Senior Cryptographic Key Management Site Reliability Engineer II - Military Veterans

Job Description:

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.

One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We're devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being.

Bank of America believes both in the importance of working together and offering flexibility to our employees. We use a multi-faceted approach for flexibility, depending on the various roles in our organization.

Working at Bank of America will give you a great career with opportunities to learn, grow and make an impact, along with the power to make a difference. Join us!

Job Description:
We are seeking a talented and experienced Key Management Service (KMS) Service Reliability Engineer (SRE) to join our team. In this role, you will be responsible for ensuring reliability, stability, and security of a robust enterprise key management infrastructure. Work closely with our CIOs , engineering and security teams to maintain highly available and performant KMS solutions.

Job Responsibilities:

• Maintain key management infrastructure to meet user's needs, security, and compliance requirements.
• Familiarity of Incident and Problem Management systems like Remedy or ServiceNow.
• Monitor and optimize the performance and scalability of KMS Infrastructure.
• Problem solving skills with the ability to troubleshoot and resolve issues related to key management services, including encryption, decryption, and key rotation.
• Implement and enforce security best practices to protect sensitive data and cryptographic keys.
• Collaborate with Engineering and other cross-functional teams to implement automated workflows for key lifecycle management.
• Implement patches, updates and upgrades as needed.
• Participate in on-call rotations and respond to incidents in a timely manner.
• Conduct post-incident reviews and implement preventive measures to minimize the risk of recurrence.
• Stay up-to-date with industry trends and emerging technologies related to key management and cryptographic standards.
• Hands on experience working on Linux/Unix and/or Windows server platforms
• Automation/scripting experience using python, python, Perl, shell scripting or PowerShell

• 1+ years of cryptographic principles and key management experience
• 1+ years of Service Reliability Background Experience including Triage, Issue Mitigation, Post Problem Review and Problem Management
• 1+ years hands on experience with key management systems such as AWS KMS, Azure Key Vault, or Google Cloud KMS
• Excellent troubleshooting and problem-solving skills
• Ability to work effectively with other functional areas and understand the operational and cultural issues relevant to achieving superior results

• Experience using Utimaco, Thales, Entrust, etc. products for HSM and other Key Management components like legacy Gemalto, Vormetric or CipherTrust Manager
• Familiarity with DevOps practices and tools (e.g., CI/CD pipelines)
• Certifications such as AWS Certified Security - Specialty or Certified Kubernetes Administrator (CKA)
• Knowledge in Quantum Cryptography
• Java/API - microservices knowledge
• Verbal, written communication and interpersonal skills
• Ability to present complex security subjects to internal partners

• Collaboration
• Innovative Thinking
• Analytical Thinking
• Influence
• Automation
• Production Support