Cyber Security Technology (CST) Operations End of Life (EOL) Management

About This Role

This role will identify, manage, and remediate End of Life (EOL) technologies across development and production environments for Bank of America's CST Operations team. The position is critical for reducing operational and security risk within the technology estate by coordinating remediation pathways and driving sustainable lifecycle management practices.

Responsibilities

• Lead identification, assessment, and tracking of EOL/EoS (End of Life / End of Support) operating systems, middleware, databases, and software components across CST supported environments
• Partner with application and engineering teams to develop remediation plans, migration strategies, and risk reduction roadmaps
• Perform deep dive analysis of affected systems to determine business impact, technical dependencies, and remediation feasibility
• Support infrastructure planning and environment design to minimize future EOL exposure
• Conduct research and implement engineering solutions to replace, upgrade, or mitigate EOL technologies
• Collect technical information to evaluate existing or proposed systems and recommend lifecycle aligned alternatives
• Troubleshoot complex issues related to infrastructure, system performance, and integration points during remediation activities
• Apply strong knowledge of network, platform, and security fundamentals to ensure compliant end state solutions
• Work within an Agile operational model to deliver engineering and risk remediation tasks efficiently
• Manage multiple concurrent remediation initiatives with attention to detail and accurate risk reporting

Requirements

• 5-7+ years of experience supporting infrastructure in a large enterprise environment
• Strong background in handling Linux/Windows Systems, including troubleshooting and root cause analysis
• Demonstrated experience working with production engineering/operations teams
• Ability to identify and analyze EOL components across Linux, middleware, databases, and commercial/custom applications
• Familiarity with MS SQL and Oracle, including ability to run basic queries
• Strong understanding of Change and Incident Management processes
• Experience working within Agile teams and development support environments
• Proven ability to manage multiple competing projects and drive them to closure
• Highly detail oriented with strong analytical and documentation skills
• Ability to work independently and quickly learn new technologies
• Experience using monitoring tools to diagnose system behavior
• Excellent written and verbal communication skills with a strong collaboration mindset
• Strong written & verbal skills combined with a passion for collaboration and teamwork

Qualifications

• 5-7+ years of experience supporting infrastructure in a large enterprise environment

Nice to Have

• Experience with container platforms such as OpenShift or Docker
• Understanding of Windows Server and IIS based web applications
• Scripting and automation skills (Python, PowerShell, Perl, VBScript) within a DevOps environment
• Experience with server and application patching processes
• Understanding of networking protocols (HTTP, HTTPS, TCP, SMTP, SNMP, DNS)
• Hands on experience with CI/CD and collaboration tools such as Jenkins, Ansible, Git, Subversion, JIRA, Confluence
• Familiarity with encryption technologies (HSM, OpenSSL)
• Worked with teams handling highly available applications
• Experience with centralized logging platforms such as Splunk
• Strong working knowledge of Continuous Monitoring and Vulnerability Management practices
• Experience developing or reviewing Enhanced Remediation Programs (ERPs) to support Exception Management processes
• Proven ability to assess, document, and validate risk compensating and mitigating controls in alignment with the GT Risk Framework
• Demonstrated experience partnering with vendors to drive timely remediation of identified vulnerabilities
• Experience collaborating with application managers to ensure vulnerabilities are remediated within established SLAs
• Provide escalation support to accountable teams, ensuring high risk vulnerabilities are prioritized and remediated within published SLAs
• Working knowledge of GIS Dashboard early warning reports and the ability to interpret and act on key insights
• Familiarity with Key Risk Review (KRR) routines, with the ability to drive continuous improvement and maintain green metrics

Skills

* Required skills