Senior Infrastructure Engineer

Overview

The Vaulting Senior Infrastructure Services Engineer manages a product‑centric architecture and engineering team that designs, implements, and continuously improves Vaulting Infrastructure solutions integrated with the Bank’s IAM ecosystem for on‑prem, hybrid‑cloud, and multi‑cloud environments.

Key Responsibilities

Collaborate with Product Managers and Owners to define standards‑compliant, enterprise‑grade Tier 0 Identity Management Infrastructure Services for both on‑prem and hybrid‑cloud environments.

Develop and implement vaulting infrastructure services that assess, prioritize, and mitigate information security and technology risk.

Build and lead a team of subject matter experts who design, develop, and deploy Vaulting Services.

Participate at the executive level in architecture review boards and audit, compliance, and regulatory functions representing all aspects of Identity Management Infrastructure Services.

Incorporate and advance Vaulting standards, policies, and new baselines as these evolve.

Design network security perimeter architectures and controls for vaulting infrastructure in hybrid‑cloud (and future multi‑cloud) environments.

Review internal and external IT projects and applications for risk and adherence to security policies and best practices.

Co‑operate on internal security project teams to deploy security technologies and recommend hardware/software products for future releases.

Engage vendors for security infrastructure products and services.

Act as an escalation point and provide direction on projects and issues for team members.

Serve as the point of contact across CTI, GIS, and all business units for Vaulting Services work products, security techniques, methodologies, and results to ensure business value.

Required Qualifications

10+ years of IT experience in large environments, especially within financial firms, with at least 3+ years in Vaulting Services capacity.

Industry expertise in Vaulting Services and prevailing Vaulting standards, including Federated Identity in Hybrid Cloud Environment, API gateways, enterprise databases, role‑based access control, Security Assertion Markup Language (SAML), Privileged Access Management, Vaulting Solutions, Linux/Unix, MS Active Directory / Azure AD, Managed Identities, and Human and Non‑Human Accounts.

Proven ability to understand and analyze complex issues, then apply experience and judgment to develop sound recommendations related to malware, eDiscovery, current threats/attacks, and vulnerability management.

Knowledge of risk assessment tools, technologies, and methods.

Exceptional organizational skills and attention to detail.

Ability to communicate concisely, effectively, and directly to executive management and regulatory committees.

Technologies

Hashi Vaulting (SME)

CyberArk (SME)

GitHub

Cloud environments (AWS, Azure, GCP)

JIRA

Ansible, Python, and other development platforms

Shift: 1st shift (United States of America)

#J-18808-Ljbffr