Lead Analyst

Job Description:

About Us

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.
Being a Great Place to Work and providing a culture of caring is core to how we drive Responsible Growth. We are intentional about fostering an inclusive workplace where every teammate has the opportunity to succeed, build a career and contribute to our shared success. This includes attracting and developing exceptional talent, recognizing and rewarding performance, and supporting our teammates’ physical, emotional, and financial wellness through affordable, competitive and flexible benefits.
We value the unique perspectives individuals bring from all backgrounds and career paths - whether shaped by military service, community college education, or a wide range of work and life experiences. These journeys foster resilience, leadership and innovation, strengthening our workforce and positively impact the communities we serve.
Bank of America is committed to an in-office culture that supports collaboration, engagement, and career development. Our approach includes clear in-office expectations, while providing an appropriate level of flexibility based on role-specific responsibilities and business needs.
At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!

Global Business Services

Global Business Services delivers Technology and Operations capabilities to Lines of Business and Staff Support Functions of Bank of America through a centrally managed, globally integrated delivery model and globally resilient operations. Global Business Services is recognized for flawless execution, sound risk management, operational resiliency, operational excellence and innovation. In India, we are present in five locations and operate as BA Continuum India Private Limited (BACI), a non-banking subsidiary of Bank of America Corporation and the operating company for India operations of Global Business Services.

Process Overview

Global Information Security (GIS) is responsible for protecting bank information systems, confidential and proprietary data, and customer information.  GIS develops the bank’s Information Security strategy and policy, manages the Information Security program, identifies and addresses vulnerabilities and operates a global security operations center that monitors, detects and responds to cybersecurity incidents. Within GIS, the Cloud Security organization is responsible for leading a team of deeply technical cyber security engineers and architects to design and implement best in class cyber security capabilities for internal and external cloud instances in partnership with infrastructure and application technology teams. In addition, lead efforts across other Global Information Security functions to enable cyber security technology and operations in cloud environments.

Job Description

This role involves specialization in Cloud Identity and Access Management (IAM) technologies with strong understanding of cloud security architecture, IAM protocols, authentication mechanisms, and role-based access control. Responsible for components of complex engineering and/or analytical tasks and activities. Assists in establishment of input/output processes and working parameters for hardware compatibility and coordination of subsystems design and integration of total system. Serves as a fully seasoned/proficient technical resource; provides tech knowledge and capabilities as team member and individual contributor. Will not have direct reports but will influence and direct activities of a team related to special initiatives or operations. Provides input on staffing, budget, and personnel.

Responsibilities

• Cloud IAM Strategy: Develop and implement a comprehensive IAM strategy for cloud environment, aligning it with the organization’s business objectives and compliance requirements.

• IAM Integration: Collaborate with CSPs and internal teams to integrate IAM solutions seamlessly into cloud environments

• Operational management of Cloud IAM, management of related external tools, technical and process documentation, monitoring and metrics

• Identify opportunities for process optimization, automation, and innovation within the IAM framework to enhance security, user experience, and operational efficiency.

• Designing, implementing, and managing IAM solutions in cloud environments

• Strong understanding of cloud security architecture, IAM protocols, authentication mechanisms, and role-based access control

• Problem-solving skills and the ability to analyze complex technical issues and provide effective solutions

• Collaborate across departments and present complex security concepts to non-technical stakeholders

Requirements

 Education : B.E. / B. Tech/M.E. /M. Tech

Certifications If Any : CCSP Certification, Cloud Security Certifications from AWS

Experience Range : 8 - 10 years

 Foundational skills

• Experience in writing Terraform configurations and modules

• Hands-on experiences in coding

• Experience in Cloud IAM, network and Security design

• Advance knowledge of Single-Sign On (SSO), Federated Identities, AWS Identity Center and AWS IAM

• Hands-on experience with design and implement cloud security architecture

• Implement strong Identity Management and Access control policies for cloud access

• Private Cloud and Public cloud platforms such as Azure and AWS Cloud

• Monitor cloud environment for security threats and integrate with incident response

• Experience in CI/ CD for cloud via pipelines

• Good knowledge of AWS bedrock and AWS STS services

• Experience in Dev SecOps model with infra-as-code, config-as-code, policy-as-code etc

• Knowledge of current and upcoming cloud security/network technologies (e.g IPS, DDoS, SIEM, WAF etc) and understanding of compliance and regulatory standards

• Understanding of landing zones, cloud native security, monitoring and logging tools like Splunk, Cloud Trail, Cloud Watch etc.

• Knowledge of common Information Security frameworks, relevant legal & regulatory requirements like NIST Cybersecurity, CIS controls, SOX and Data Security standard

• Knowledge of cloud network design and deployment architecture

• Strong interpersonal skills, ability to make effective presentations and communicate technical concepts to non-technical parties

• Excellent communication, influencing and facilitation skills with deep intellectual curiosity and innovative thinker

• Demonstrate neutral objectivity and seek the best outcome for the business. Enterprise mindset; considers E2E process impact when evaluating opportunities/challenges

• Maximizes organizational capability with a demonstrated commitment to valuing diversity

 Desired skills

•Experience in Web-Development technologies: HTML, XML, XSL/XSLT, XPATH and Java script

• Understanding of API design concepts, RESTful Services and modern application interaction patterns

• Familiarity with IT security and risk management practices

Work Timings : 1:30pm to 10:30 pm

Job Location : Hyderabad, Chennai, Mumbai, Gurugram