Senior Cryptography Security Architect

Overview

On Site
Depends on Experience
Full Time

Skills

Finance
IMPACT
Process analysis
Customer focus
Project management
Risk management
Strategic planning
Process modeling
Stakeholder management
Strategic thinking
Analytical skill
Change management
Presentations
Virtual team
Cyber security
Innovation
Identity management
Strategy
Software deployment
IT project management
IT security
Cryptography
Security architecture
Systems analysis/design
Optimization
Database
Technical Support
Operations
Recruiting
Budget
Supervision
Mentorship
Scrum
Collaboration
Geographic information system
Policies
Business requirements
Documentation
Systems design
Computer hardware
Interfaces
PKCS
Educate
Network layer
Data
Storage
Management
Cloud computing
Encryption
Leadership
Algorithms
Design
Information security
Payment card industry
PCI DSS

Job Details

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.

One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We're devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being.

Bank of America believes both in the importance of working together and offering flexibility to our employees. We use a multi-faceted approach for flexibility, depending on the various roles in our organization.

Working at Bank of America will give you a great career with opportunities to learn, grow and make an impact, along with the power to make a difference. Join us!

Skills:
  • Business Process Analysis
  • Customer and Client Focus
  • Project Management
  • Risk Management
  • Strategy Planning and Development
  • Controls Management
  • Process Design
  • Process Simplification
  • Stakeholder Management
  • Strategic Thinking
  • Analytical Thinking
  • Change Management
  • Influence
  • Innovative Thinking
  • Presentation Skills


Come join an exciting team within Global Information Security (GIS). Cyber Security Technology (CST) is a globally distributed team responsible for cyber security innovation and architecture, engineering, solutions and capabilities development, cyber resiliency, access management engineering, data strategy, deployment maintenance, technical project management and information technology security control support.

This role is that of a Senior Cryptography Security Architect on the Security Architecture team. The role is responsible for the analysis, design, development and implementation of architectural deliverables, to include components of the assessment and optimization of system design and review of business requirements. They will lead determination of security requirements and alignment to information security policy. May be called upon to work with database, operations, technical support and other IT areas as well as GIS Solutions Architects as appropriate throughout the development and implementation processes. Serves as a technical security resource; provides technical knowledge and security capabilities as a team member and an individual contributor. Will not have direct reports but may influence and direct activities of a team related to special initiatives or operations. May provide input on staffing, budget and personnel. Typically 5 or more years of Information Security and IT experience.

Primary Level of Engagement: Works at the team level or program level.Is an individual contributorrequiring little to no supervision.Can serve as a domain expert to mentor more junior team members. Is able to contribute to multiple projects.

? Primary Interactions:

Product Owner

Development Lead

Project / Solution Architect

Scrum Master / Project Manager

Senior Engineer

Information Security Engineer

Architect Community of Practice

BISO

Key Responsibilities:
  • Work across business and technology to create the solution intent and architectural vision and evolve it to align with GIS policy.
  • Consult with the business regarding problems and technology to understand challenges and find secure solutions through their knowledge of the domain, practical experiments and Proof of Concepts (POCs).
  • Lead rapid shaping of a high-level architecture with details filled in with emerging business requirements; ensure architecture is secure and designed to adapt easily.
  • Utilize the defined best practices, templates and documentation to create architectural designs; suggest improvements to best practices and templates through practical knowledge.
  • Work with Product Managers and Owners to plan and prioritize security-focused backlog items for the architecture runway to enable business epics and features.
  • Clarify the architecture and assist with system design (where needed) for the development teams to support implementation, and provide solution options to resolve any architectural impediments.
  • Perform design and code reviews to ensure all security requirements for a solution are sufficiently met (for example, confidentiality, integrity, and availability).
  • Educate team members on the security principles, technology practices, standardization strategies and best practices to create secure solutions.


Required Skills:
  • Working knowledge of asymmetric and symmetric key encryption
  • Working knowledge of HSMs (Hardware Security Modules) on the market and respective interfaces (e.g., PKCS, KMIP)
  • Ability to educate on primary encryption topics such as network layer encryption, application/data encryption, use of a MEK, DEK, key storage and management
  • Working knowledge of encryption solutions for public cloud providers (e.g., CloudHSM, Key Vault)
  • Experience with secrets vaulting solutions, encryption-decryption products, identity protocols/frameworks
  • Familiarity with leading algorithms and ciphers and ability identify insecure or archaic algorithms
  • Strong desire to design new cryptographic solutions at enterprise scale
  • 5+ years of Information Security experience


Desired:
  • Experience and knowledge of the Credit/Payment Card industry
  • PCI DSS knowledge


Shift:
1st shift (United States of America)

Hours Per Week:
40

Learn more about this role
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.

About Bank Of America