Senior Infrastructure Services Engineer (Vaulting Service / API / Some leadership exp. required)

Bank of America is committed to an in-office culture that supports collaboration, engagement, and career development. Our approach includes clear in-office expectations, while providing an appropriate level of flexibility based on role-specific responsibilities and business needs.

At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!

** PLEASE NOTE, THIS IS AN INDIVIDUAL PERFORMER ROLE, HOWEVER WE REQUIRE SOME TYPE OF TEAM LEAD OR LEADERSHIP EXPERIENCE TO BE CONSIDERED FOR THIS ROLE.

Overview:

The Vaulting Senior Infrastructure Services Engineer manages a product-centric architecture and engineering team responsible for evaluating and designing Vaulting Infrastructure solutions that integrate with the Bank’s overall IAM ecosystem of tools and processes. The team also supports technology and operations teams for implementing, maintaining and constantly improving these solutions for the Core Technology Infrastructure organization.

The candidate is accountable for:

Collaborating with Product Managers / Owners to derive standards-compliant, enterprise-grade, Tier 0 Identity Management Infrastructure Services supporting both on-prem and approved hybrid-cloud and eventually multi-cloud environments.

Developing and implementing vaulting infrastructure services that assess, prioritize and mitigate information security and technology risk.

Building and managing a team comprised of subject matter experts who define, develop and implement Vaulting Services

Participating at the executive level in architecture review boards, internal and external-facing audit, compliance, and regulatory functions representing all aspects of Identity Management Infrastructure Services.

Actively incorporating and driving solutions that are compliant with Vaulting standards and policies and drive new baselines as these standards and policies evolve.

Designing network security perimeter architectures and relevant security controls for vaulting infrastructure in the hybrid cloud (and eventually multi-cloud) environment.

Reviewing internal and external IT projects and applications for risk and adherence to security policies and industry best practices.

Actively participating on internal security project teams to deploy security technologies and to make recommendations for hardware/software products for future release.

Liaising with vendors for various security infrastructure-related products and services.

Providing direction and acts as an escalation point on projects and issues to other team members.

Being point of contact across CTI, GIS and all business units as needed for Vaulting Services work products, security techniques, methodologies and results to ensure appropriate business value.

Required Qualifications:

10+ year's experience in IT in large environments, especially financial firm; 3+ years in Vaulting Services capacity

Some type of Team Lead or leadership experience

Industry expertise of Vaulting Services and prevailing Vaulting standards including, but not limited to:

Federated Identity in Hybrid Cloud Environment

API gateways and enterprise databases

Role-based access control

Security Assertion Markup Language (SAML)

Privileged Access Management

Vaulting Solutions

Linux/Unix

MS Active Directory / Azure AD

Managed Identities

Human and Non-Human Accounts

Proven ability to understand and analyze complex issues, then apply experience and judgment to develop sound recommendations especially as related to malware, eDiscovery, current threats/attacks and/or vulnerability management

Knowledge of risk assessment tools, technologies, and methods

Exceptional organizational skills and attention to detail.

Ability to communicate concisely, effectively and directly to executive management, internal and external/regulatory committees

Technologies:

SME in Hashi Vaulting

SME in CyberArk

GitHub

Cloud environments (AWS, Azure & GCP)

Leverage JIRA

Various development platforms (such as: Ansible, Python)

Shift:

1st shift (United States of America)

Hours Per Week:

40

Pay Transparency details

US - NJ - Jersey City - 101 Hudson St - 101 Hudson (NJ2101)

Pay and benefits information

Pay range

$151,500.00 - $185,000.00 annualized salary, offers to be determined based on experience, education and skill set.

Discretionary incentive eligible

This role is eligible to participate in the annual discretionary plan. Employees are eligible for an annual discretionary award based on their overall individual performance results and behaviors, the performance and contributions of their line of business and/or group; and the overall success of the Company.

Benefits

This role is currently benefits eligible. We provide industry-leading benefits, access to paid time off, resources and support to our employees so they can make a genuine impact and contribute to the sustainable growth of our business and the communities we serve.