Job Description:

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.

Being a Great Place to Work and providing a culture of caring is core to how we drive Responsible Growth. We are intentional about fostering an inclusive workplace where every teammate has the opportunity to succeed, build a career and contribute to our shared success. This includes attracting and developing exceptional talent, recognizing and rewarding performance, and supporting our teammates’ physical, emotional, and financial wellness through affordable, competitive and flexible benefits.

We value the unique perspectives individuals bring from all backgrounds and career paths - whether shaped by military service, community college education, or a wide range of work and life experiences. These journeys foster resilience, leadership and innovation, strengthening our workforce and positively impact the communities we serve.

Bank of America is committed to an in-office culture that supports collaboration, engagement, and career development. Our approach includes clear in-office expectations, while providing an appropriate level of flexibility based on role-specific responsibilities and business needs.

At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!

The Chief Technology Organization:

• Believes diversity makes us stronger so we can reflect, connect and meet the diverse needs of our clients and employees around the world.
• Is committed to building a workplace where every employee is welcomed and given the support and resources to perform their jobs successfully.
• Wants to be a great place for people to work and strives to create an environment where all employees have the opportunity to achieve their goals.
• Provides continuous training and development opportunities to help employees achieve their career goals, whatever their background or experience.
• Is committed to advancing our tools, technology, and ways of working to better serve our clients and their evolving business needs.
• Believes in responsible growth and is dedicated to supporting our communities by connecting them to the lending, investing and giving them what they need to remain vibrant and vital.

Job Description:

The APAC Network DMZ Services team is responsible for end-to-end engineering and deployment of DMZ services within Bank of America. Team provides end-to-end network security infrastructure solutions for internal clients, lines of business and external 3rd parties.

The candidate will be part of a regional team and be responsible for working with stakeholders to deliver connectivity that balances business, security, availability, and resiliency requirements across Network Security technologies.

Responsibilities:

• Be accountable for end-to-end engineering and deployment of DMZ services within APAC region, serving as the escalation point of contact to senior leaders.
• Participate in hands-on implementation, configuration of devices and engineering new services into production.
• Ensure security controls are implemented and operating effectively as part of solutions delivery.
• Create designs based on industry best practices, engineering standards and security principles.
• Manage a wide variety of DMZ technology infrastructure and business aligned initiatives.
• Collaborate with Product managers, global engineering domain leads and operations teams from service design through operations transition process for new services.
• Understanding the design/purpose of each application or infrastructure project, defining resource requirements to efficiently collaborate across other technology technical teams to deliver high visibility projects.
• Ensuring documentation is updated to reflect new additions to or modifications in the environment and handed into Operations successfully.
• Identifying and managing the mitigation of risks within the environment.
• Liaise with Information Security partners to enforce compliance with standards.
• Support activities related to Audit, Compliance Reviews & Regulatory Exams.
• Review of all capacity metrics to ensure availability of all services.
• Facilitate meetings among all stakeholders/ vendors regularly and produce status update reports periodically.

Required Skills:

• Minimum 4+ years of hands-on experience with large scale, complex network/DMZ environments preferably in the banking and finance industry.
• analytical and technical skills with proven experience in network DMZ security technologies especially Load Balancer technologies ( F5 , AVI ) and Firewall, IDS/IPS, Web Content Filtering
• 2+ years or more experience with deep understanding in Load Balancing technologies – F5 , SSLO and AVI
• experience in Web Content Filtering technologies – McAfee proxy etc vendor platform. Would be a plus
• networking troubleshooting and knowledge of web connectivity and protocols (PAC files, TCP/IP, HTTP, HTTPS, SSL, FTP, Socks, etc.).
• knowledge of networking communication principles, network standards, and network security practices.
• Experience in creating Application and network diagrams including all pertinent flows and decisions.
• Capability to summarize complex issues into executive summaries.
• Possesses strong analytical skills and root cause investigation techniques with a desire to expand horizon to next-gen products, applications and technology.
• Familiar with product deployments within a global banking environment.
• Willing to work some irregular hours based on the needs of global operating model and the location of clients.
• Understanding in Automation (Python, Ansible etc).
• Communicate with business partners at an enterprise level; interfacing with internal business representatives and information security partners.
• Strong analytical skills with ability to identify gaps, challenge others with positive intent, and drive debate towards identification and remediation of underlying risks.
• Knowledge of regulatory risk management in Technology and Information Security domains preferred.
• ITIL processes knowledge: Change Management, Incident Management, Request Management, and Problem Management. ITIL certification preferred.
• At least one professional level certification in Load Balancing environment
• Educated to degree level in IT/Engineering field.

Desired Skills:

• Participates in the design, development, and implementation of complex system engineering activities involving cross-functional technical support, systems programming and data center capabilities.
• Responsible for components of highly complex engineering and/or analytical tasks and activities.
• Establishes input/output processes and working parameters for hardware/software compatibility, coordination of subsystems design, and integration of total system. Will have responsibility for multiple, complex projects.
• Participate in the resolution process for complex problems where analysis of situations or data requires an in-depth evaluation of various factors. Exercises judgment within broadly defined practices and policies in selecting methods, techniques, and evaluation criterion for obtaining results.
• Information Technology degree and/or technology certifications preferred or substantial equivalent experience. Typically 4-5 years of IT experience