Job Description

We're seeking a future team member for the role of DMZ Network Engineer to join our Infrastructure Platform via our Network Services team. This role is located in Pittsburgh, Pa or Lake Mary, FL.

In this role, you'll make an impact in the following ways:

• Design and implement DMZ network architectures to support secure, highly available, and scalable application connectivity.
• Develop and maintain network designs covering routing, firewalls, load balancing, and web proxy services within DMZ and adjacent network zones.
• Define and implement application service patterns, including traffic flow design, break/inspect architectures, and authentication-integrated connectivity patterns.
• Engineer solutions that support strong network segmentation and controlled communication between internal, external, and partner-facing environments.
• Create and maintain logical and physical network designs, standards, diagrams, and supporting technical documentation.
• Translate business, application, and security requirements into practical network designs and implementation plans.
• Partner with security, application, platform, and operations teams to ensure network solutions align with enterprise architecture, resiliency, and control requirements.
• Lead or contribute to implementation activities for new services, enhancements, and infrastructure modernization efforts.
• Evaluate current-state designs and recommend improvements to increase security, performance, scalability, and operational supportability.
• Support complex troubleshooting and design review efforts related to DMZ connectivity, routing behavior, segmentation, and application traffic patterns.
• Participate in change planning and implementation activities to ensure controlled and successful deployment of network solutions.
• Promote repeatable engineering practices and clear documentation to support long-term platform stability and operational readiness.

To be successful in this role, we're seeking the following:

• Minimum of 8 years of experience in network engineering, with significant experience in design/architecture and implementation roles.
• Strong expertise in DMZ design and enterprise network architecture.
• Strong understanding of network routing, including experience with routing protocols, with particular focus on BGP.
• Strong knowledge of network segmentation principles and secure network design patterns.
• Experience with firewall, load balancing, and web proxy design in enterprise environments.
• Experience designing or supporting application service patterns, including break/inspect and authentication-related traffic flows.
• Hands-on knowledge of Cisco ACI and SDWAN.
• Strong experience with Cisco IOS-XE and Cisco NX-OS.
• Ability to create high-quality architecture and engineering documentation, including diagrams, standards, and implementation details.
• Strong ability to work across teams and communicate technical concepts clearly to both technical and non-technical stakeholders.
• Demonstrated ability to translate business requirements into effective and supportable technical solutions.

Our Benefits and Rewards:

BNY offers highly competitive compensation, benefits, and wellbeing programs rooted in a strong culture of excellence and our pay-for-performance philosophy. We provide access to flexible global resources and tools for your life's journey. Focus on your health, foster your personal resilience, and reach your financial goals as a valued member of our team, along with generous paid leaves, including paid volunteer time, that can support you and your family through moments that matter.

BNY assesses market data to ensure a competitive compensation package for our employees. The expected base salary for this position when employment commences can be found in the Job Info section at the bottom of the posting.

Base salary offered may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, and experience. Base salary is only part of the total rewards package, which may include eligibility for an annual discretionary incentive award. Subject to the terms and conditions of the applicable plans then in effect, eligible employees may enroll in a 401(k) plan as well as participate in Company-sponsored medical, dental, vision, and basic life insurance plans for the employee and the employee's eligible dependents. Eligible employees also may receive other benefits (including various paid time off benefits, such as vacation and sick time), dependent on the position offered. Details of participation in these benefit plans will be provided if an employee receives an offer of employment.

If hired, the employee will be in an "at will" position and the Company reserves the right to modify base salary (as well as any other discretionary payments or compensation programs) at any time, including for reasons related to individual performance, Company or individual department/team performance, and market factors.