Managed File Transfer Engineer

Brown Brothers Harriman & Co•Boston, MA

11d

About The Position

Brown Brothers Harriman (BBH) is seeking an experienced Managed File Transfer (MFT) Engineer to engineer, secure, automate, and support enterprise Managed File Transfer and Enterprise Fax services. This individual contributor will work with Data Movement Technology leadership and partner technology teams, providing technical expertise across MFT platforms and their supporting infrastructure. The engineer will be responsible for platform architecture and engineering, reliability, security, automation, observability, lifecycle management, and Level 3 production support. A central focus is continuous improvement: identifying ways to improve resiliency, security, scalability, monitoring, automation, and operational supportability while modernizing legacy technologies and reducing manual processes and technical debt. The role supports mission-critical services in a complex enterprise environment. BBH describes itself as a global financial services firm with a partnership approach to its business and client relationships. Its total rewards package includes long-term savings, healthcare, income protection, professional development opportunities, and time off. Compensation includes a base salary and discretionary bonuses, with a stated base salary range of $90,000–$130,000 plus an annual target bonus. Base pay may vary by location, skills, experience, and qualifications.

Requirements

Bachelor’s degree in Computer Science, Information Technology, or a related field, or equivalent relevant professional experience.
At least 5 years of experience with middleware, Managed File Transfer, or closely related enterprise infrastructure technologies.
Demonstrated experience engineering and supporting mission-critical production platforms.
Hands-on experience installing, configuring, upgrading, patching, migrating, and troubleshooting Managed File Transfer platforms.
Strong understanding of MFT architecture and secure file-transfer design.
Strong knowledge of file-transfer and communication protocols, including SFTP, HTTPS, AS2, and FTP.
Strong knowledge of network concepts including LAN, VLAN, DMZ, firewalls, load balancing, and network segmentation.
Hands-on experience with Windows Server and Linux.
Strong scripting and automation skills using one or more of PowerShell, Python, Shell, and Ansible.
Experience developing automated deployment, administration, validation, or operational processes.
Experience with logging and observability platforms such as Splunk.
Experience with SSL/TLS certificates, certificate lifecycle management, and certificate-related troubleshooting.
Understanding of PGP encryption, authentication, privileged access, service accounts, and least-privilege security principles.
Experience providing Level 3 engineering support for business-critical technology services.
Strong written and verbal communication skills, including the ability to explain complex technical concepts to technical and non-technical audiences.
Strong analytical, troubleshooting, and root-cause-analysis skills.
Ability to manage multiple priorities and coordinate work across teams.
Strong customer-service orientation and sense of ownership.
Ability to work effectively with globally distributed teams supporting mission-critical services.

Nice To Haves

Financial-services experience or experience in a highly regulated environment.
Experience with VMware or comparable virtualization technologies.
Working knowledge of SQL and Transact-SQL, with exposure to Oracle databases.
Familiarity with .NET or C#.
Experience with enterprise workload/job-scheduling technologies such as AutoSys or similar platforms.
Experience with enterprise Business Continuity and Disaster Recovery testing.
Experience modernizing legacy infrastructure or file-transfer technologies.

Responsibilities

Design, build, maintain, and enhance enterprise Managed File Transfer infrastructure and supporting technologies.
Engineer secure, scalable, highly available file-transfer solutions from source through destination.
Develop and maintain technical standards and engineering controls for MFT platforms and services.
Analyze application and infrastructure performance and implement improvements to stability, reliability, and availability.
Review file-transfer requirements and ensure implementations accurately represent intended source-to-target data flows.
Evaluate technical debt, unsupported components, architectural limitations, and modernization opportunities.
Develop automation using PowerShell, Python, Shell, Ansible, Linux tooling, and other appropriate technologies.
Automate deployments, administration, validation, monitoring, and repetitive operational processes to reduce manual effort and operational risk.
Use Splunk and other observability technologies to develop platform monitoring, health checks, dashboards, alerts, and incident detection.
Improve centralized logging, event correlation, incident pattern recognition, and actionable alerting.
Ensure diagnostic and audit information is available for troubleshooting and incident investigation.
Define and implement secure MFT standards covering transfer protocols, encryption, authentication, certificates, service accounts, privileged access, and least-privilege principles.
Support modernization and remediation of legacy file-transfer technologies, protocols, and configurations.
Manage and troubleshoot SSL/TLS certificates and related security dependencies.
Partner with Information Security, Networking, Infrastructure, and application teams to remediate vulnerabilities and strengthen platform controls.
Engineer and implement operating-system, middleware, database, application, and infrastructure upgrades needed to maintain supported platforms.
Participate in platform upgrades, migrations, patching, and infrastructure changes from technical design through production implementation.
Develop repeatable deployment procedures, technical validation criteria, rollback procedures, and implementation documentation.
Support Business Continuity and Disaster Recovery planning, testing, and remediation.
Maintain architecture diagrams, engineering standards, technical documentation, and support procedures.
Provide Level 3 engineering support for complex MFT, infrastructure, connectivity, and Data Movement incidents.
Partner with Operations and global support teams during critical production incidents to restore service and identify corrective actions.
Conduct root-cause analysis for recurring issues and develop permanent engineering solutions where possible.
Document technical findings and reusable resolutions to improve operational support.
Coordinate work across Engineering, Operations, Infrastructure, Networking, Information Security, and client-facing technology teams.