Officer, Infrastructure Security Administrator

Banc of California • Los Angeles, CA

11d • $90,000 - $135,000

About The Position

The Infrastructure Security Administrator analyzes, designs, configures, secures, and improves Banc of California’s server and infrastructure platforms to support reliable, efficient, and resilient operations. The role applies advanced technical knowledge and independent judgment to evaluate complex infrastructure and security issues, determine appropriate solutions, and make risk-based decisions with limited direction across on-premises and cloud-connected environments.

The position has primary responsibility for assigned vulnerability management and infrastructure initiatives, including defining technical requirements, evaluating alternatives, implementing and testing system modifications, and validating results. The administrator partners with Information Security, Infrastructure, application owners, and service providers to assess technology risk, establish remediation priorities, resolve complex issues, and maintain evidence for audit and governance activities. All duties must be performed in accordance with company policies and procedures and applicable laws and regulations.

Requirements

• Four or more years of experience in systems administration, infrastructure operations, or a comparable technical role.
• High school diploma or equivalent required.
• Working knowledge of TCP/IP, DNS, DHCP, authentication, certificates, storage, backup, and network security concepts.
• Hands-on administration of supported Microsoft Windows Server platforms, Active Directory, Rapid7 or comparable vulnerability platforms, SCCM, or similar technologies.
• Experience with enterprise patching, vulnerability scanning, remediation tracking, and configuration management.
• Experience supporting VMware or comparable virtualization technologies and enterprise monitoring platforms.
• Experience using PowerShell or another scripting language to automate administrative and reporting tasks.
• Ability to independently analyze complex technical and security issues, evaluate alternatives and tradeoffs, make risk-based decisions, and complete significant assignments with limited supervision.
• Strong documentation, communication, collaboration, and customer-service skills.
• Demonstrated ownership, discretion, and independent judgment, including setting technical priorities, assessing risk, resolving non-routine issues, and selecting appropriate courses of action.
• Ability to communicate technical risk and remediation status clearly to technical and non-technical stakeholders.
• Ability to work effectively across Infrastructure, Information Security, application, audit, risk, and vendor teams.
• Ability to adapt to new technologies, evolving threats, and changing business priorities.
• Ability to maintain confidentiality and handle sensitive information in accordance with Bank policies and standards.

Nice To Haves

• Associate’s degree or higher.
• Relevant Microsoft, VMware, Azure, security, or infrastructure certifications.
• Familiarity with CVE and CVSS concepts, vendor security advisories, threat intelligence, secure configuration benchmarks, and risk-based remediation practices.
• Experience with vulnerability management platforms such as Rapid7 InsightVM, Tenable Nessus, Qualys VMDR, or Microsoft Defender Vulnerability Management.
• Experience with Microsoft Azure, Microsoft 365, endpoint or server management platforms, and hybrid infrastructure.
• Familiarity with ServiceNow or a comparable IT service management platform, including incident, change, problem, and work-item tracking.

Responsibilities

• Analyze, design, configure, administer, monitor, and troubleshoot Windows Server, virtualization, directory services, and related infrastructure platforms, resolving complex or non-routine issues.
• Own assigned vulnerability remediation from identification through closure, including assessing affected assets and risk, selecting and implementing corrective actions, retesting, and approving closure evidence.
• Analyze vulnerability scans, threat intelligence, and security advisories; prioritize remediation based on severity, exploitability, asset criticality, business impact, exposure, operational constraints, and compensating controls.
• Plan and coordinate operating system, application, firmware, and infrastructure changes through change-management and maintenance-window processes; assess options, dependencies, and risks.
• Partner with Information Security and system owners to investigate exceptions, false positives, unsupported systems, and remediation blockers; recommend risk acceptance, compensating controls, remediation, or escalation.
• Maintain remediation records, dashboards, and status reports, including aging, ownership, due dates, exceptions, and closure evidence.
• Design and execute testing and validation plans for patches, configuration changes, and system modifications; determine whether changes meet requirements or need rollback or further remediation.
• Develop and maintain secure configuration baselines, hardening standards, least-privilege access, logging, monitoring, and preventive controls; document material deviations.
• Develop, test, document, and maintain scripts and automation for system administration, inventory, patch deployment, compliance validation, and repeatable operational processes.
• Monitor infrastructure health, capacity, availability, backup status, and security events; respond to alerts and escalate material risks or service impacts.
• Maintain system documentation, support procedures, recovery instructions, asset records, and technical diagrams.
• Lead or perform technical analysis for incident response, root-cause analysis, disaster recovery testing, audit support, and control-evidence collection; identify corrective actions and recommend improvements.
• Work with vendors, consultants, and internal teams to resolve technical issues, manage lifecycle requirements, and reduce operational and security risk.
• Provide after-hours support and participate in an on-call rotation or scheduled maintenance activities as required.
• Follow established policies and procedures and perform other duties and projects as assigned.

Benefits

• 401(k) plan with company match and immediate vesting.
• Medical, dental, vision, AD&D, supplemental life, and long-term disability insurance.
• Health Savings Account with employer contributions and Flexible Spending Account.
• Adoption, surrogacy, and fertility assistance.
• Paid parental leave and family support solutions, including care options.
• Paid vacation days, holidays, and volunteer time off for eligible team members.
• Tuition reimbursement.
• Annual mentorship program and leadership development resources.
• Access to LinkedIn Learning.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: High school or GED