Senior Configuration Management Engineer

Since 1973, East West Bank has served as a pathway to success. With over 110 locations across the U.S. and Asia, we are the premier financial bridge between the East and West. Our teams of experienced, multi-cultural professionals help guide businesses and community members on both sides of the Pacific looking to explore new markets and create new opportunities, and our sustained growth and expertise in industries like real estate, entertainment and media, private equity and venture capital, and high-tech help build sustainable businesses and expand our associates’ potential for career advancement. 

Headquartered in California, East West Bank (Nasdaq: EWBC) is a top-performing commercial bank with a strong foundation, an enterprising spirit and a commitment to absolute integrity. East West Bank gives people the confidence to reach further.

We are seeking a Senior Configuration Management Engineer (SCME) to help with developing, implementing and maintaining configuration management processes to ensure integrity, consistency, and traceability of East West Bank’s software and systems.  The role will help build out a change detection system to maintain and comply with current configuration controls crossing other end point tools or software.  The position also ensures compliance with industry standards, coordinating with other teams to maintain controls through out the end point’s life cycle (EOL, EOS, CIS, Vulnerabilities, etc). 

• Establish, track and control baselines for IT assets including systems, configurations, identities and databases according to security standards and regulatory requirements.
• Clearly define and document the functional and physical attributes of a product or system (e.g. asset EOL, EOS, Vulnerabilities, OS version, etc.). 
• Create and maintain configuration management documentation, including plans, procedures, and reports
• Implement and enforce a change management process, ensuring that only authorized modifications are made, which reduces the risk of vulnerabilities and security breaches by verifying changes are requested, evaluated, approved, implemented, tested, and documented. 
• Ensure computing hardware and software, runtime environments, and their data are monitored to find potentially adverse events.
• Ensure Quality Control and Assurance procedures are consistent with Infrastructure specifications, client requirements and corporate policies.
• Support implementation and management of security policies, alerts, reports, and audits.
• Manage and control data governance, classification, discovery, and protection.
• Work with various stakeholders, including engineers, project managers, and other team members, to ensure that configuration management processes are followed and aligned with security goals. 
• Identify and resolve configuration-related issues. 

• Bachelor’s degree in Information Technology, Computer Science, Engineering, Math or related technical field.
• 5+ years of work experience utilizing Change Detection (Evolven or Netwrix) and Configuration Management tool (SolarWinds, Ansible).
• Experience with automation, scripting, and orchestration (Ansible, Python, PowerShell, Terraform, etc.).
• Knowledge of ITSM systems (ServiceNow, Jira Asset Management), CMDBs, Databases and related platforms.
• Experience with end-point management tools like (Intune, SolarWinds, Lansweeper, Nexpose). Familiar with security best practices, regulatory requirements, and industry frameworks (NIST, ISO, CIS, etc.,).
• Strong understanding of configuration management principles, processes, and best practices.
• Knowledge of cybersecurity concepts and methods including, but not limited to secure configuration management, data protection, security monitoring, incident response, patch management, governance, enterprise security strategies and architecture
• Excellent communication, collaboration, and problem-solving skills.
• Ability to work independently and as part of a team.
• Knowledge of relevant industry standards and regulations.
• Familiarity with product development lifecycles.