Lead Information Security Engineer- Certificate Management Services

Wells Fargo•Minneapolis, MN

1d•Hybrid

About The Position

About this role: Wells Fargo is seeking a Lead Information Security Engineer in Technology as part of the Chief Technology Office (CTO). Learn more about the career areas and lines of business at wellsfargojobs.com. The Lead Information Security Engineer will support the Digital Certificate Management Services team as part of the Technology Infrastructure group. The Certificate Management Services Engagement and Support team provides support to Certification Management Administrators using Venafi's product suite to manage Enterprise level Certificate Management and Issuance. In this role you would be responsible for Designing, Developing and deploying large scale infrastructure solutions related to Digital Certificates Lifecycle management using advanced, innovative and latest technologies in multi-platform hybrid cloud deployments. In this role, you will: Lead computer security incident response activities for highly complex events Conduct technical investigation of security related incidents and post incident digital forensics to identify causes and recommend future mitigation strategies Provide security consulting on large projects for internal clients to ensure conformity with corporate information, security policy, and standards Design, document, test, maintain, and provide issue resolution recommendations for highly complex security solutions related to networking, cryptography, cloud, authentication and directory services, email, internet, applications, and endpoint security Review and correlate security logs Utilize subject matter knowledge in industry leading security solutions and best practices to implement one or more components of information security such as availability, integrity, confidentiality, risk management, threat identification, modeling, monitoring, incident response, access management, and business continuity Identify security vulnerabilities and issues, perform risk assessments, and evaluate remediation alternatives Collaborate and influence all levels of professionals including managers Lead a team to achieve objectives

Requirements

5+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
1+ years of experience providing production support
1+ years of experience using ticket tracking tools for change management, problem and incident management, and availability management

Nice To Haves

5+ years of experience implementing or managing Certificate Lifecycle Management for a variety of certificate use cases (TLS, machine identity, Code Signing, S/MIME, SSH).
5+ years of experience with one or more certificate management tools (Venafi, DigiCert, Microsoft)
1+ years of demonstrated experience developing automation with infrastructure as Code (IaC) tools like Ansible, Terraform, Chef, Puppet etc..
1+ years of experience with Continuous Integration/Continuous Deployment (CI/CD) tools for automation such as Jenkins, Github, Terraform, Harness, etc.
1+ years of experience developing API automation to consume REST API methods to automate client integrations.
1+ years of experience with Cloud platforms, Kubernetes container architecture and deployment services
1+ years of experience with industry standard security controls (NIST) related to digital certificates
1+ years of experience with Agile methodologies Kanban / Scrum and processing workflow using Jira tool.
Self-starter with the ability to manage multiple engineering projects
Cloud vendor certification such as Microsoft Azure or Google Cloud
Intermediate to advanced hands-on experience in scripting, orchestration, and automation languages such as PowerShell / DSC, Python and Ansible to deploy Infrastructure as Code (IaC)
Strong communication and interpersonal skills

Responsibilities

Lead computer security incident response activities for highly complex events
Conduct technical investigation of security related incidents and post incident digital forensics to identify causes and recommend future mitigation strategies
Provide security consulting on large projects for internal clients to ensure conformity with corporate information, security policy, and standards
Design, document, test, maintain, and provide issue resolution recommendations for highly complex security solutions related to networking, cryptography, cloud, authentication and directory services, email, internet, applications, and endpoint security
Review and correlate security logs
Utilize subject matter knowledge in industry leading security solutions and best practices to implement one or more components of information security such as availability, integrity, confidentiality, risk management, threat identification, modeling, monitoring, incident response, access management, and business continuity
Identify security vulnerabilities and issues, perform risk assessments, and evaluate remediation alternatives
Collaborate and influence all levels of professionals including managers
Lead a team to achieve objectives