Vaulting Service Senior Infrastructure Services Engineer

About the role

The Vaulting Senior Infrastructure Services Engineer manages a product-centric architecture and engineering team responsible for evaluating and designing Vaulting Infrastructure solutions that integrate with the Bank’s overall IAM ecosystem of tools and processes. The team also supports technology and operations teams for implementing, maintaining and constantly improving these solutions for the Core Technology Infrastructure organization.

Responsibilities

• Collaborating with Product Managers / Owners to derive standards-compliant, enterprise-grade, Tier 0 Identity Management Infrastructure Services supporting both on-prem and approved hybrid-cloud and eventually multi-cloud environments.
• Developing and implementing vaulting infrastructure services that assess, prioritize and mitigate information security and technology risk.
• Building and managing a team comprised of subject matter experts who define, develop and implement Vaulting Services.
• Participating at the executive level in architecture review boards, internal and external-facing audit, compliance, and regulatory functions representing all aspects of Identity Management Infrastructure Services.
• Actively incorporating and driving solutions that are compliant with Vaulting standards and policies and drive new baselines as these standards and policies evolve.
• Designing network security perimeter architectures and relevant security controls for vaulting infrastructure in the hybrid cloud (and eventually multi-cloud) environment.
• Reviewing internal and external IT projects and applications for risk and adherence to security policies and industry best practices.
• Actively participating on internal security project teams to deploy security technologies and to make recommendations for hardware/software products for future release.
• Liaising with vendors for various security infrastructure-related products and services.
• Providing direction and acts as an escalation point on projects and issues to other team members.
• Being point of contact across CTI, GIS and all business units as needed for Vaulting Services work products, security techniques, methodologies and results to ensure appropriate business value.

Requirements

• 10+ years' experience in IT in large environments, especially financial firms; 3+ years in Vaulting Services capacity.
• Industry expertise of Vaulting Services and prevailing Vaulting standards including, but not limited to: Federated Identity in Hybrid Cloud Environment, API gateways and enterprise databases, Role-based access control, Security Assertion Markup Language (SAML), Privileged Access Management, Vaulting Solutions, Linux/Unix, MS Active Directory / Azure AD, Managed Identities, Human and Non-Human Accounts.
• Proven ability to understand and analyze complex issues, then apply experience and judgment to develop sound recommendations especially as related to malware, eDiscovery, current threats/attacks and/or vulnerability management.
• Knowledge of risk assessment tools, technologies, and methods.
• Exceptional organizational skills and attention to detail.
• Ability to communicate concisely, effectively and directly to executive management, internal and external/regulatory committees.

Skills

• SME in Hashi Vaulting
• SME in CyberArk
• GitHub
• Cloud environments (AWS, Azure & GCP)
• Leverage JIRA
• Variety of development platforms (such as: Ansible, Python)

Benefits

Bank of America is committed to an in-office culture that supports collaboration, engagement, and career development. Our approach includes clear in-office expectations, while providing an appropriate level of flexibility based on role-specific responsibilities and business needs.

Pay

N/A

Schedule

1st shift (United States of America)

Hrs Per Week: 40