Cloud Identity Engineer

Job Description:

About us:

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.

One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We’re devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being.

Bank of America believes both in the importance of working together and offering flexibility to our employees. We use a multi-faceted approach for flexibility, depending on the various roles in our organization.

Working at Bank of America will give you a great career with opportunities to learn, grow and make an impact, along with the power to make a difference. Join us!

Job Description:

This job is responsible for tool and service designs within a technical domain that enable business strategies in accordance with architectural governance, standards and policies. Key responsibilities include creating infrastructure tools and their integration as a service, facilitating deployment of technical solutions by developing templates, playbooks and automation used during implementation. Job expectations include looking for opportunities to improve efficiency when implementing and maintaining tools/services and embracing a culture of innovation and continuous improvement.

Overview:

The Cloud Identity Engineering team is seeking an Engineer responsible for analysis, design, implementation coordination, and 4th level escalation support. The individual will work within the engineering organization, interacting with peer teams and partner groups, scaling and deploying improvements, and administering Cloud identity solutions including but not limited to authentication, governance, security, and business continuity. The candidate must be able to operate and function well in a multi-cultural, geographically dispersed virtual team environment. The ideal candidate will have a strong working experience in designing, implementing, and managing solutions in multi-cloud environments as well as a deep understanding of Active Directory.

Responsibilities:

• Provides subject matter expertise and consulting services on a range of technologies and assists Technical Analysts and Infrastructure Engineers to ensure that technology solutions comply with enterprise system design and engineering standards
• Assists with translating business requirements into technical definitions, reference models, blueprints, and playbooks for deployment in compliance with architecture standards and policies
• Assists in the evaluation of reference models, blueprints and playbooks to ensure they are fit for purpose
• Develops software solutions to address manual and repeatable work or inefficient processes
• Conducts on-site evaluations of third-party products being considered for firm adoption
• Promotes an inclusive and healthy working environment and helps to resolve organizational impediments/blockers
• Contributes to the creation/selection of functional and non-functional product evaluation requirements within and across domains
• Analysis, design, planning and 4th level support of cloud identity solutions
• Translate business needs into workable technology solutions that meet the requirements of internal customers and peer teams
• Responsible for applying standards, and contributing to roadmaps
• Independently manage and perform architecture/engineering role for enterprise scale identity efforts and initiatives
• Perform various functions and duties in support of audit and compliance deliverables including verification/remittance of evidence
• Develop detailed architecture, standards, design, and implementation documentation
• Analyze existing environments to identify both technical and operational challenges while making recommendations and developing solutions for improvement
• Participate in or lead complex or high severity troubleshooting and incident/problem resolutions with other infrastructure teams
• Review and manage application lifecycle deliverables to ensure compliance with application management policies

Required Qualifications:

• 3 years of identity engineering and architecture experience that includes designing, implementing, and maintaining complex enterprise level solutions and security models with Entra ID
• Working experience with Identity and Access solutions for Cloud Service offerings from Microsoft, Amazon, and Google
• Must have an expert level understanding of identity solutions including previous experience engineering and deploying such solutions
• Extensive experience and advanced knowledge deploying Windows security concepts, least-privilege, and Zero Trust design principles
• Deep understanding of federation technologies (WS-Fed, OAuth, SAML, etc.)
• Extensive knowledge of security best-practices, latest security threats and mitigation thereof
• Thorough understanding of encryption technologies (both encryption types and protocols/standards)
• Strong working knowledge of various server OS platforms, DNS, networks, DMZs, firewalls, network security zones and proxies
• Advanced scripting experience and capabilities (JSON, PowerShell, etc.)
• Working experience of ITIL framework and enterprise change management processes
• Experience and confidence to be the subject matter expert (SME) in order to coordinate technical efforts and resolve issues across multiple teams in a large-scale enterprise environment
• Excellent communication skills, including proven experience effectively communicating technical challenges and solutions to peers, customers, and senior management
• Strong risk management skills including confidence to vocalize concerns which may jeopardize the security or integrity of Cloud Services and identity stores

Desired Qualifications:

• Familiar with Agile methodologies
• Familiar with software development life cycle
• Red Team assessment, exposure, and interaction
• Other scripting and programming skills (C#, Python. JavaScript)
• MS SQL/DB knowledge
• Experience with RESTful APIs

Skills:

• Analytical Thinking
• Application Development
• Automation
• Production Support
• Risk Management
• Adaptability
• Business Acumen
• DevOps Practices
• Solution Delivery Process
• Solution Design
• Architecture
• Collaboration
• Innovative Thinking
• Stakeholder Management
• Technical Strategy Development

Shift:

Hours Per Week: