Senior IAM Engineer: Least-Privilege Access in Cloud & On-Prem

Bank of America; Washington (District of Columbia); On-site; USD 135,000 - 182,000; Full time

Job summary

Bank of America is seeking a highly experienced Senior Identity and Access Management Specialist to lead access provisioning across a complex enterprise. You will enforce least privileged access and design scalable IAM solutions spanning AD, Azure, AWS, Mainframe, Oracle, and SQL databases, with automation and governance at the core.

You will mentor a team, collaborate with stakeholders, and drive continuous improvement in identity governance, risk management, and security controls while

Qualifications

• 10+ years of progressive experience in Identity and Access Management.
• Solid understanding of infrastructure architecture and security administration access.
• Deep expertise in Active Directory, Microsoft Azure, AWS, Mainframe, Oracle DB, SQL Server.
• Experience with RBAC, IAM governance frameworks, and PAM tools.
• Automation scripting with PowerShell and Python; cloud/hybrid access controls.
• Ability to conduct access reviews, entitlement audits, and risk assessments.
• Strong collaboration across technical and business teams.

Responsibilities

• Lead design, implementation, and management of access provisioning solutions.
• Serve as SME for AD, Azure, AWS, Mainframe, Oracle/SQL databases, and file systems.
• Develop access control policies, group structures, and RBAC models.
• Collaborate with owners and infrastructure teams to define access requirements.
• Drive automation for provisioning/de-provisioning and HR integrations.
• Conduct periodic access reviews and certification campaigns for compliance.
• Investigate incidents and remediate vulnerabilities with security and risk teams.
• Provide technical leadership and mentor junior IAM colleagues.
• Stay current with IAM tech, regulatory changes, and best practices.
• Present metrics and recommendations to leadership and audit teams.

Skills

IAM expertise

Active Directory

Microsoft Azure

AWS

Mainframe

Oracle

SQL

Least privileged access

RBAC

PAM tools

PowerShell

Python

Tools

SailPoint

Saviynt

CyberArk

HashiCorp

Beyond Trust

Job description

Bank of America is seeking a highly experienced Senior Identity and Access Management Specialist to lead access provisioning across a complex enterprise. You will enforce least privileged access and design scalable IAM solutions spanning AD, Azure, AWS, Mainframe, Oracle, and SQL databases, with automation and governance at the core.

You will mentor a team, collaborate with stakeholders, and drive continuous improvement in identity governance, risk management, and security controls while