Lead Analyst

Global Business Services

Global Business Services delivers Technology and Operations capabilities to Lines of Business and Staff Support Functions of Bank of America through a centrally managed, globally integrated delivery model and globally resilient operations. Global Business Services is recognized for flawless execution, sound risk management, operational resiliency, operational excellence and innovation. In India, we are present in five locations and operate as BA Continuum India Private Limited (BACI), a non-banking subsidiary of Bank of America Corporation and the operating company for India operations of Global Business Services.

Process Overview

Global Information Security (GIS) is responsible for protecting bank information systems, confidential and proprietary data, and customer information. GIS develops the bank’s Information Security strategy and policy, manages the Information Security program, identifies and addresses vulnerabilities and operates a global security operations center that monitors, detects and responds to cybersecurity incidents. Within GIS, the Cloud Security organization is responsible for leading a team of deeply technical cyber security engineers and architects to design and implement best in class cyber security capabilities for internal and external cloud instances in partnership with infrastructure and application technology teams. In addition, lead efforts across other Global Information Security functions to enable cyber security technology and operations in cloud environments.

Job Description

This role involves specialization in Cloud Identity and Access Management (IAM) technologies with strong understanding of cloud security architecture, IAM protocols, authentication mechanisms, and role-based access control. Responsible for components of complex engineering and/or analytical tasks and activities. Assists in establishment of input/output processes and working parameters for hardware compatibility and coordination of subsystems design and integration of total system. Serves as a fully seasoned/proficient technical resource; provides tech knowledge and capabilities as team member and individual contributor. Will not have direct reports but will influence and direct activities of a team related to special initiatives or operations. Provides input on staffing, budget, and personnel.

Responsibilities

Cloud IAM Strategy: Develop and implement a comprehensive IAM strategy for cloud environment, aligning it with the organization’s business objectives and compliance requirements.

IAM Integration: Collaborate with CSPs and internal teams to integrate IAM solutions seamlessly into cloud environments

Operational management of Cloud IAM, management of related external tools, technical and process documentation, monitoring and metrics

Identify opportunities for process optimization, automation, and innovation within the IAM framework to enhance security, user experience, and operational efficiency.

Designing, implementing, and managing IAM solutions in cloud environments

Strong understanding of cloud security architecture, IAM protocols, authentication mechanisms, and role-based access control

Problem-solving skills and the ability to analyze complex technical issues and provide effective solutions

Collaborate across departments and present complex security concepts to non-technical stakeholders

Requirements

Education : B.E. / B. Tech/M.E. /M. Tech

Certifications If Any : CCSP Certification, Cloud Security Certifications from AWS

Experience Range : 8 - 10 years

Foundational skills

Experience in writing Terraform configurations and modules

Hands-on experiences in coding

Experience in Cloud IAM, network and Security design

Advance knowledge of Single-Sign On (SSO), Federated Identities, AWS Identity Center and AWS IAM

Hands-on experience with design and implement cloud security architecture

Implement strong Identity Management and Access control policies for cloud access

Private Cloud and Public cloud platforms such as Azure and AWS Cloud

Monitor cloud environment for security threats and integrate with incident response

Experience in CI/ CD for cloud via pipelines

Good knowledge of AWS bedrock and AWS STS services

Experience in Dev SecOps model with infra-as-code, config-as-code, policy-as-code etc

Knowledge of current and upcoming cloud security/network technologies (e.g IPS, DDoS, SIEM, WAF etc) and understanding of compliance and regulatory standards

Understanding of landing zones, cloud native security, monitoring and logging tools like Splunk, Cloud Trail, Cloud Watch etc.

Knowledge of common Information Security frameworks, relevant legal & regulatory requirements like NIST Cybersecurity, CIS controls, SOX and Data Security standard

Knowledge of cloud network design and deployment architecture

Strong interpersonal skills, ability to make effective presentations and communicate technical concepts to non-technical parties

Excellent communication, influencing and facilitation skills with deep intellectual curiosity and innovative thinker

Demonstrate neutral objectivity and seek the best outcome for the business. Enterprise mindset; considers E2E process impact when evaluating opportunities/challenges

Maximizes organizational capability with a demonstrated commitment to valuing diversity

Desired skills

•Experience in Web-Development technologies: HTML, XML, XSL/XSLT, XPATH and Java script

• Understanding of API design concepts, RESTful Services and modern application interaction patterns

• Familiarity with IT security and risk management practices

Work Timings : 1:30pm to 10:30 pm

Job Location : Hyderabad, Chennai, Mumbai, Gurugram