Infrastructure Engineer

Job Description:

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.

Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being an inclusive workplace, attracting and developing exceptional talent, supporting our teammates physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve.

Bank of America is committed to an in-office culture with specific requirements for office-based attendance and which allows for an appropriate level of flexibility for our teammates and businesses based on role-specific considerations.

At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!

Position Summary:

This job is responsible for working on complex technical designs that AAA policy compliance in accordance with architectural governance, standards and policies. This job facilitates deployment of technical solution by developing processes to implement and then implementing changes . The work is always in alignment to the current and approved architectural, roadmaps, technology standards and templates, process, governance and change management policies set forth by the firm. AAA is part of the control for wired, wireless, device access and re, mote users. Ability to work as part of a team as well as individually depending on project. While the role primarily has an implementation and validation engineering focus, a strong understanding of AAA policy, posture, protocols and cluster deployment and maintenance concepts are required. They also need to forecast the delivery and track of multi-phase work against change and release calendar(s). They need to fully understand and adhere to the bank change processes.

They must be mindful of how their role impacts the firms business and reputation. Concepts such as driving value, always delivering quality, keeping commitments, being on-time and under-budget, effective and detailed communications. Managing time is critical, developing and managing tasks efficiently is the key to success.

This position will interface directly with internal and external customers/suppliers/providers, Architecture, Product Engineering, Design/Implementation engineering, Change, Service and Product Management, finance and business management and Operations teams. Interface with various levels of senior management. Strong written, verbal and presentation skills are a must. The candidate must be able to work on their own and successfully in team settings in various sizes and locations. Adherence and use of standards, product sets, templates, systems, and artifacts are important to the success change, the department and the firm at large.

Familiarity with working in regulated and/or large global enterprises is a plus.

Key Technology areas of focus for the role include:

Clearpass, Stealthwatch, ICE, AAA, SPLUNK, load balancing, Excel, MS Project, captive portals, NA3RC, automation, network configuration, automation, certificates, cluster build, upgrade and configuration.

Responsibilities:

• Attends Project Meetings as needed.
• Creates change documents and changes
• Scheduling of the changes with the assigned engineer
• Representing change records (CRQs) on various calls
• Representing on regional pre-CAB Weekly
• Socializing changes to the other peer teams regionally so they can represent changes in region.
• Following up with Testers / Testing Coordination for all Changes
• Ensuring Peer Reviews are attached to CRQs / Chasing Approvals
• AAA weekly internal change calls weekly
• Attends various change review calls
• Reviews test plans and results, ability to assist in driving to root cause
• Collaborate with other internal/external Bank teams such as Operations, Engineering, and requestors on core design requirements/standards and risk assessment
• Leverage designated tools and resources to create NCDs that will drive implementation during a pre-approved change window as necessary
• Ensure initiatives/changes are well defined with success criteria, ownership, and realistic but firm schedules
• Ensures change documents are peer reviewed are approved
• Coordinates with other teams for change knowledge transfer
• Rehearse changes in the lab
• Works during weekends to implement changes. Low risk changes can be performed during the week
• Ensures no risks are associated to the change
• Ensures changes are user acceptance tested and authentication logs are successful after post implementation
• Will need extensive knowledge on AAA, ISE and Clearpass environments
• Works with release managers to create changes
• Coordinates with vendors during changes if devices need to be swapped or any type of datacenter local onsite support is needed
• Validates changes via working with users as part of user acceptance testing
• Validates changes via creation and implementation of test plans (manual and automated)
• Validates changes via verification of logs and test results
• Building, updating and sending Change Communication templates for the weekends changes
• Update Schedule as changes are completed and new work orders are added
• Run change bridges and handling the CRQ communications as needed
• Create work orders and other requests to engage Blackbox and device, firewall and IP services updates

Required Qualifications:

• 3+ years experience required in Technical role supporting network project/programs
• Strong subject matter expertise across various enterprise identity authentication technologies ranging from AAA (RADIUS/TACACS), 802.1X technologies (Wired/Wireless), RSA and token-based systems
• Experience with Aruba ClearPass Policy Server or Cisco Identity Services Engine (ISE)
• Experience with Network Access Control (NAC) 802.1X for Wired and Wireless networks
• Experience working with SSL Certificate Authorities, and certificate management
• Strong experience and detailed technical knowledge in security engineering, system and network security, authentication and authorization protocols, cryptography, and application security, load balancing
• Experience with tools such as Splunk, Excel, ideally experience in automation
• Expert understanding of network protocols TCP/IP, HTTP, HTTPS, SSL, TLS, 802.1.X, etc.
• Experience with Change Management and CAB processes and procedures
• Leadership: be a self-starter, self-directed and shows initiative
• Focused on execution, delivery, and commitment to dates. Ability to work in a high paced environment. Can manage risk; is a good decision maker. Understands the big picture; can relate to the firms strategy and actions and how they support our business result
• Demonstrates ownership: Is accountable and influential/can hold others accountable (professionally)
• Strong written and verbal communications skills. Ability to communicate and influence upward as well as laterally
• Organized and detail oriented

Desired Qualifications:

• Experience with testing and change validation, root cause analysis, risk mitigation, security assessments, analysis of security threats, trends and architectural
• Experience with Remote Access (VPN posture) is preferred
• Experience with Secure Cloud Analytics (Stealthwatch) is preferred

Skills:

• Analytical Thinking
• Automation
• Risk Management
• Architecture
• DevOps Practices
• Solution Delivery Process
• Solution Design
• Technical Strategy Development

Shift:

Hours Per Week:

Pay Transparency details