Lead Information Security Engineer - Data at Rest Encryption Infrastructure Engineering and Delivery, Wells Fargo

Wells Fargo

Location:
United States, SUMMIT ▼
CHANDLER
CHARLOTTE
COLUMBUS
IRVING

Category:
IT - Software Development

Contract Type:
Employment contract

Salary:

111100.00 - 237100.00 USD / Year

Save Job

Job offer has expired

Job Description:

Wells Fargo is seeking a motivated Lead Information Security Engineer to join an exciting, fast paced team working on cutting edge encryption, tokenization and key management technologies that are leveraged to protect information companywide. This role will provide technical leadership, and be an individual contributor, to teams that design, deploy, and operationally maintain cryptographic products and services including Hardware Security Modules (HSMs) and security appliances.

Job Responsibility:

Drive design, deployment and automation strategies for encryption, tokenization and key management products and services including Hardware Security Modules, security appliances and security applications deploying in physical, virtual, and containerized environments
Provide technical guidance and oversight to teams and team members responsible for product delivery and operational maintenance
Develop and maintain documentation including design and build guides, deployment strategies, automation guides and operational processes
Participate in research, analysis and evaluation of new cryptographic products and services
Participate in Proof of Concept (POC) testing and demonstrations for new cryptographic products and services
Support company driven audits, gather evidence of compliance to company policies, and drive product enhancements, when needed, to remediate findings
Conduct technical investigation of incidents to identify causes and recommend future mitigation strategies
Collaborate across Wells Fargo teams, including compliance, security architecture and security evaluation teams to ensure cryptographic products are compliant to company policies
Work with vendors to understand the technology vendor's roadmap, help to influence that roadmap, and ensure requests for technology/product enhancements are meeting the needs of Wells Fargo
Work with partner engineering teams on identification and remediation of security vulnerabilities and may also conduct risk assessments of infrastructure to ensure compliance with corporate security policies and adherence to best practices
Support incident response, root cause analysis and corrective action activities
Oversee team of engineers and influence design/architecture decisions regarding encryption infrastructure to support our line of business customers
Ensure design decisions consider blast radius and business resiliency requirements to reduce / eliminate impact during service changes or DDOS type events, among others

Requirements:

5+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
4+ years of intermediate to advanced level experience with scripting/automation using tools such as: Bash, PowerShell, Python, Ansible, VBScript, or JavaScript, UI path, etc
4+ years of Linux and Windows server experience
3+ years of experience with encryption or tokenization and key management technologies
3+ years of experience performing builds, administration and/or support of hardware security modules or security appliance devices
3+ years of Advanced Knowledge of Cryptographic protocols & algorithms
3+ Years of Understanding of (format preserving encryption) FPE, tokenization and TDE (transparent data encryption) etc
3+ years of Subject Matter Expert experience designing solutions for Data at Rest encryption using Thales Vormetric DSM and CipherTrust Manager appliances

Nice to have:

Experience with DevOps and CI/CD automated build and deployment processes
Advanced scripting skills specifically around log rotation, data collection, error collection and alerting
Experience designing, developing, and implementing synthetic transactions for the monitoring of applications and/or infrastructure
Experience with Puppet/Chef/Ansible or similar automation tools
Experience with Agile Scrum or Kanban methodologies
Public cloud engineering or support experience
Application development experience
Experience with application support in Linux and Windows server environments
Experience performing technical product assessments, including development of implementation plans, in a large enterprise
Experience mentoring/guiding less experienced staff
Strong analytical skills with high attention to detail and accuracy
Advanced critical thinking, problem solving and technical troubleshooting abilities
Security certifications such as CISSP, GIAC or equivalent
Cloud certifications such as AZ-900, MS-900 or equivalent/higher
Knowledge and understanding of implementing infrastructure upgrades, security patches, or version upgrades
Knowledge and understanding of Splunk
Knowledge and understanding of banking or the financial services industry
Experience with and the ability to thrive in a complex and fast-paced technology and/or information security organization, within a large enterprise environment
Strong verbal, written, and interpersonal communication skills
Knowledge and understanding of implementing infrastructure upgrades, security patches, version upgrades for systems, appliances and HSM’s
Proven experience with change and incident management practices in medium to large enterprise environments
Experience with Hardware Security Modules, such as Thales, Entrust, Futurex or Fortanix

What we offer:

Health benefits
401(k) Plan
Paid time off
Disability benefits
Life insurance, critical illness insurance, and accident insurance
Parental leave
Critical caregiving leave
Discounts and savings
Commuter benefits
Tuition reimbursement
Scholarships for dependent children
Adoption reimbursement

Additional Information:

Job Posted:
June 19, 2025

Expiration:
June 19, 2025

Employment Type:

Fulltime

Work Type:

Hybrid work

View All Jobs In This Company

Job Link Share:

Lead Information Security Engineer - Data at Rest Encryption Infrastructure Engineering and Delivery