Managed File Transfer Engineer at Brown Brothers Harriman in Boston, MA

Job description

At BBH, Partnership is more than a form of ownership—it’s our approach to business and relationships. We know that supporting your professional and personal goals is the best way to help our clients and advance our business. We take that responsibility seriously. With a 200-year legacy and a shared passion for what’s next, this is the right place to build a fulfilling career. Position Summary We are seeking an experienced Managed File Transfer (MFT) Engineer to help engineer, secure, automate, and support the technology platforms that provide enterprise Managed File Transfer and Enterprise Fax services. Working closely with Data Movement Technology leadership and partner technology teams, this individual contributor will provide deep technical expertise across MFT platforms and their supporting infrastructure. The engineer will be responsible for platform architecture and engineering, reliability, security, automation, observability, lifecycle management, and Level 3 production support. A key focus of this position is continuous improvement. You will identify opportunities to improve resiliency, security, scalability, automation, monitoring, and operational supportability while modernizing legacy technologies and reducing manual processes and technical debt. The ideal candidate combines strong MFT and infrastructure engineering experience with hands-on automation, troubleshooting, and problem-solving skills and is comfortable supporting mission-critical services in a complex enterprise environment. Key Responsibilities MFT Platform Engineering & Architecture · Design, build, maintain, and enhance enterprise Managed File Transfer infrastructure and supporting technologies. · Engineer secure, scalable, highly available file-transfer solutions from source through destination. · Develop and maintain technical standards and engineering controls for MFT platforms and services. · Analyze application and infrastructure performance and implement improvements that increase stability, reliability, and availability. · Review new file-transfer requirements and ensure implementations accurately represent the intended source-to-target data flow. · Evaluate technical debt, unsupported components, architectural limitations, and modernization opportunities. Automation & Observability · Develop automation using PowerShell, Python, Shell, Ansible, Linux tooling , and other appropriate technologies. · Automate deployments, administration, validation, monitoring, and repetitive operational processes to reduce manual effort and operational risk. · Use Splunk and other observability technologies to develop effective platform monitoring, health checks, dashboards, alerts, and incident detection. · Improve centralized logging, event correlation, incident pattern recognition, and actionable alerting. · Ensure appropriate diagnostic and audit information is available for troubleshooting and incident investigation. Security Engineering · Define and implement secure MFT standards covering SFTP, HTTPS, AS2, encryption, authentication, SSL/TLS certificates, service accounts, privileged access, and least-privilege principles . · Support modernization and remediation of legacy file-transfer technologies, protocols, and configurations. · Manage and troubleshoot SSL/TLS certificates and related security dependencies. · Partner with Information Security, Networking, Infrastructure, and application teams to remediate vulnerabilities and strengthen platform controls. Platform Lifecycle & Production Engineering · Engineer and implement operating systems, middleware, database, application, and infrastructure upgrades required to maintain supported platforms. · Participate in platform upgrades, migrations, patching, and infrastructure changes from technical design through production implementation. · Develop repeatable deployment procedures, technical validation criteria, rollback procedures, and implementation documentation. · Support Business Continuity and Disaster