Sr. Linux Identity Engineer

　　Jacksonville, Florida;Charlotte, North Carolina; Richmond, Virginia; Plano, Texas; Jersey City, New Jersey

　　Job Description:

　　At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.

　　One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We’re devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being.

　　Bank of America believes both in the importance of working together and offering flexibility to our employees. We use a multi-faceted approach for flexibility, depending on the various roles in our organization.

　　Working at Bank of America will give you a great career with opportunities to learn, grow and make an impact, along with the power to make a difference. Join us!

　　Overview:

　　Bank of America's Core Technology Infrastructure organization has a need for a Senior Linux Secrets Vault Engineer. This position is responsible for the architecture, engineering and automated deployment of a vaulting service focused on machine and application account secrets.

　　Position Summary

　　Responsible for defining and delivering credential vaulting solutions which align with enterprise strategy. Ensures the solution is fit for purpose by working with internal stakeholders as well as external subject matter experts in order to meet the enterprise needs for Identity and Secret management. Works across business and technology teams to create the solution service architecture. Leads the evolution of the deployed security solution to meet emerging critical infrastructure requirements. Consults with business stakeholders to clearly understand the business requirements. Finds creative solutions through practical experiments and POCs. Ensures architecture is flexible, modular, and designed to adapt easily as business requirements change. Utilizes industry best practices coupled with your extensive enterprise solution deployment experience to create and sustain best of class secret management services. Performs design and code reviews to ensure all functional requirements for a solution are sufficiently met (e.g. security, performance, maintainability, scalability, usability, and reliability). Educates team members on the technology practices, standardization strategies and best practices to create innovative solutions. Individual contributor.

　　Responsibilities:

　　Design the next generation secret vaulting solution with a focus on high-availability and resiliency

　　Conduct POCs to test designs

　　Deliver low/no touch automation solutions to build/upgrade the vault environment to the next generation specs

　　Develop automation and tooling for on-going maintenance of the platform

　　Monitoring performance trends for capacity planning purposes

　　Help troubleshoot issues with the vault environment

　　Required Skills:

　　10+ years of Information Technology experience

　　Demonstrable experience deploying secret management solutions at enterprise scale

　　Demonstrated expert level of Linux administration, cluster architecture, and configuration management

　　Thorough understanding of REST API and json

　　Strong understanding and experience deploying solutions via agile methodology and associated toolset (Jira, Bitbucket, Jenkins, etc.)

　　Ability to write and maintain Ansible playbooks

　　Solid understanding of infrastructure (hardware, network, storage) at an enterprise scale

　　Proficiency in a programming or scripting language including Python and powershell

　　Bachelor's degree in Computer Science or related field

　　Preferred Qualifications:

　　Previous experience with vaulting products like: CyberArk, Centrify, Thycotic, HashiCorp Vault, Okta, Ping.

　　Current alignment to the Core Technology Infrastructure organization is preferred

　　Current alignment to the Global Technology line of business is preferred

　　Shift:

　　1st shift (United States of America)

　　Hours Per Week:

　　40

　　Bank of America and its affiliates consider for employment and hire qualified candidates without regard to race, religious creed, religion, color, sex, sexual orientation, genetic information, gender, gender identity, gender expression, age, national origin, ancestry, citizenship, protected veteran or disability status or any factor prohibited by law, and as such affirms in policy and practice to support and promote the concept of equal employment opportunity and affirmative action, in accordance with all applicable federal, state, provincial and municipal laws. The company also prohibits discrimination on other bases such as medical condition, marital status or any other factor that is irrelevant to the performance of our teammates.

　　To view the "EEO is the Law" poster, CLICK HERE (https://www.dol.gov/ofccp/regs/compliance/posters/pdf/eeopost.pdf) .

　　To view the "EEO is the Law" Supplement, CLICK HERE (https://www.dol.gov/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf) .

　　Bank of America aims to create a workplace free from the dangers and resulting consequences of illegal and illicit drug use and alcohol abuse. Our Drug-Free Workplace and Alcohol Policy (“Policy”) establishes requirements to prevent the presence or use of illegal or illicit drugs or unauthorized alcohol on Bank of America premises and to provide a safe work environment.

　　To view Bank of America’s Drug-free workplace and alcohol policy, CLICK HERE .