Senior Infrastructure Services Engineer (Vaulting Service / API exp. required)

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.

Being a Great Place to Work and providing a culture of caring is core to how we drive Responsible Growth. We are intentional about fostering an inclusive workplace where every teammate has the opportunity to succeed, build a career and contribute to our shared success. This includes attracting and developing exceptional talent, recognizing and rewarding performance, and supporting our teammates’ physical, emotional, and financial wellness through affordable, competitive and flexible benefits.

We value the unique perspectives individuals bring from all backgrounds and career paths - whether shaped by military service, community college education, or a wide range of work and life experiences. These journeys foster resilience, leadership and innovation, strengthening our workforce and positively impact the communities we serve.

Bank of America is committed to an in-office culture that supports collaboration, engagement, and career development. Our approach includes clear in-office expectations, while providing an appropriate level of flexibility based on role-specific responsibilities and business needs.

At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!

Overview:

The Vaulting Senior Infrastructure Services Engineer manages a product-centric architecture and engineering team responsible for evaluating and designing Vaulting Infrastructure solutions that integrate with the Bank’s overall IAM ecosystem of tools and processes. The team also supports technology and operations teams for implementing, maintaining and constantly improving these solutions for the Core Technology Infrastructure organization. 

The candidate is accountable for:    

• Collaborating with Product Managers / Owners to derive standards-compliant, enterprise-grade, Tier 0 Identity Management Infrastructure Services supporting both on-prem and approved hybrid-cloud and eventually multi-cloud environments.

• Developing and implementing vaulting infrastructure services that assess, prioritize and mitigate information security and technology risk.

• Building and managing a team comprised of subject matter experts who define, develop and implement Vaulting Services

• Participating at the executive level in architecture review boards, internal and external-facing audit, compliance, and regulatory functions representing all aspects of Identity Management Infrastructure Services.

• Actively incorporating and driving solutions that are compliant with Vaulting standards and policies and drive new baselines as these standards and policies evolve.

• Designing network security perimeter architectures and relevant security controls for vaulting infrastructure in the hybrid cloud (and eventually multi-cloud) environment.

• Reviewing internal and external IT projects and applications for risk and adherence to security policies and industry best practices.

• Actively participating on internal security project teams to deploy security technologies and to make recommendations for hardware/software products for future release.

• Liaising with vendors for various security  infrastructure-related products and services.

• Providing direction and acts as an escalation point on projects and issues to other team members.

• Being point of contact across CTI, GIS and all business units as needed for Vaulting Services work products, security techniques, methodologies and results to ensure appropriate business value.

Required Qualifications:

• 10+ year's experience in IT in large environments, especially financial firm; 3+ years in Vaulting Services capacity

• Industry expertise of Vaulting Services and prevailing Vaulting standards including, but not limited to: 

• Federated Identity in Hybrid Cloud Environment

• API gateways and enterprise databases

• Role-based access control

• Security Assertion Markup Language (SAML)

• Privileged Access Management

• Vaulting Solutions

• Linux/Unix

• MS Active Directory / Azure AD

• Managed Identities

• Human and Non-Human Accounts 

• Proven ability to understand and analyze complex issues, then apply experience and judgment to develop sound recommendations especially as related to malware, eDiscovery, current threats/attacks and/or vulnerability management

• Knowledge of risk assessment tools, technologies, and methods

• Exceptional organizational skills and attention to detail.

• Ability to communicate concisely, effectively and directly to executive management, internal and external/regulatory committees

Technologies:

• SME in Hashi Vaulting

• SME in CyberArk

• GitHub

• Cloud environments (AWS, Azure & GCP)

• Leverage JIRA

• Various development platforms (such as: Ansible, Python)

Shift:

1st shift (United States of America)

Hours Per Week: 

40