PAM Security Lead — Privileged Access Expert

Bank of America; Washington; On-site; USD 78,000 - 138,000; Full time

Job summary

Bank of America is seeking a skilled PAM professional to enforce privileged access controls across platforms and collaborate with governance teams to enhance PAM solutions. You will drive risk reduction, educate partners, and report on PAM risks within a global IAM program.

The role requires deep PAM expertise, strong analytical skills, and the ability to communicate complex security concepts to diverse stakeholders. Office-based with growth opportunities.

Qualifications

• 7 years relevant hands-on experience in PAM in complex and heterogenous technology environment.
• Deep experience with Linux, Windows, Cloud scale Identity, Access Management (Single Sign-On, Multi Factor Authentication), Authorization services or design and architecture of PAM services
• Deep knowledge of bank financial practices and policies and ability to adapt to fast changing environment
• Working level experience with IAM platforms such as Ping Identity, Active Directory OpenLDAP, OpenDJ
• Experience in consumption of Web Service APIs such as JSON / XML
• Hands on experience and involvement in large and complex projects.
• Expert level knowledge of privileged access management methodologies and techniques for on-prem and Cloud implementation.
• Expert level knowledge of authentication platforms such as Active Directory, LDAP, Kerberos, LDAP, Radius.
• Expert knowledge of PAM related tools which support session proxy, vaulting, just-in-time provision, integration with service management tool would be an advantage.
• Deep security knowledge which covers core technology infrastructure (network, storage, servers, databases, etc.) identity management and application security practice.
• Deep knowledge on Federation platforms or protocols such as Oauth, OpenID, SAML, WS-Fed, etc.
• Good knowledge and understanding of PAM-specific laws, rules, and regulations within the financial services sector.
• Proficient in Microsoft Office suite of products with ability to quickly analyze and synthesize large volumes of data.
• Familiarity with security standards such as NIST, ISO/EC, FFIEC.
• Understanding and interpreting BAC's established information security Policy, Standards, Procedure and Guides, and applying this knowledge to related PAM decisions and response.
• Possession of CISSP certification would be an advantage.
• Knowledge of Compliance Certifications such as SOX, SOC, SOC2.

Responsibilities

• Serve as the Subject Matter Experts in advising BAC business and technology counterparts on effective ways to achieve or exceed compliance with applicable Policy, Standards, Procedures and Guides.
• Proficient in articulating facts and data-driven plans and to partner with stakeholders to implement intended solutions to drive risk reductions and adherence to PAM standards.
• Strong attention to detail and advanced analytical skills.
• Excellent communication and presentation skills. Able to effectively prioritize multiple tasks.
• Proven track record in delivering outcomes that result in sustainable risk reductions in PAM.
• Ability to work independently on initiatives with little oversight. Motivated and willing to learn.
• Confident and effective in delivering messages across a wide spectrum of individuals with varying degrees of technical and business understanding

Skills

PAM

Linux

Windows

Cloud IAM

Single Sign-On

Multi Factor Authentication

JSON/XML

Project delivery

Education

CISSP certification

Tools

Ping Identity

Active Directory

OpenLDAP

OpenDJ

LDAP

Kerberos

Radius

Job description

Bank of America is seeking a skilled PAM professional to enforce privileged access controls across platforms and collaborate with governance teams to enhance PAM solutions. You will drive risk reduction, educate partners, and report on PAM risks within a global IAM program.

The role requires deep PAM expertise, strong analytical skills, and the ability to communicate complex security concepts to diverse stakeholders. Office-based with growth opportunities.