Site Reliability Engineer (SRE) – II

Huntington National Bank•Easton, OH

7d•Hybrid

About The Position

Description Summary: We are seeking a Digital Site Reliability Engineer (Digital SRE) to strengthen the reliability, security, and operational readiness of in-house and vendor-hosted digital applications. This role focuses on vulnerability reporting and executive-ready dashboards, privileged access management, incident reporting for stakeholders, password rotation governance, business impact analysis (BIA), business continuity (BC) and disaster recovery (DR) exercises, application access reviews, and release governance within Digital platforms.

Requirements

Bachelor's or Master's Degree in Computers or relevant field
3 years of experience in site reliability engineering, DevOps, systems administration, or related roles.
Experience integrating data from vulnerability scanners, CMDB, ticketing systems, or asset inventories into BI tools.
Experience with secret management (e.g., vaulting), service account governance, and automation of credential rotations.
Experience with change/release management in environments with formal approvals and CAB processes.
Scripting/automation skills (e.g., PowerShell, Python) to streamline reporting and evidence collection.

Nice To Haves

5 years of experience in site reliability engineering, DevOps, systems administration, or related roles.
Reporting/BI: Tableau (required); Excel/Power BI
Security/PAM: CyberArk or equivalent
Ability to work independently and multitask within a collaborative work environment
Willingness and aptitude for continuous improvement
Do the right thing attitude while being a strong team player
Strong communication and collaboration skills, focus on customer service

Responsibilities

Vulnerability reporting & analytics (Tableau): Build and maintain Tableau dashboards and reporting packs that communicate vulnerability posture (e.g., backlog, severity mix, SLA adherence, aging, trending) for applications and infrastructure; partner with Security to ensure consistent definitions and data quality.
Privilege Access Management (PAM): Administer and govern privileged access workflows (request, approval, provisioning, certification), enforce least privilege, and support onboarding/offboarding of privileged accounts.
Incident management reporting: Produce stakeholder-ready incident reporting (MTTA/MTTR, incident volumes by service, severity, root cause themes, action item tracking) and facilitate post-incident review documentation and metrics.
Password rotation governance: Coordinate and validate password/secret rotation schedules for application/service accounts; track compliance, exceptions, and risk acceptance; partner with application owners to remove hard-coded secrets where possible.
Business Impact Analysis (BIA): Facilitate BIA activities for in-house applications (criticality, RTO/RPO targets, dependencies, recovery steps) and maintain BIA artifacts and approvals.
Business continuity (BC) exercises: Plan and execute BC tabletop exercises for in-house applications; document scenarios, outcomes, gaps, and remediation plans; communicate results to leadership.
Disaster Recovery (DR) exercises (vendor-based applications): Coordinate DR testing with vendors and internal stakeholders; validate evidence, test results, and recovery objectives; track follow-ups and contractual/operational gaps.
Application access reviews: Run periodic access certifications for critical applications; reconcile access to roles, entitlements, and least-privilege standards; support audit evidence collection and remediation tracking.
Release governance: Support release planning, change controls, and readiness reviews; validate runbooks, monitoring coverage, rollback plans, and stakeholder communications for production releases.
Operational documentation & controls: Maintain runbooks, SOPs, and control evidence for audits; drive standardization across reporting, metrics, and operational processes.
Cross-functional collaboration: Work closely with Digital Engineering, Security, Infrastructure, and vendors to resolve operational risks and continuously improve resilience and compliance.