Officer, Infrastructure Security Administrator

Banc of California • Los Angeles, CA

10d

About The Position

The Infrastructure Security Administrator analyzes, designs, configures, secures, and improves Banc of California’s server and infrastructure platforms to support reliable, efficient, and resilient operations. The role applies advanced technical knowledge and independent judgment to complex infrastructure and security issues across on-premises and cloud-connected environments, with limited direction.

The position owns assigned vulnerability management and infrastructure initiatives from technical requirements and solution selection through implementation, testing, validation, remediation tracking, and closure evidence. It works with Information Security, Infrastructure, application owners, service providers, vendors, and other teams to assess technology risk, prioritize remediation, resolve complex issues, and support audit and governance activities. The role also helps maintain secure configuration standards, automation, infrastructure health, system documentation, and incident and disaster recovery readiness. Duties are performed in accordance with company policies and applicable laws and regulations.

Requirements

• Four or more years of experience in systems administration, infrastructure operations, or a comparable technical role.
• High school diploma or equivalent required.
• Working knowledge of TCP/IP, DNS, DHCP, authentication, certificates, storage, backup, and network security concepts.
• Hands-on administration of supported Microsoft Windows Server platforms, Active Directory, Rapid7 or comparable vulnerability platforms, SCCM, or similar tools.
• Experience with enterprise patching, vulnerability scanning, remediation tracking, and configuration management.
• Experience supporting VMware or comparable virtualization technologies and enterprise monitoring platforms.
• Experience using PowerShell or another scripting language to automate administrative and reporting tasks.
• Ability to independently analyze complex technical and security issues, evaluate alternatives and tradeoffs, make risk-based decisions, and complete significant assignments with limited supervision.
• Strong documentation, communication, collaboration, and customer-service skills.
• Ability to exercise ownership, discretion, and sound independent judgment, including setting technical priorities, assessing risk, resolving non-routine issues, and selecting appropriate courses of action.
• Ability to communicate technical risk and remediation status clearly to technical and non-technical stakeholders.
• Ability to work effectively across Infrastructure, Information Security, application, audit, risk, and vendor teams.
• Ability to adapt to new technologies, evolving threats, and changing business priorities.
• Ability to maintain confidentiality and handle sensitive information in accordance with Bank policies and standards.

Nice To Haves

• Associate’s degree or higher.
• Relevant Microsoft, VMware, Azure, security, or infrastructure certifications.
• Familiarity with CVE and CVSS concepts, vendor security advisories, threat intelligence, secure configuration benchmarks, and risk-based remediation practices.
• Experience with vulnerability management platforms such as Rapid7 InsightVM, Tenable Nessus, Qualys VMDR, or Microsoft Defender Vulnerability Management.
• Experience with Microsoft Azure, Microsoft 365, endpoint or server management platforms, and hybrid infrastructure.
• Familiarity with ServiceNow or a comparable IT service management platform, including incident, change, problem, and work-item tracking.

Responsibilities

• Analyze, design, configure, administer, monitor, and troubleshoot Windows Server, virtualization, directory services, and related infrastructure platforms.
• Own assigned vulnerability remediation from identification through closure, including risk assessment, remediation selection, corrective action, retesting, and closure evidence.
• Analyze vulnerability scans, threat intelligence, and security advisories; prioritize remediation based on severity, exploitability, asset criticality, business impact, exposure, operational constraints, and compensating controls.
• Plan and coordinate operating system, application, firmware, and infrastructure changes through change-management and maintenance-window processes.
• Partner with Information Security and system owners to investigate exceptions, false positives, unsupported systems, and remediation blockers; assess alternatives and recommend remediation, compensating controls, risk acceptance, or escalation.
• Maintain remediation records, dashboards, and status reporting, including aging, ownership, due dates, exceptions, and closure evidence.
• Design and execute testing and validation plans for patches, configuration changes, and system modifications; determine whether changes meet security, availability, performance, and business requirements or require rollback or further remediation.
• Develop and maintain secure configuration baselines, hardening standards, least-privilege access, logging, monitoring, and other preventive controls; document material deviations.
• Develop, test, document, and maintain scripts and automation for system administration, inventory, patch deployment, compliance validation, and repeatable operations.
• Monitor infrastructure health, capacity, availability, backup status, and security events; respond to alerts and escalate material risks or service impacts.
• Maintain system documentation, support procedures, recovery instructions, asset records, and technical diagrams.
• Lead or perform technical analysis during incident response, root-cause analysis, disaster recovery testing, audit support, and control-evidence collection; identify corrective actions and recommend improvements.
• Work with vendors, consultants, and internal teams to resolve technical issues, manage lifecycle requirements, and reduce operational and security risk.
• Provide after-hours support and participate in an on-call rotation or scheduled maintenance activities as required.
• Follow established policies and procedures and perform other duties and projects as assigned.

Benefits

• 401(k) plan with company match and immediate vesting.
• Comprehensive insurance options including medical, dental, vision, AD&D, supplemental life, and long-term disability.
• Pre-tax Health Savings Account with employer contributions and pre-tax Flexible Spending Account.
• Adoption, surrogacy, and fertility assistance.
• Paid parental leave and family support solutions, including care options.
• Paid vacation days, holidays, and volunteer time off for eligible team members.
• Tuition reimbursement.
• Annual mentorship program, leadership development resources, and access to LinkedIn Learning.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: High school or GED