Senior Network Engineer

Morgan Stanley • New York, NY

6d

About The Position

In the Technology division, we leverage innovation to build the connections and capabilities that power our Firm, enabling our clients and colleagues to redefine markets and shape the future of our communities. This is a Senior Cloud & Infrastructure Engineering position at the Vice President level, which is part of the job family responsible for managing and optimizing technical infrastructure and ensuring the seamless operation of IT systems to support business needs effectively. Morgan Stanley is an industry leader in financial services, known for mobilizing capital to help governments, corporations, institutions, and individuals around the world achieve their financial goals. Interested in joining a team that’s eager to create, innovate and make an impact on the world? Read on. The engineer will be responsible for evaluating, engineering, designing, and troubleshooting enterprise scale Data Centre networks. As part of the Network Engineering team the engineer is required to collaborate with the Enterprise Computing team, Security team and End-User technologies to understand the applications and provide end-to-end network solutions as per the firm’s network standards. This includes selecting the right platforms, developing Bill of Material (BoM), designing new network topologies, creating and maintaining visio diagrams, configuration templates, assigning and maintaining IP address, developing migration plans and providing weekend escalation support for involved projects. What you’ll do in the role: Collaborate with cross‑functional stakeholders (EC, WTS, Security, Operations, and EDC) to define technical requirements, responsibilities, and system integration points. Develop and maintain High‑Level Designs (HLDs) and Low‑Level Designs (LLDs) for DMZ architectures, covering network topology, security zones, and integration dependencies. Prepare, review, and validate the Bill of Materials (BOM), ensuring alignment with standard. Present and defend proposed designs in formal governance and review forums, including GTEC, Operations, and Engineering review meetings, incorporating feedback and driving approvals. Work closely with platform engineering to create design related templates Lead Security Design Reviews (SecDesign) in close collaboration with CDRR counterparts, addressing threat models, control gaps, and risk remediation plans. Perform power, space, and environmental assessments to confirm data center readiness and compatibility with DMZ infrastructure requirements. Provide rack elevation designs and validation support to EDC, to ensure accurate physical deployment and cabling alignment. Work closely with Operations to come out with the configurations and assist in trouble shooting for any services dmz issues Participate in post‑deployment reviews, capture lessons learned and drive continuous improvement initiatives to enhance the resiliency and security of the DMZ environment. Ability to work both independently and as a team member is essential. Strong presentation skills are imperative to be able to explain network design, articulate risk, and facilitate decision making. Strong security focus and experience with Network Security Concepts and Multi-tier Security architectures.

Requirements

• The ideal candidate will have 7+ years of experience with a Financial Services Firm, Technology vendor or systems integrator designing, and implementing large scale networks.
• Ethernet technologies: SPT, 802.1Q, VPC, Multilayer Switching; Leaf-Spine IP Fabric
• IP Routing: RIP, OSPF, BGP, MPBGP, TCP/IP
• Multicast routing: PIM, IGMP, MSDP
• VxLAN
• Platform knowledge on Cisco Switching & Routing Platforms
• Nexus 9000 Series Data Centre Switching Platform
• ASR 1000x Series Routers
• ASR 9000 Series Routers
• Platform Knowledge on Arista Switching platforms
• Working knowledge on various Network OS
• Cisco IOS, IOS-XE, NXOS, IOS-XR
• Arista EOS
• Ability to use Microsoft applications such as Visio, Word, Excel and Outlook
• Proficient in UNIX or Linux
• Strong sense of security concepts include defense in depth, zero trust networking, least privilege principle, risks and controls.
• Flexible and adaptable to meet the team’s targets
• Honest, hardworking, and reliable
• Possess a strong sense of ownership/accountability

Nice To Haves

• CCIE or equivalent
• Experience with scripting / automation using Python / Ansible is a strong plus.
• Tools: DNA Center, Wireshark, Infoblox, HPNA, Splunk, Sevone, Ansible, Netconf is a plus
• WAN technologies: SONET/SDH, MPLS, Classic TDM
• Working knowledge on SDN, SDWAN, DMVPN
• Sound knowledge in public cloud, Kubernetes, storage over IP and VMWare

Responsibilities

• Collaborate with cross‑functional stakeholders (EC, WTS, Security, Operations, and EDC) to define technical requirements, responsibilities, and system integration points.
• Develop and maintain High‑Level Designs (HLDs) and Low‑Level Designs (LLDs) for DMZ architectures, covering network topology, security zones, and integration dependencies.
• Prepare, review, and validate the Bill of Materials (BOM), ensuring alignment with standard.
• Present and defend proposed designs in formal governance and review forums, including GTEC, Operations, and Engineering review meetings, incorporating feedback and driving approvals.
• Work closely with platform engineering to create design related templates
• Lead Security Design Reviews (SecDesign) in close collaboration with CDRR counterparts, addressing threat models, control gaps, and risk remediation plans.
• Perform power, space, and environmental assessments to confirm data center readiness and compatibility with DMZ infrastructure requirements.
• Provide rack elevation designs and validation support to EDC, to ensure accurate physical deployment and cabling alignment.
• Work closely with Operations to come out with the configurations and assist in trouble shooting for any services dmz issues
• Participate in post‑deployment reviews, capture lessons learned and drive continuous improvement initiatives to enhance the resiliency and security of the DMZ environment.

Benefits

• At Morgan Stanley, you’ll find an opportunity to work alongside the best and the brightest, in an environment where you are supported and empowered.
• Our teams are relentless collaborators and creative thinkers, fueled by their diverse backgrounds and experiences.
• We are proud to support our employees and their families at every point along their work-life journey, offering some of the most attractive and comprehensive employee benefits and perks in the industry.
• There’s also ample opportunity to move about the business for those who show passion and grit in their work.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed