Technology Operations Specialist II - GBS IND

Job Description:

About Us

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.

One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We're devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being.

Bank of America believes both in the importance of working together and offering flexibility to our employees. We use a multi-faceted approach for flexibility, depending on the various roles in our organization.

• Administer and maintain the KMS platform, ensuring its availability, security, and performance.
• Ensure compliance with relevance regulatory requirements and industry standards and identify and mitigate the key management-related risks.
• Collaborate with other teams such as networks, IT security and compliance, Engineering, and stakeholders to ensure alignment and effective key management. Communicate key management plans, policies, and procedure to stakeholders.
• Manage the entire key lifecycle and ensure secure key storage, backup, and recovery processes.
• Stay up to date with industry standards, best practices, and emerging technologies in key management.
• Supports change implementations, proactively identifies and resolves potential issues resulting from the changes, and performs access and/or physical provisioning/deprovisioning (additions, modifications, and deletions) for infrastructure and applications. ensure the changes are properly documented and communicated to stakeholders.
• Ensure that all the key managements activities are monitored, and the logs are being reviewed periodically.
• Manage the lifecycle of the SSL certificate including installation and renewal. Monitor on the certificate expiration and renewal.
• Respond to and manage key management related incidents, such as key compromises or certificate expiration or other issues, co-ordinate with stake holders to resolve incidents and minimize impact. Also, document and report on incidents including root cause analysis and lessons learned.

• Primary Skills: Thales HSM, Cipher Trust Manager, Linux, Scripting
• Strong knowledge in Cryptographic keys and certificate and their life cycle.
• Hands on experience working on Linux/Unix and/or Windows server platforms
• Strong understanding of cryptographic principles and key management best practices.
• 2+ years hands on experience on Thales HSM or Cipher Trust Manager.
• Experience with key management systems such as AWS KMS, Azure Key Vault, or Google Cloud KMS.
• Additionally having knowledge in API calls on Thales HSM or Cipher trust manager.
• Excellent troubleshooting and problem-solving skills.
• Strong communication and collaboration skills.
• Familiarity of Incident and Problem Management systems like Remedy or ServiceNow.
• Ability to work independently and as part of a team in a fast-paced environment.
• Knowledge on security standards and regulations. Eg: PCI-DSS, HIPAA

• Experience with Key management systems and HSM(eg: the product from Thales, Entrust, Vormetric, etc)
• Experience with industry monitoring tools like Splunk, etc.
• Ability to quickly learn new technologies.
• Prior experience with Operating critical Infrastructure or Application environments
• Ability to communicate technical concepts to non-technical stakeholders.
• Familiarity with cloud based key management systems such as AWS KMS, etc.
• Stakeholder management
• Certifications on AWS certified security, Redhat.