Senior Infrastructure Engineer - Cloud Security

Bank of America - Richmond, VA

Full-time - Senior

Richmond, VA

Credit Intermediation and Related Activities

About the position

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities, and shareholders every day. One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We're devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being. Bank of America believes both in the importance of working together and offering flexibility to our employees. We use a multi-faceted approach for flexibility, depending on the various roles in our organization. Working at Bank of America will give you a great career with opportunities to learn, grow and make an impact, along with the power to make a difference. Join us! The Enterprise Cloud Platforms team in the CTI organization offers Private and Public Cloud platforms for Bank of America's developers to drive faster time-to-market, innovation with private and public cloud capabilities, and reduce complexity with built-in integrations. We believe in a high-quality engineering culture to engineer our platforms with a customer and platform mindset, design for large enterprise scale and resilience, and accelerate market innovation into the technical platforms we deliver. As part of this team, you will have a large impact on the evolution of next-generation Cloud services for Bank of America and explore an extensive list of new technologies that will drive innovation across our company. This job is responsible for leading the most complex technical designs that enable business strategies in accordance with architectural governance, standards, and policies. Key responsibilities include facilitating deployment of the most complex technical solutions by developing templates, playbooks, and automation used during implementation. Job expectations include consistently looking for opportunities to improve the reliability and efficiency of implementing the services, and influencing a culture of innovation and continuous improvement.

Responsibilities

• Serves as a consultant on a broad range of technologies, platforms, and vendor offerings to drive targeted business outcomes
• Develops software solutions to address manual and repeatable work or inefficient processes and contributes to the technology strategy for end-to-end engineering solutions and provides feedback to the architecture teams
• Translates business requirements into technical definitions, reference models, blueprints, and playbooks for deployment in compliance with architecture standards and policies
• Participates in various steering committees for technical and infrastructure service domains
• Leads the evaluation of reference models, blueprints and playbooks to ensure they are fit for purpose
• Mentors and guides team members to ensure system design technology solutions comply with enterprise system design and engineering standards
• Creates an inclusive and healthy working environment and helps to resolve organizational impediments/blockers
• Confirms that application and business requirements have been translated into technical definitions, reference models, blueprints, and playbooks to guide development and integration of technology solutions
• Mentors Infrastructure resources on infrastructure service along with application integration validation methods and tools
• Assists in the performance of Security Design Reviews (SDR) for all cloud services in support of Global Information Security (GIS) requirements
• Works closely with engineering teams to influence and drive the adoption of both security and non-security related best practices and procedures as in-line controls
• Interfaces with partner teams both within and outside of Enterprise Cloud Platforms (ECP), including GIS, engineering, and architecture teams
• Reviews and may develop software solutions to address manual and repeatable work or inefficient processes
• Contributes to the creation/selection of functional and non-functional product evaluation requirements within and across domains
• Reviews and guides the execution of on-site evaluations of third-party products being considered for firm adoption
• Identifies gaps in control coverage, both in security and non-security related areas
• Promotes an inclusive and healthy working environment and helps to resolve organizational impediments/blockers

Requirements

• Minimum of a 4 year degree in computer science or equivalent experience
• 7+ years' experience in infrastructure
• Hands on experience designing and deploying infrastructure controls at scale in an enterprise environment
• Develop and implement approaches to security assessment of cloud provider services and offerings
• Drafts statements of residual risk taking into account the control environment that exists and mitigating factors
• Must be familiar with regulations and standards including, NIST, CSA, FFIEC, etc.
• Experience with relevant technical implementations of various controls and creating traceability from the definition of the control to the way that it was implemented in e.g., Azure Policy, AWS SCP, Hashicorp Sentinel, and other implementation tools
• Excellent oral and written communication skills with the ability to adjust to technical and non-technical audiences at various levels across the organization, from executives to engineers

Nice-to-haves

• Good understanding and work experience in an Enterprise Environment
• Ability to work autonomously with minimal supervision and collaborate effectively with local and remote co-workers
• Good communication skills, self-motivated, positive attitude and ability to work in a global team environment
• Proven timely delivery of key infrastructure and products
• Ability to handle highly volatile support with platform and clients spanning multiple time zones
• Resolve and influence the positive outcome of conflicting objectives and priorities
• Experience creating technical documentation and training materials

Benefits

• Competitive benefits to support physical, emotional, and financial well-being