Job Description:

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.

Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being an inclusive workplace, attracting and developing exceptional talent, supporting our teammates’ physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve.

Bank of America is committed to an in-office culture with specific requirements for office-based attendance and which allows for an appropriate level of flexibility for our teammates and businesses based on role-specific considerations.

At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!

This job is responsible for partnering with engineering and technology teams to improve reliability and observability for the services it supports. Key responsibilities include planning and implementing instrumentation, tooling, ticketing, alerting and on call routines as defined in observability designs, and engaging in production triage and Problem Management. Job expectations include supporting code enhancements to automate services and improve reliability and observability while expanding knowledge to identify gaps in the observability design or implementation.

The Active Directory Infrastructure Operations (ADIO) team is seeking a highly skilled Active Directory (AD) Subject Matter Expert (SME) to support and maintain a large-scale corporate enterprise environment. This role requires deep expertise in AD authentication services and infrastructure, with a focus on ensuring reliability, security, and optimal performance.

The ideal candidate will be responsible for diagnosing and resolving production issues, managing AD-related infrastructure, and collaborating with cross-functional teams to ensure smooth operations. This includes proactive maintenance, troubleshooting, and automation of administrative tasks to enhance efficiency and minimize downtime. The candidate will be required to cover weeknight and weekends on a as needed basis.

Responsibilities:

Provide expert-level support for Active Directory authentication services, ensuring high availability and security of AD environments across multiple domains and forestsDiagnose and resolve complex authentication and authorization issues across domain and cross-forest environmentsPerform root cause analysis (RCA) and defect identification for production issues, coordinating fixes and managing code deploymentsMaintain the health of AD-related infrastructure and services, including replication, domain controllers, and security policiesManage Group Policy Objects (GPOs) and troubleshoot policy conflicts, permissions issues, and security configurationsMonitor and respond to AD security incidents, escalating when necessary and working to mitigate risks proactivelyAutomate routine tasks using PowerShell, VBScript, or other scripting technologies to improve operational efficiencyPerform installation, configuration, and lifecycle management of Active Directory and related systemsWork collaboratively with global IT teams, including application support teams, network engineers, and security teams, to ensure AD services are optimized and aligned with business needsSupport Active Directory operations in DMZ environments, ensuring secure authentication across firewalled networksImplement and follow ITIL best practices, ensuring change management and incident response align with industry standardsDocument AD infrastructure, policies, configurations, and troubleshooting procedures to support knowledge sharing and operational efficiencyManage and oversee onshore and offshore contractors, delegating tasks to improve team efficiencyInfrastructure Monitoring including Alert and Capacity

Required Qualifications:

5+ years of hands-on experience supporting Active Directory authentication services in large-scale enterprise environmentsExpertise in multi-domain and multi-forest AD environments, including cross-domain authentication and trust relationshipsProficiency in AD troubleshooting tools such as DCDiag, Netdiag, Repadmin, and DFRSdiagStrong understanding of Group Policy Object (GPO) management, including troubleshooting GPO-related issuesExperience working with Windows Server 2012, 2016, and later versionsHands-on experience with PowerShell and/or VB scripting to automate administrative tasks and resolve complex issuesExperience with AD Domain Name System (ADDNS), Dynamic Host Configuration Protocol (DHCP), and Distributed File System (DFS)Knowledge of enterprise storage, network infrastructure, and virtualization technologies (SCVMM/Hyper-V, VMware)Strong understanding of security best practices, including Kerberos authentication, NTLM, AD Federation Services (ADFS), and multi-factor authentication (MFA)Experience working with SQL databases in relation to AD-integrated applicationsFamiliarity with ITIL processes, including incident, change, and problem management

Desired Qualifications:

Experience supporting HP/Dell server platforms in an enterprise environmentMicrosoft System Center Configuration Manager (SCCM) experienceExperience using Splunk for log analysis and security event monitoringFamiliarity with Active Directory Certificate Services (ADCS) and Public Key Infrastructure (PKI)Experience working in hybrid AD environments with Azure Active Directory (Azure AD) and cloud-based authentication services

​Skills:

Analytical ThinkingApplication DevelopmentAutomationProduction SupportResult OrientationAdaptabilityCollaborationDevOps PracticesSolution Delivery ProcessTechnical Strategy DevelopmentInfluenceInnovative ThinkingRisk ManagementSolution DesignStakeholder Management

Shift:

1st shift (United States of America)

Hours Per Week: 

40