Sr. Linux Identity Engineer

Job Description:

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection.  Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.

One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We’re devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being.

Bank of America believes both in the importance of working together and offering flexibility to our employees. We use a multi-faceted approach for flexibility, depending on the various roles in our organization.

Working at Bank of America will give you a great career with opportunities to learn, grow and make an impact, along with the power to make a difference. Join us!

Overview:

Bank of America's Core Technology Infrastructure organization has a need for a Senior Linux Secrets Vault Engineer. This position is responsible for the architecture, engineering and automated deployment of a vaulting service focused on machine and application account secrets.

Position Summary

Responsible for defining and delivering credential vaulting solutions which align with enterprise strategy. Ensures the solution is fit for purpose by working with internal stakeholders as well as external subject matter experts in order to meet the enterprise needs for Identity and Secret management. Works across business and technology teams to create the solution service architecture. Leads the evolution of the deployed security solution to meet emerging critical infrastructure requirements. Consults with business stakeholders to clearly understand the business requirements. Finds creative solutions through practical experiments and POCs. Ensures architecture is flexible, modular, and designed to adapt easily as business requirements change. Utilizes industry best practices coupled with your extensive enterprise solution deployment experience to create and sustain best of class secret management services. Performs design and code reviews to ensure all functional requirements for a solution are sufficiently met (e.g. security, performance, maintainability, scalability, usability, and reliability). Educates team members on the technology practices, standardization strategies and best practices to create innovative solutions. Individual contributor.

Responsibilities:

• Design the next generation secret vaulting solution with a focus on high-availability and resiliency
• Conduct POCs to test designs
• Deliver low/no touch automation solutions to build/upgrade the vault environment to the next generation specs
• Develop automation and tooling for on-going maintenance of the platform
• Monitoring performance trends for capacity planning purposes
• Help troubleshoot issues with the vault environment

Required Skills:

• 10+ years of Information Technology experience
• Demonstrable experience deploying secret management solutions at enterprise scale
• Demonstrated expert level of Linux administration, cluster architecture, and configuration management
• Thorough understanding of REST API and json
• Strong understanding and experience deploying solutions via agile methodology and associated toolset (Jira, Bitbucket, Jenkins, etc.)
• Ability to write and maintain Ansible playbooks
• Solid understanding of infrastructure (hardware, network, storage) at an enterprise scale
• Proficiency in a programming or scripting language including Python and powershell
• Bachelor's degree in Computer Science or related field

Preferred Qualifications:

• Previous experience with vaulting products like: CyberArk, Centrify, Thycotic, HashiCorp Vault, Okta, Ping.
• Current alignment to the Core Technology Infrastructure organization is preferred
• Current alignment to the Global Technology line of business is preferred

Shift:

Hours Per Week: