Cloud IAM & Entitlement Architect

Bank of America

Washington (District of Columbia)

On-site

USD 135,000 - 182,000

Full time

14 days+

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Job summary

Bank of America in Washington, DC is seeking a senior IAM professional to lead modernization of enterprise access controls across on‑premises and cloud environments. You will drive RBAC/ABAC/PBAC/SOD adoption, entitlement analytics, and scalable cloud permission models while partnering with Architecture, Engineering, Cloud Security, IAM Service Catalogue, and LOB stakeholders.

Lead complex initiatives, translate technical concepts into business outcomes for senior leadership, and help reduce

Qualifications

10+ years of IAM, Cybersecurity, Cloud Security, or Access Management experience.
Experience with ISO, NIST, FFIEC, COBIT, CSA standards related to SoD.
Experience implementing RBAC, ABAC, PBAC, JIT, and cloud access control frameworks.
Experience designing Cloud Permission Models & Entitlement Analytics across AWS, Azure, and GCP.
Experience leading enterprise IAM transformation projects.
Experience partnering with Architecture, Engineering, Cloud Security, and Business stakeholders.
Experience using analytics, automation, and process optimization to improve security outcomes.
Experience with Automation, AI-Enabled Solutions & Workflow Optimization
Experience with scripting (Python, R, SQL) and tools like Wiz, Bloodhound, Splunk, Tableau, PowerBI, Pivot Tables.
Experience with Microsegmentation and monitoring tools.
Strong understanding of Cloud & Enterprise Infrastructure Platforms & Network
Strong analytical and data-driven decision-making capabilities

Responsibilities

Define, operationalize, and modernize enterprise access control capabilities across traditional and cloud environments.
Drive the evolution of RBAC, ABAC, PBAC, and SOD models with cloud entitlement management.
Partner with Architecture, Engineering, Cloud Security, IAM Service Catalogue, and business stakeholders.
Establish modern access models to support cloud transformation.
Lead adoption of modern access control frameworks across AWS, Azure, GCP, and SaaS.
Translate technical concepts into business outcomes for senior leadership.
Lead complex initiatives involving cloud permissions, entitlement management, role engineering, and access risk reduction.