Network Infrastructure Engineer, AVP

State Street•Boston, MA

1d•$90,000 - $157,500•Onsite

About The Position

We are seeking a Network Infrastructure Engineer to design, build, and operate a modern global network based on Versa, Cisco and Arista technologies including SD-WAN, Network Segmentation, Wireless, Client and Vendor Connectivity and Cloud Computing. This role is responsible for third party connectivity for SD-WAN and IPSec access. Sitting at the intersection of networking and security, this position is critical to the transition toward Zero Trust and cloud-first architectures. The engineer will work across campus, office, WAN, cloud, and third party access environments within large, globally distributed enterprise environments, integrating SD WAN, segmentation, and cloud delivered security controls to deliver resilient, scalable, and secure connectivity. This role plays a key part in evolving the firm’s global network, security and segmentation posture, and will implement standards and architecture decisions across campus, branch, and cloud environments globally. This position is ideal for an engineer strong in one or more of these domains and motivated to deepen their expertise across secure edge, Zero Trust, and modern network architectures. Curiosity, adaptability, and sound engineering judgment are highly valued.

Requirements

Strong routing and switching especially strong BGP and BGP to OSPF routing redistribution.
SD-WAN technologies and architectures (Versa SD-WAN preferred).
Network segmentation including VRFs, VLANs, access control, and micro segmentation.
Designing and supporting enterprise campus networks, including wired and wireless with Cisco and Arista technology.
Engineering and configuration of IPSec VPNs.
Configuration and Troubleshooting skills across WAN, LAN, wireless, and secure access domains both with management tools and CLI.
Experience with Dot1X and Port Level Security deployments.
Bachelor's degree in computer science, Engineering, or equivalent practical experience.
5-10 years of experience in enterprise network engineering roles.

Nice To Haves

Strong understanding of why the technology is being deployed.
Strong sense of ownership and accountability.
Ability to work across networks, security, and cloud teams.
Clear and effective communication of complex technical concepts.
Analytical thinking and structured problem-solving.
Continuous learning mindset in a rapidly evolving technology landscape.
Relevant networking or security certifications are desirable but not mandatory.
Past experience in Banking or the Finance vertical.
Experience or exposure to Security Service Edge / Zero Trust platforms such as Zscaler (ZIA, ZPA, ZDX, Zero Trust Branch) or similar.
Identity–aware networking and integration with NAC / identity platforms – Cisco ISE and Arista Agni.
Palo Alto Firewall Configuration and Troubleshooting.
Enterprise Network tooling – Splunk, Forward Networks and Service NOW.

Responsibilities

Design, build, and operate a modern global network based on Versa, Cisco and Arista technologies including SD-WAN, Network Segmentation, Wireless, Client and Vendor Connectivity and Cloud Computing.
Be responsible for third party connectivity for SD-WAN and IPSec access.
Work across campus, office, WAN, cloud, and third party access environments within large, globally distributed enterprise environments, integrating SD WAN, segmentation, and cloud delivered security controls to deliver resilient, scalable, and secure connectivity.
Play a key part in evolving the firm’s global network, security and segmentation posture.
Implement standards and architecture decisions across campus, branch, and cloud environments globally.

Benefits

Retirement savings plan (401K) with company match
Insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages
Paid-time off including vacation, sick leave, short term disability, and family care responsibilities
Access to our Employee Assistance Program
Incentive compensation including eligibility for annual performance-based awards
Eligibility for certain tax advantaged savings plans
Inclusive development opportunities
Flexible work-life support
Paid volunteer days
Vibrant employee networks