Job description

BANC OF CALIFORNIA AND YOUR CAREER Banc of California, Inc. (NYSE: BANC) is a bank holding company with over $34 billion in assets and the parent company of Banc of California. Banc of California is one of the nation’s premier relationship-based business banks, providing banking and treasury management services to small, middle market, and venture backed businesses. As the largest independent bank headquartered in California, the bank offers a broad range of loan and deposit products and services through a network of full-service branches and regional offices, as well as through digital and nationwide capabilities. The bank also provides full-service payment processing solutions to its clients and serves the Community Association Management industry nationwide through its technology forward platform, SmartStreet™. Banc of California is committed to supporting its local communities through the Banc of California Charitable Foundation and by partnering with organizations that promote financial literacy, job training, small business support, affordable housing, and more. At Banc of California, our success is powered by our people and a shared commitment to delivering meaningful results. We foster an environment where entrepreneurial thinking is encouraged, and accountability and operational excellence are expected. Our team members are empowered to take ownership, make informed decisions, and make a meaningful impact as the bank continues to grow and evolve. We are dedicated to supporting your growth and wellbeing through comprehensive benefits, robust development opportunities, and inclusive programs that enable you to perform at your best. Together we win! THE OPPORTUNITY The Infrastructure Security Administrator analyzes, designs, configures, secures, and improves Banc of California’s server and infrastructure platforms to support reliable, efficient, and resilient operations. The role applies advanced technical knowledge and sound judgment to evaluate complex infrastructure and security issues, determine appropriate solutions, and make risk-based decisions with limited direction across on-premises and cloud-connected environments. The position has primary responsibility for assigned vulnerability management and infrastructure initiatives, including defining technical requirements, evaluating alternatives, implementing and testing system modifications, and validating results. The role partners with Information Security, Infrastructure, application owners, and service providers to assess technology risk, establish remediation priorities, resolve complex issues, and maintain clear evidence for audit and governance activities. Performs all duties in accordance with the Company’s policies and procedures, all U.S. state and federal laws and regulations, wherein the Company operates. HOW YOU’LL MAKE A DIFFERENCE • Independently analyze, design, configure, administer, monitor, and troubleshoot Windows Server, virtualization, directory services, and related infrastructure platforms; determine appropriate technical solutions for complex or non-routine issues. • Exercise independent ownership of assigned vulnerability remediation from identification through closure, including analyzing affected assets, assessing technical and business risk, selecting an appropriate remediation approach, implementing or directing corrective action, retesting, and approving closure evidence. • Analyze vulnerability scan results, threat intelligence, and security advisories; independently prioritize remediation by weighing severity, exploitability, asset criticality, business impact, exposure, operational constraints, and available compensating controls. • Plan and coordinate operating system, application, firmware, and infrastructure changes through established change-management and maintenance-window processes; evaluate implementation options, dependencies, and risks and recommend or determine the appropriate course of action. • Partner with Information Security and system owners to investigate exceptions, false positives, unsupported systems, and remediation blockers; assess alternatives and recommend risk acceptance, compensating controls, remediation, or escalation based on independent technical judgment. • Maintain accurate remediation records, dashboards, and status reporting, including aging, ownership, due dates, exceptions, and closure evidence. • Design and execute testing and validation plans for patches, configuration changes, and system modifications; interpret results and determine whether changes meet security, availability, performance, and business requirements or require rollback or additional remediation. • Develop, implement, and maintain secure configuration baselines, hardening standards, least-privilege access, logging, monitoring, and other preventive controls; adapt standards to system requirements and document the rationale for material deviations. • Design, develop, test, document, and maintain scripts and automation that improve system administration, inventory accuracy, patch deployment, compliance validation, and other repeatable operational processes. • Monitor infrastructure health, capacity, availability, backup status, and security events; respond to alerts and escalate material risks or service impacts. • Create and maintain current system documentation, support procedures, recovery instructions, asset records, and technical diagrams. • Lead or independently perform technical analysis during incident response, root-cause analysis, disaster recovery testing, audit support, and control-evidence collection; identify corrective actions and recommend improvements to reduce recurrence and risk. • Work with vendors, consultants, and internal teams to resolve technical issues, manage lifecycle requirements, and reduce operational and security risk. • Provide after-hours support and participate in an on-call rotation or scheduled maintenance activities as required. • Follow all established policies and procedures. • Perform other duties and projects as assigned. WHAT YOU’LL BRING • Four or more years of experience in systems administration, infrastructure operations, or a comparable technical role. • High School diploma or equivalent required. • Associate’s degree or higher preferred. • Relevant Microsoft, VMware, Azure, security, or infrastructure certifications preferred. • Working knowledge of TCP/IP, DNS, DHCP, authentication, certificates, storage, backup, and network security concepts. • Familiarity with CVE and CVSS concepts, vendor security advisories, threat intelligence, secure configuration benchmarks, and risk-based remediation practices preferred. • Hands-on administration of supported Microsoft Windows Server platforms, Active Directory, Rapid7 or comparable vulnerability platforms, SCCM, etc. • Experience with enterprise patching, vulnerability scanning, remediation tracking, and configuration management. • Experience supporting VMware or comparable virtualization technologies and enterprise monitoring platforms. • Experience using PowerShell or another scripting language to automate administrative and reporting tasks. • Experience with vulnerability management platforms such as Rapid7 InsightVM, Tenable Nessus, Qualys VMDR, or Microsoft Defender Vulnerability Management preferred. • Experience with Microsoft Azure, Microsoft 365, endpoint or server management platforms, and hybrid infrastructure preferred. • Familiarity with ServiceNow or a comparable IT service management platform, including incident, change, problem, and work-item tracking, preferred. • Demonstrated ability to independently analyze complex technical and security issues, evaluate alternatives and tradeoffs, make risk-based decisions, and complete significant assignments with limited supervision. • Strong documentation, communication, collaboration, and customer-service skills. • Demonstrates ownership, discretion, and sound independent judgment, including setting technical priorities, assessing risk, resolving non-routine issues, and selecting appropriate courses of action. • Communicates technical risk and remediation status clearly to technical and non-technical stakeholders. • Works effectively across Infrastructure, Information Security, application, audit, risk, and vendor teams. • Adapts quickly to new technologies, evolving threats, and changing business priorities. • Maintains confidentiality and handles sensitive information in accordance with Bank policies and standards. HOW WE’LL SUPPORT YOU • Financial Security: You will be eligible to participate in the company’s 401k plan which includes a company match and immediate vesting. • Health & Well-Being: We offer comprehensive insurance options including medical, dental, vision, AD&D, supplemental life, long-term disability, pre-tax Health Savings Account with employer contributions, and pre-tax Flexible Spending Account (FSA). • Building & Supporting Your Family: Banc of California partners with providers that offer adoption, surrogacy, and fertility assistance as well as paid parental leave and family support solutions including care options for your family. • Paid Time Away: Eligible team members receive paid vacation days, holidays, and volunteer time off. • Career Growth Opportunities: To support career growth of our team members, we offer tuition reimbursement, an annual mentorship program, leadership development resources, access to LinkedIn Learning, and more. SALARY RANGE The base salary ultimately offered is determined through a review of education, industry experience, training, knowledge, skills, abilities of the applicant in alignment with market data and other factors. Banc of California is an equal opportunity employer committed to creating a diverse workforce. All qualified applicants will receive consideration for employment without regard to their actual or perceived race (including traits associated with race, such as hair texture, hair type or protective hairstyles), religion or religious creed (including religious dress and grooming practices), color, sex (including pregnancy, childbirth, breastfeeding and related medical conditions), sexual orientation, gender, gender identity, gender expression, gender transitioning, citizenship status, national origin, ancestry, age, marital status, military or veteran status, medical condition, genetic information, or disability (mental or physical), requests for accommodation and any additional protected categories set forth in applicable federal, state or local laws. If you require reasonable accommodation as part of the application process, please contact Talent Acquisition.

Requirements

Must-haves

Maintain accurate remediation records, dashboards, and status reporting, including aging, ownership, due dates, exceptions, and closure evidence.
Design, develop, test, document, and maintain scripts and automation that improve system administration, inventory accuracy, patch deployment, compliance validation, and other repeatable operational processes.
Monitor infrastructure health, capacity, availability, backup status, and security events; respond to alerts and escalate material risks or service impacts.
Create and maintain current system documentation, support procedures, recovery instructions, asset records, and technical diagrams.
Work with vendors, consultants, and internal teams to resolve technical issues, manage lifecycle requirements, and reduce operational and security risk.
Provide after-hours support and participate in an on-call rotation or scheduled maintenance activities as required.
Follow all established policies and procedures.
Perform other duties and projects as assigned.
Four or more years of experience in systems administration, infrastructure operations, or a comparable technical role.
High School diploma or equivalent required.
Working knowledge of TCP/IP, DNS, DHCP, authentication, certificates, storage, backup, and network security concepts.
Hands-on administration of supported Microsoft Windows Server platforms, Active Directory, Rapid7 or comparable vulnerability platforms, SCCM, etc.
Experience with enterprise patching, vulnerability scanning, remediation tracking, and configuration management.
Experience supporting VMware or comparable virtualization technologies and enterprise monitoring platforms.
Experience using PowerShell or another scripting language to automate administrative and reporting tasks.
Demonstrated ability to independently analyze complex technical and security issues, evaluate alternatives and tradeoffs, make risk-based decisions, and complete significant assignments with limited supervision.
Strong documentation, communication, collaboration, and customer-service skills.
Demonstrates ownership, discretion, and sound independent judgment, including setting technical priorities, assessing risk, resolving non-routine issues, and selecting appropriate courses of action.

Nice-to-haves

Associate’s degree or higher preferred.
Relevant Microsoft, VMware, Azure, security, or infrastructure certifications preferred.
Familiarity with CVE and CVSS concepts, vendor security advisories, threat intelligence, secure configuration benchmarks, and risk-based remediation practices preferred.
Experience with vulnerability management platforms such as Rapid7 InsightVM, Tenable Nessus, Qualys VMDR, or Microsoft Defender Vulnerability Management preferred.
Experience with Microsoft Azure, Microsoft 365, endpoint or server management platforms, and hybrid infrastructure preferred.
Familiarity with ServiceNow or a comparable IT service management platform, including incident, change, problem, and work-item tracking, preferred.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

azure

Platform: ukg
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401k

Parental Leave