Senior Infrastructure Services Engineer (Vaulting Service / API / Some leadership exp. required)
At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We drive Responsible Growth and deliver for our clients, teammates, communities and shareholders every day. We foster an inclusive workplace where every teammate has the opportunity to succeed, build a career, and contribute to our shared success. We value unique perspectives from all backgrounds and career paths, which strengthen our workforce and positively impact the communities we serve.
About the role
The Vaulting Senior Infrastructure Services Engineer manages a product-centric architecture and engineering team responsible for evaluating and designing Vaulting Infrastructure solutions that integrate with the Bank’s overall IAM ecosystem of tools and processes. The team supports technology and operations teams for implementing, maintaining, and constantly improving these solutions for the Core Technology Infrastructure organization.
Responsibilities
- Collaborate with Product Managers/Owners to derive standards-compliant, enterprise-grade, Tier 0 Identity Management Infrastructure Services supporting both on-prem and approved hybrid-cloud and eventually multi-cloud environments.
- Develop and implement vaulting infrastructure services that assess, prioritize, and mitigate information security and technology risk.
- Build and manage a team of subject matter experts who define, develop, and implement Vaulting Services.
- Participate at the executive level in architecture review boards, internal and external-facing audit, compliance, and regulatory functions representing all aspects of Identity Management Infrastructure Services.
- Actively incorporate and drive solutions compliant with Vaulting standards and policies, and establish new baselines as these standards evolve.
- Design network security perimeter architectures and relevant security controls for vaulting infrastructure in hybrid cloud (and eventually multi-cloud) environments.
- Review internal and external IT projects and applications for risk and adherence to security policies and industry best practices.
- Actively participate on internal security project teams to deploy security technologies and recommend hardware/software products for future release.
- Liaise with vendors for various security infrastructure-related products and services.
- Provide direction and act as an escalation point on projects and issues to other team members.
- Serve as the point of contact across CTI, GIS, and all business units for Vaulting Services work products, security techniques, methodologies, and results to ensure appropriate business value.
Requirements
- 10+ years of experience in IT in large environments, especially in financial firms; 3+ years in a Vaulting Services capacity.
- Some type of team lead or leadership experience.
- Industry expertise in Vaulting Services and prevailing Vaulting standards, including but not limited to:
- Federated Identity in Hybrid Cloud Environment
- API gateways and enterprise databases
- Role-based access control
- Security Assertion Markup Language (SAML)
- Privileged Access Management
- Vaulting Solutions
- Linux/Unix
- MS Active Directory / Azure AD
- Managed Identities
- Human and Non-Human Accounts
- Proven ability to understand and analyze complex issues, then apply experience and judgment to develop sound recommendations, especially as related to malware, eDiscovery, current threats/attacks, and/or vulnerability management.
- Knowledge of risk assessment tools, technologies, and methods.
- Exceptional organizational skills and attention to detail.
- Ability to communicate concisely, effectively, and directly to executive management, internal and external/regulatory committees.
Skills
- Subject matter expert in HashiCorp Vault
- Subject matter expert in CyberArk
- GitHub
- Cloud environments (AWS, Azure & GCP)
- JIRA
- Development platforms (e.g., Ansible, Python)
Schedule
- 1st shift (United States of America)
- 40 hours per week