectivity, routing behavior, segmentation, and application traffic patterns. • Participate in change planning and implementation activities to ensure controlled and successful deployment of network solutions. • Promote repeatable engineering practices and clear documentation to support long-term platform stability and operational readiness. To be successful in this role, we're seeking the following: • Minimum of 8 years of experience in network engineering, with significant experience in design/architecture and implementation roles. • Strong expertise in DMZ design and enterprise network architecture. • Strong understanding of network routing, including experience with routing protocols, with particular focus on BGP. • Strong knowledge of network segmentation principles and secure network design patterns. • Experience with firewall, load balancing, and web proxy design in enterprise environments. • Experience designing or supporting application service patterns, including break/inspect and authentication-related traffic flows. • Hands-on knowledge of Cisco ACI and SDWAN. • Strong experience with Cisco IOS-XE and Cisco NX-OS. • Ability to create high-quality architecture and engineering documentation, including diagrams, standards, and implementation details. • Strong ability to work across teams and communicate technical concepts clearly to both technical and non-technical stakeholders. • Demonstrated ability to translate business requirements into effective and supportable technical solutions. Our Benefits and Rewards: BNY offers highly competitive compensation, benefits, and wellbeing programs rooted in a strong culture of excellence and our pay-for-performance philosophy. We provide access to flexible global resources and tools for your life's journey. Focus on your health, foster your personal resilience, and reach your financial goals as a valued member of our team, along with generous paid leaves, including paid volunteer time, that can support you and your family through moments that matter.