Authentication and Authorization Services Architect

Job Description:

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.

Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being a diverse and inclusive workplace, attracting and developing exceptional talent, supporting our teammates’ physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve.

At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!

Description:

This role is responsible for defining an architectural vision and architecture for large, complex solutions, which align with the enterprise architecture strategy, technology and platform choices for the defined domain (Business, Application, Data and Technology). Key responsibilities include describing the solution intent/associated operating environment, evaluating system impacts and determining the primary systems/subsystems and their interfaces, assisting with end-to-end solution design where needed, defining non-functional requirements/architectural runway to support new epics/features and expand into new opportunities. This role ensures the solution is fit for purpose and use by working with stakeholders, vendors/service providers, and evaluating the impact of strategic design decisions. They also contribute to best practices, standard templates, and the architecture roadmap for defined domains.

• Works across the business, operations and technology to create the solution intent and architectural vision for complex solutions and prioritize functional and non-functional requirements into a technology backlog to enable the technology roadmap and functionality to support evolving capabilities and services
• Contributes to the creation of the architecture roadmap of defined domains (Business, Application, Data, and Technology) in support of the product roadmap and the development of best practices including standardized templates
• Clarifies the architecture, assists with system design to support implementation, and provides solution options to resolve any architectural impediments
• Facilitates solution driven discussions, leads the design of complex architectures, and finds creative solutions through knowledge of domain, practical experiments, and proof of concepts while ensuring architecture is flexible, modular, and adaptable
• Educates team members on the technology practices, standardization strategies, and best practices to create innovative solutions
• Supports the team as needed to select the technology stack required for solutions and helps select preferred technology products
• Performs design and code reviews to ensure all non-functional requirements are sufficiently met (for example, security, performance, maintainability, scalability, usability, and reliability)

Responsibilities:

• Contribute in the creation of the architecture roadmap of defined domains (Business, Application, Data and Technology) in support of the product roadmap.
• Contribute to the development of best practices including standardized templates.
• Work across business and technology to create the solution intent and architectural vision for large complex solutions and evolve it based on an emerging backlog.
• Lead rapid-shaping of a high-level architecture with details filled in with emerging business requirements; ensure architecture is flexible, modular and designed to adapt easily.
• Facilitate solution-driven discussions, lead the design of complex architectures, and
• Work with Product Manager/Owner to plan and prioritize technology-focused backlog items for the architecture runway to enable business epics/features and expand into new opportunities.
• Clarify the architecture and assist with system design (where needed) for the development teams to support implementation, and provide solution options to resolve any architectural impediments.
• Perform design and code reviews to ensure all non-functional requirements for a solution are sufficiently met (for example, security, performance, maintainability, scalability, usability, and reliability).
• Support the Principal Engineer as needed to select the technology stack required for solutions, and help select preferred technology products.
• Educate team members on the technology practices, standardization strategies and best practices to create innovative solutions.

Required Qualifications:

• Strong subject matter expertise across various enterprise identity authentication technologies ranging from AAA (RADIUS/TACACS), 802.1X technologies (Wired/Wireless), RSA and token-based systems.
• 6+ years with Cisco Identity Services Engine (ISE) is required.
• 6+ years Network Access Control (NAC) 802.1X for Wired and Wireless networks is required.
• 3+ years with Remote Access (VPN posture) is preferred.
• Experience working with SSL Certificate Authorities, and certificate management.
• Strong experience and detailed technical knowledge in security engineering, system and network security, authentication and authorization protocols, cryptography, and application security.
• Expert understanding of network protocols TCP/IP, HTTP, HTTPS, SSL, TLS, 802.1.X, etc.
• Strong hands-on security troubleshooting, network-based forensics, and proficient with packet analysis tools like Wireshark, etc.
• Experience with root cause analysis, risk mitigation, security assessments, analysis of security threats, trends and architectural preferred.

Desired Qualifications:

• Confirms that application and business requirements have been translated into technical definitions, reference models, blueprints, and playbooks to guide development and integration of technology solutions.
• Contributes to the creation/selection of functional and non-functional product evaluation requirements within and across domains.
• Reviews and may develop software solutions to address manual and repeatable work or inefficient processes.
• Reviews and guides the evaluation of reference models, blueprints, playbooks, and the execution of on-site evaluations of third-party products being considered for firm adoption.
• Mentors and assists Infrastructure resources on infrastructure service along with application integration validation methods and tools to ensure that technology solutions comply with enterprise system design and engineering standards.
• Promotes an inclusive and healthy working environment and help to resolve organizational impediments/blockers.
• Works with Bank teams and customers to ensure solutions are aligned with support requirements and that the transition and delivery of new systems or upgrades are seamlessly transitioned to production support teams.
• Collaborates with other internal/external teams such as Operations, Change Implementation team, Engineering, and requestors on core design requirements/standards and impact assessment.
• Responsible for documentation, monitoring, troubleshooting, and evaluation of network and infrastructure systems, working towards solving and resolving network issues when necessary

Skills:

• Analytical Thinking
• Architecture
• Result Orientation
• Solution Design
• Technical Strategy Development
• Application Development
• Collaboration
• Data Management
• DevOps Practices
• Risk Management
• Agile Practices
• Automation
• Influence
• Solution Delivery Process
• Test Engineering

Shift:

Hours Per Week: