Key responsibilities: Establish relationships with key decision makers in the customer organization in order to contribute to project details and outcomes. Implement changes according to project governance. Participate in several projects/programs, occasionally in a role of guiding the project team. Qualifications: CCNA, CCNP (Preferred), Optionally BS Degree in engineering (IT, Telecom, Computer Science). Preferably over 10+ year’s relevant experience Strong interpersonal communication skills (written, spoken and presentation) and ability to work with clients/customers. Good understanding of networks and services. Is pro-active, with good communication skills (written, spoken and presentation), creativity, problem solving and decision-making skills. Is capable of working both independently and within teams and be comfortable working in structured and unstructured situations and solving non-standard problems. Evaluate site network infrastructure, and operations; assess customer current and future plans to optimize their network architecture, and capabilities. Knowledge and understanding of DMZ networks within the DC environment a plus. Description: Support existing Routing and Switching infrastructure including Cisco Nexus, 3750, 3560, 6500, 4500, and various other Cisco Switches and Routers Install, configure, and support Cisco (Nexus 9K 7K 5K 3K) Switches Install, configure, and support Cisco (3560, 2950, 6500, 4500) Switches Install, configure, and support Cisco (2800, 2900, 2800, and 3900 series) Routers. Engineer solutions to integrate Routing and Switches into new facilities. Engineer solutions to update Routers and Switches into existing facilities. Experience with Cisco Putty/Secure CRT. Experience with SSH configuration and testing. Work with outside vendors and internal organizations to have various surveys performed and required equipment installed. Resolve client connectivity, interference, and other networking issues. Writing Change documentation based on Standards documentation. Performing Peer reviews of team members work to verify accuracy, wording, and functionality. Providing Support after the change event Troubleshoot routing/switching issues such as BGP, EIGRP, ACL’s VLANs, VTP, and spanning tree issues. Requirements: Extensive knowledge of Cisco IOS Platforms and Cisco Systems products. Experience performing LAN/WAN hardware infrastructure changes Knowledge of ST, SC, and LC fiber optic technologies Knowledge of LAN infrastructure to include Cisco Switches and Routers Knowledge of LAN switch configuration technologies to include VTP, STP, QoS, and Cisco switch stack configurations Knowledge of Routing Protocols and Routing Redistribution In-depth understanding of troubleshooting Cisco router and switch configurations. Ability to interface directly with vendors and local support teams regarding WAN/LAN hardware implementation Ability to self-manage concurrently running projects. Ability to follow Change Management Processes Ability to work during nights, weekends, and during the daytime Experience with Arista Devices and WAAS devices is a plus. Availability to work US working hours, so they can attend customer project meetings Availability to work weekends for deployments and implementations.
About the Role The Security Transition and Integration Team is seeking a skilled Threat Engineer to play a key role in Cybersecurity Release & Deployment initiatives (supporting high-profile projects through new system deployments) and Lifecycle Management Refresh programs (upgrading hardware and software to address End-of-Life equipment and non-permitted technologies). This is a highly dynamic position that requires both strategic and technical expertise. The ideal candidate will combine strong engineering skills with excellent communication and collaboration abilities, working seamlessly across business and technology teams to deliver secure, reliable, and innovative solutions. What You’ll Do Lead technical planning, logistics, and execution to ensure on-time delivery of threat engineering initiatives while minimizing network impact. Partner with technology engagement teams to align threat solutions with evolving business and security requirements. Collaborate with Security Architecture, Engineering, and Design teams to drive adoption of new technologies, systems, and processes. Manage multiple technical projects simultaneously, balancing competing deadlines and priorities. Identify opportunities to optimize service delivery, tracking and measuring improvements over time. Support project close-out activities, including database updates, asset tracking, inventory management, and documentation. Required Qualifications 5+ years of hands-on security experience with threat solutions. Proven expertise in threat engineering, including design, low-level engineering, and delivery of new hardware systems for client applications. Practical experience with threat platforms such as SkyHigh Secure Web Gateway, F5 SSLO, and Trellix FireEye. Strong analytical, problem-solving, and organizational skills. Demonstrated ability to collaborate across multiple teams, adapt to change, and deliver results. Flexibility to support critical change activities during nights and weekends. This role is ideal for a hands-on security professional who thrives in fast-paced, complex environments and is eager to deliver cutting-edge cybersecurity solutions that protect critical infrastructure.
The Network Delivery and Execution Team is seeking a Cybersecurity Engineer to support Perimeter Release & Deployment (new deployments of Security Systems in support of high-profile projects) and Lifecycle Management Refresh initiatives (Upgrading Hardware and Software to mitigate End-of-Life equipment or Non-Permitted Technologies). Position Summary The Perimeter Engineer candidate will support technical initiatives addressing strategic projects and BAU work. Responsibilities include technical planning, logistics, and successful execution to achieve annual commitments and targeted schedules while incurring zero impact on the network. Work types include, but are not limited to, deployment of new secure environments, increasing capacity, hardware and software refreshes, migrations and decommissions. The candidate will require knowledge and real-world experience with Firewalls and IDS/IPS to deliver on the technical needs of this position. Seeking a polished Engineer with excellent written and oral communication skills. Must have a proven track record interacting with various levels of management, clients, and technical team members to plan and deliver technical Perimeter solutions. The candidate must possess the ability to analyze and understand a variety of existing and evolving requirements, and interact with peer technology teams to deliver on business needs effectively. This position will require the ability to manage multiple technical project engagements, requiring the candidate to be a team player who can also work independently to manage multiple deadlines, priorities, and a diverse set of applications and requirements. Key Responsibilities: • Responsible for Release & Deployment project delivery and Lifecycle Management activities. Performs technical assessments to fully understand a variety of complex technical requests, vetting of the proposed solution, plan development, scheduling, and the implementation of these changes, whichdelivers the intended outcome along with zero impact to the production network. • Detailed implementation plans will be reviewed for all designs, pre and post validation procedures, UAT acceptance criteria, and back-out plans. Candidate must understand how designs turn into implementation, and those implementations to be based upon standards and predefined runbooks. • Operate quality assurance functions prior to each implementation to meet engineering standards and mitigate risks. Proactively raise questions and/or concerns to the Design Engineering team to address them prior to change implementation. • Build and Operate various Firewall platforms (Fortinet, Checkpoint, TippingPoint IDS/IPS) and respective management systems. • Adheres to work effort and project close-out practices such as database updates, asset tracking, inventory systems, records retention, and the related systems, tools, and process updates. • Works with Perimeter Security Architecture and Engineering Teams to share knowledge in support of new technology adoption, systems enhancements/automation, or process changes. Identify opportunities to improve service delivery and objectively measure the effects of these efforts over time. • Ability to work nights and weekends as required to support implementation activities. • Understanding of the Bank’s Network Infrastructure and associated Risk Management practices are highly recommended to remain successful. • Knowledge of DMZ Networking and Cisco Routing/Switching is a plus Required Skills • Ability to work nights and weekends as required to support implementation activities. • Building/operating various firewall platforms including Fortinet and Check Point • Excellent oral and written communication – must be able to communicate at all organizational levels. Strong communication skills to work with senior management to provide status updates, deliver requirements and report details at correct level. • Strong attention to detail and ability to follow an existing refined process, while also seeking continual improvements. Assess and advise of solutions to improve processes. • Strong analytical, problem solving, and organizational skills required. • Proven ability to effectively collaborate with others, make decisions to initiate action, and adapt to change. • Bank experience highly recommended along with comprehensive knowledge of business unit’s functions. • Proactively engage to assess readiness and ensure zero impact from changes. • Leadership skills during technical troubleshooting triages – strong analytical skills. • In depth engineering experience in perimeter solutions, including the design, low level engineering, and delivery of new hardware systems for client applications across the enterprise DMZ. • Development and maintenance of High Level and Low-Level Design diagrams/documentation. Desired Skills • Experience with Forti Manager, Forti Analyzer, and Check Point Provider 1 Management Systems (SmartView Manager and Tracker). • Experience with IDS/IPS products (i.e. Tipping Point and Fortinet). • Strong knowledge of network routing/switching (routing protocols, multicast, other LAN protocols). • Functional understanding of diverse set of networked applications requiring perimeter management solutions, including HTTP, HTTPS, SSH, FTP, DNS, NTP, ANYCAST services, and others. • DMZ Network infrastructure knowledge including topology, security policies, firewalls and the L2/L3 switch and router infrastructure. • Programming skills a plus: sh, Perl, Python, Golang, C, C++. • Administrator level ability with UNIX (Linux or another variant) is highly desirable. • Bachelor’s degree orequiv8 years of IT experience with Firewall solutions (building FWs from scratch).
Seeking a Greenfield Network Automation Engineer to design and build automation from the ground up for Arista-based environments. Position Summary/Job Description The role will be to architect and implement playbooks, frameworks, and automated test suites that provision, monitor, and validate large-scale network topologies running Arista EOS. This is a hands-on role spanning software engineering, network engineering, and DevOps – owning the full SDLC, integrating with CI/CD pipelines, and establishing the standards, controls, and telemetry needed for a high-scale, secure automation platform. Collaboration across development, testing, and operations to deliver frictionless self-service for internal customers, while improving reliability, speed, and security, is a key aspect of the role. Additional Responsibilities Design & Build Greenfield Automation Architect reusable Ansible/Python frameworks, roles, and modules for Arista EOS. Develop abstracted device classes/methods to provision, configure, and monitor devices at scale. Automated Testing & Quality Create maintainable automated test suites and integrate into CI/CD (e.g., Jenkins, GitLab CI/CD). Monitor execution, analyze failures, perform root cause analysis, and publish clear, actionable bug reports. Provisioning, Observability & Security Implement automation for provisioning/validation via REST, OpenConfig, gNMI and Ansible. Build logging/metrics/telemetry and security controls so the platform runs efficiently and flawlessly. Standards, SDLC & Enablement Own/evolve security and development standards, controls, and documentation across the full SDLC. Translate business/technical workflows into executable Ansible/Python code and authoritative runbooks. Contribute to internal enablement: documentation, code reviews, and mentoring on automation best practices. Required Qualifications Automation & Scripting: Ansible and/or Python (5–7 yrs), YAML, JSON, infrastructure-based scripting. Networking: Knowledge of VXLAN, BGP, EVPN; experience with Arista switches and CloudVision Portal (CVP). APIs & Tools: REST, OpenConfig, gNMI; Git; CI/CD (Jenkins/GitLab); Linux (preferred); Itential (preferred). Experience: 5–7 yrs in network infrastructure; proven SDLC delivery; automation design patterns; security controls. Soft Skills: Excellent interpersonal, organizational, and communication (written, verbal, and presentation) skills are a must. Proven ability to work independently with minimal supervision and as part of a global team with direct responsibilities and an ability to juggle competing priorities and adapt to changes in project scope. Desired Qualifications Bachelor’s degree in CS/EE or equivalent. Experience qualifying/automating Arista EOS networks at scale and working with Arista CVP. Terraform for network automation. CCIE (Data Center or Routing & Switching) Experience in large-scale data center deployments Familiarity with network monitoring and telemetry tools