Senior Infrastructure Services Engineer (Vaulting Service / API / Some leadership exp. required)

The Vaulting Senior Infrastructure Services Engineer manages a product-centric architecture and engineering team responsible for evaluating and designing Vaulting Infrastructure solutions that integrate with the Bank’s overall IAM ecosystem of tools and processes. The team also supports technology and operations teams for implementing, maintaining and constantly improving these solutions for the Core Technology Infrastructure organization.

The candidate is accountable for:

Collaborating with Product Managers / Owners to derive standards-compliant, enterprise-grade, Tier 0 Identity Management Infrastructure Services supporting both on-prem and approved hybrid-cloud and eventually multi-cloud environments.

Developing and implementing vaulting infrastructure services that assess, prioritize and mitigate information security and technology risk.

Building and managing a team comprised of subject matter experts who define, develop and implement Vaulting Services

Participating at the executive level in architecture review boards, internal and external-facing audit, compliance, and regulatory functions representing all aspects of Identity Management Infrastructure Services.

Actively incorporating and driving solutions that are compliant with Vaulting standards and policies and drive new baselines as these standards and policies evolve.

Designing network security perimeter architectures and relevant security controls for vaulting infrastructure in the hybrid cloud (and eventually multi-cloud) environment.

Reviewing internal and external IT projects and applications for risk and adherence to security policies and industry best practices.

Actively participating on internal security project teams to deploy security technologies and to make recommendations for hardware/software products for future release.

Liaising with vendors for various security infrastructure-related products and services.

Providing direction and acts as an escalation point on projects and issues to other team members.

Being point of contact across CTI, GIS and all business units as needed for Vaulting Services work products, security techniques, methodologies and results to ensure appropriate business value.

Required Qualifications:

10+ year's experience in IT in large environments, especially financial firm; 3+ years in Vaulting Services capacity

Some type of Team Lead or leadership experience

Industry expertise of Vaulting Services and prevailing Vaulting standards including, but not limited to:

Federated Identity in Hybrid Cloud Environment

API gateways and enterprise databases

Role-based access control

Security Assertion Markup Language (SAML)

Privileged Access Management

Vaulting Solutions

Linux/Unix

MS Active Directory / Azure AD

Managed Identities

Human and Non-Human Accounts

Proven ability to understand and analyze complex issues, then apply experience and judgment to develop sound recommendations especially as related to malware, eDiscovery, current threats/attacks and/or vulnerability management

Knowledge of risk assessment tools, technologies, and methods

Exceptional organizational skills and attention to detail.

Ability to communicate concisely, effectively and directly to executive management, internal and external/regulatory committees

Technologies:

SME in Hashi Vaulting

SME in CyberArk

GitHub

Cloud environments (AWS, Azure & GCP)

Leverage JIRA

Various development platforms (such as: Ansible, Python)

Shift:

Hours Per Week:

Pay Transparency details