Hybrid Senior Cloud Security Engineering Manager

at Bank of America

• Job title: Senior Cloud Security Engineering Manager
• Job type: Full Time
• Experience level: Senior
• Salary: $135,900 - $220,000 per year
• Degree requirement: Bachelor's Degree
• Tech skills: AWS, Azure, Cloud, Google Cloud Platform
• Location requirements: Hybrid, Denver, United States

About the role

• Senior Cloud Security Engineering Manager leading cloud security strategy and compliance for multi-cloud environments at Bank of America. Drive architectural refactoring and security best practices, mentoring a high-performing team.

Responsibilities

• Define and execute the enterprise cloud security strategy, aligning with business objectives and regulatory mandates.
• Lead security architecture modernization, including refactoring legacy systems for resilience and compliance.
• Champion cloud security best practices and integrate advanced security solutions across AWS, Azure, and GCP.
• Architect and oversee multi-cloud security deployments using Infrastructure-as-Code (IaC) and Policy-as-Code (PaC).
• Implement and optimize Cloud Security Posture Management (CSPM), CNAPP platforms (e.g., Wiz), and other advanced security tools.
• Design and enforce secure CI/CD pipelines, automated testing, and deployment practices.
• Establish security governance models, including identity and access management, workload protection, and compliance monitoring.
• Ensure alignment with CIS, NIST, ISO 27001, and other regulatory frameworks.
• Partner with internal and external stakeholders to manage security incidents, threat intelligence, and risk mitigation strategies.
• Build and mentor a high-performing cloud security engineering team.
• Foster a culture of innovation, accountability, and continuous improvement.

Requirements

• 10+ years in cloud security engineering, with 5+ years in leadership roles within large-scale enterprises.
• Proven experience in multi-cloud security architecture (AWS, Azure, GCP) and cloud-native security services.
• Expertise in architectural refactoring, workload migration, and security governance models.
• Strong knowledge of CSPM, SSPM, CIEM, CWPP solutions and CNAPP platforms (e.g., Wiz).
• Familiarity with Cloud Security Alliance, CIS benchmarks, and SANS standards.

Benefits

• Employees are eligible for an annual discretionary award based on their overall individual performance results and behaviors, the performance and contributions of their line of business and/or group; and the overall success of the Company.
• We provide industry-leading benefits, access to paid time off, resources and support to our employees so they can make a genuine impact and contribute to the sustainable growth of our business and the communities we serve.