Sr. Network Security Engineer (Cloud exp required)

Join to apply for the Sr. Network Security Engineer (Cloud exp required) role at Bank of America .

1 week ago Be among the first 25 applicants.

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.

Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being an inclusive workplace, attracting and developing exceptional talent, supporting our teammates’ physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve.

Bank of America is committed to an in‑office culture with specific requirements for office‑based attendance that allows for an appropriate level of flexibility for our teammates and businesses based on role‑specific considerations.

At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!

Position Summary

We are seeking a skilled and motivated Network Security Engineer to join our GIS Core Engineering team. The Network Security Engineer is a key individual contributor accountable for researching, designing, engineering, implementing, and supporting network security solutions. You will utilize in‑depth technical knowledge and business requirements to help design and implement secure solutions to meet customer/client needs while protecting the Bank’s assets. The role involves developing and implementing security standards, procedures, and guidelines for multiple platforms and diverse environments, exercising judgment within broadly defined practices and policies to select methods, techniques, and evaluation criteria for optimal results. You must have solid knowledge of network security domains such as DDoS, Segmentation, Network Access, Web Content Inspection, Perimeter Defense, and Network monitoring. Excellent communication skills are essential as you regularly collaborate with experts within and across regions. Typical applicants should have 5 to 7 years of cybersecurity or engineering experience.

Key Responsibilities

• Serve as a subject matter expert for one or more engineering initiatives and be the point of contact for clients.
• Contribute to defining and ensuring security requirements are met based on BofA standards and policies.
• Incorporate basic architecture components including threat models, diagrams, and technological requirements for solution development.
• Understand and utilize basic network, virtualization, and datacenter technologies for deployment strategies.
• Lead the delivery of major engineering milestones and act as the critical decision‑maker regarding technical design and implementation.
• Document and communicate required information for deployment, maintenance, support, and business functionality.
• Adhere to team delivery/release process and cadence pertaining to solution deployment and release.
• Identify and raise risks or potential vulnerabilities at all stages of the security‑engineering process.
• Work closely with a diverse set of stakeholders with varying priorities to debate and negotiate paths forward.
• Navigated and worked effectively across a complex, geographically dispersed organization.

Required Qualifications

• Strong fundamental understanding of information security principles, risks, and controls and of cyber security operations functions.
• Knowledge of how web‑based internet‑facing applications are deployed and set up and experience architecting complex enterprise cybersecurity solutions for data in transit across web, email, and B2B environments, including proxy control, malware inspection, SSL termination, and Data Loss Prevention (DLP).
• Understanding of how Content Delivery Networks (CDNs) work, how they are designed to provide application services, and how they are used to mitigate network security threats.
• Detailed knowledge of network security solutions such as DDoS mitigation techniques, WAF, etc.
• Experience designing, evaluating, and deploying network security solutions for outbound, inbound, and lateral traffic, including tools such as Skyhigh Web Gateway, Trellix (FireEye), and F5 LTM/APM/SSLO.
• Experience deploying proxies in the cloud (AWS) and experience with SASE platforms.
• Experience coordinating delivery of project/changes milestones, ensuring projects stay on target, escalating and identifying roadblocks.
• Ability to quickly diagnose problems and provide solutions or workarounds.
• Ability to translate business needs into requirements and analyze technical feasibility against requirements.

Personal Skills

• Ability to work independently on various initiatives with little oversight.
• Strong analytical, problem‑solving, and conceptual thinking skills.
• Motivated and willing to learn.

Desired Qualifications

• Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience).
• Experience deploying security solutions in virtual environments such as VMware, AWS, Azure.
• Experience integrating network security solutions with IaaS, PaaS, and SaaS components such as Zscaler, O365, etc.
• Experience deploying security solutions in email environments.
• Experience with Data Governance, Model Risk Management, and Application Management.
• Ability to work with technical and non‑technical business owners.
• Experience in large enterprise environments.
• Assist with internal efficiencies projects and development.
• Familiarity with industry standard endpoint tools.
• Relevant certifications: CCNA, CCNP, CISSP, or CEH.

This job will be open and accepting applications for a minimum of seven days from the date it was posted.

Shift

1st shift (United States of America)

Hours Per Week

40

Seniority level

Mid‑Senior level

Employment type

Full‑time

Job function

Information Technology

Industries

Banking