THE OPPORTUNITYThe Infrastructure Security Administrator analyzes, designs, configures, secures, and improves Banc of California's server and infrastructure platforms to support reliable, efficient, and resilient operations. The role applies advanced technical knowledge and sound judgment to evaluate complex infrastructure and security issues, determine appropriate solutions, and make risk-based decisions with limited direction across on-premises and cloud-connected environments. The position has primary responsibility for assigned vulnerability management and infrastructure initiatives, including defining technical requirements, evaluating alternatives, implementing and testing system modifications, and validating results. The role partners with Information Security, Infrastructure, application owners, and service providers to assess technology risk, establish remediation priorities, resolve complex issues, and maintain clear evidence for audit and governance activities. Performs all duties in accordance with the Company's policies and procedures, all U.S. state and federal laws and regulations, wherein the Company operates.
HOW YOU'LL MAKE A DIFFERENCE- Independently analyze, design, configure, administer, monitor, and troubleshoot Windows Server, virtualization, directory services, and related infrastructure platforms; determine appropriate technical solutions for complex or non-routine issues.
- Exercise independent ownership of assigned vulnerability remediation from identification through closure, including analyzing affected assets, assessing technical and business risk, selecting an appropriate remediation approach, implementing or directing corrective action, retesting, and approving closure evidence.
- Analyze vulnerability scan results, threat intelligence, and security advisories; independently prioritize remediation by weighing severity, exploitability, asset criticality, business impact, exposure, operational constraints, and available compensating controls.
- Plan and coordinate operating system, application, firmware, and infrastructure changes through established change-management and maintenance-window processes; evaluate implementation options, dependencies, and risks and recommend or determine the appropriate course of action.
- Partner with Information Security and system owners to investigate exceptions, false positives, unsupported systems, and remediation blockers; assess alternatives and recommend risk acceptance, compensating controls, remediation, or escalation based on independent technical judgment.
- Maintain accurate remediation records, dashboards, and status reporting, including aging, ownership, due dates, exceptions, and closure evidence.
- Design and execute testing and validation plans for patches, configuration changes, and system modifications; interpret results and determine whether changes meet security, availability, performance, and business requirements or require rollback or additional remediation.
- Develop, implement, and maintain secure configuration baselines, hardening standards, least-privilege access, logging, monitoring, and other preventive controls; adapt standards to system requirements and document the rationale for material deviations.
- Design, develop, test, document, and maintain scripts and automation that improve system administration, inventory accuracy, patch deployment, compliance validation, and other repeatable operational processes.
- Monitor infrastructure health, capacity, availability, backup status, and security events; respond to alerts and escalate material risks or service impacts.
- Create and maintain current system documentation, support procedures, recovery instructions, asset records, and technical diagrams.
- Lead or independently perform technical analysis during incident response, root-cause analysis, disaster recovery testing, audit support, and control-evidence collection; identify corrective actions and recommend improvements to reduce recurrence and risk.
- Work with vendors, consultants, and internal teams to resolve technical issues, manage lifecycle requirements, and reduce operational and security risk.
- Provide after-hours support and participate in an on-call rotation or scheduled maintenance activities as required.
- Follow all established policies and procedures.
- Perform other duties and projects as assigned.
WHAT YOU'LL BRING- Four or more years of experience in systems administration, infrastructure operations, or a comparable technical role.
- High School diploma or equivalent required.
- Associate's degree or higher preferred.
- Relevant Microsoft, VMware, Azure, security, or infrastructure certifications preferred.
- Working knowledge of TCP/IP, DNS, DHCP, authentication, certificates, storage, backup, and network security concepts.
- Familiarity with CVE and CVSS concepts, vendor security advisories, threat intelligence, secure configuration benchmarks, and risk-based remediation practices preferred.
- Hands-on administration of supported Microsoft Windows Server platforms, Active Directory, Rapid7 or comparable vulnerability platforms, SCCM, etc.
- Experience with enterprise patching, vulnerability scanning, remediation tracking, and configuration management.
- Experience supporting VMware or comparable virtualization technologies and enterprise monitoring platforms.
- Experience using PowerShell or another scripting language to automate administrative and reporting tasks.
- Experience with vulnerability management platforms such as Rapid7 InsightVM, Tenable Nessus, Qualys VMDR, or Microsoft Defender Vulnerability Management preferred.
- Experience with Microsoft Azure, Microsoft 365, endpoint or server management platforms, and hybrid infrastructure preferred.
- Familiarity with ServiceNow or a comparable IT service management platform, including incident, change, problem, and work-item tracking, preferred.
- Demonstrated ability to independently analyze complex technical and security issues, evaluate alternatives and tradeoffs, make risk-based decisions, and complete significant assignments with limited supervision.
- Strong documentation, communication, collaboration, and customer-service skills.
- Demonstrates ownership, discretion, and sound independent judgment, including setting technical priorities, assessing risk, resolving non-routine issues, and selecting appropriate courses of action.
- Communicates technical risk and remediation status clearly to technical and non-technical stakeholders.
- Works effectively across Infrastructure, Information Security, application, audit, risk, and vendor teams.
- Adapts quickly to new technologies, evolving threats, and changing business priorities.
- Maintains confidentiality and handles sensitive information in accordance with Bank policies and standards.
HOW WE'LL SUPPORT YOU- Financial Security: You will be eligible to participate in the company's 401k plan which includes a company match and immediate vesting.
- Health & Well-Being: We offer comprehensive insurance options including medical, dental, vision, AD&D, supplemental life, long-term disability, pre-tax Health Savings Account with employer contributions, and pre-tax Flexible Spending Account (FSA).
- Building & Supporting Your Family: Banc of California partners with providers that offer adoption, surrogacy, and fertility assistance as well as paid parental leave and family support solutions including care options for your family.
- Paid Time Away: Eligible team members receive paid vacation days, holidays, and volunteer time off.
- Career Growth Opportunities: To support career growth of our team members, we offer tuition reimbursement, an annual mentorship program, leadership development resources, access to LinkedIn Learning, and more.
SALARY RANGEThe base salary ultimately offered is determined through a review of education, industry experience, training, knowledge, skills, abilities of the applicant in alignment with market data and other factors.
