Lead Information Security Engineer

Wells Fargo•Columbus, OH

5d•$119,000 - $187,000•Hybrid

About The Position

Wells Fargo is seeking a Lead Information Security Engineer for our IAM/PAM Engineering Organization. In this role, you will design, implement, and support CyberArk solutions including Enterprise Password Vault (EPV), Privileged Session Manager (PSM), Privileged Session Manager for SSH (PSMP), Central Policy Manager (CPM), Credential Providers, and Central Credential Provider (CCP). You will onboard and manage privileged accounts, service accounts, application credentials, SSH keys, and non-human identities across Windows, Linux, database, cloud, and enterprise platforms. You will engineer and maintain privileged access controls including password rotation, credential reconciliation, session isolation, session recording, and just-in-time access capabilities. You will develop and support integrations between CyberArk and enterprise platforms including Active Directory, Entra ID, SailPoint, ServiceNow, cloud providers, virtualization platforms, and custom applications. You will automate account onboarding, credential management, compliance reporting, and operational processes using CyberArk APIs, PowerShell, and infrastructure automation tools. You will troubleshoot and resolve complex CyberArk infrastructure, authentication, connectivity, and application integration issues across production environments. You will support CyberArk platform upgrades, patching, high availability, disaster recovery, performance tuning, capacity planning, and platform lifecycle management. You will partner with application, infrastructure, cloud, and security teams to design and implement privileged access solutions that align with enterprise security requirements and regulatory standards. You will evaluate new CyberArk capabilities, PAM technologies, and architectural designs to improve security posture, scalability, and operational efficiency. You will serve as a CyberArk subject matter expert providing technical leadership, operational guidance, documentation, and mentoring to engineering and support.

Requirements

5+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
3+ years of experience in CyberArk

Nice To Haves

5+ years of credential management expertise and advanced management of credential management systems.
5+ years of Windows OS administration experience
2+ years of experience with automating workflows (Powershell, VBScript, Shell, etc)
Ability to manage complex issues and develop solutions
Excellent verbal and written communication skills

Responsibilities

Design, implement, and support CyberArk solutions including Enterprise Password Vault (EPV), Privileged Session Manager (PSM), Privileged Session Manager for SSH (PSMP), Central Policy Manager (CPM), Credential Providers, and Central Credential Provider (CCP).
Onboard and manage privileged accounts, service accounts, application credentials, SSH keys, and non-human identities across Windows, Linux, database, cloud, and enterprise platforms.
Engineer and maintain privileged access controls including password rotation, credential reconciliation, session isolation, session recording, and just-in-time access capabilities.
Develop and support integrations between CyberArk and enterprise platforms including Active Directory, Entra ID, SailPoint, ServiceNow, cloud providers, virtualization platforms, and custom applications.
Automate account onboarding, credential management, compliance reporting, and operational processes using CyberArk APIs, PowerShell, and infrastructure automation tools.
Troubleshoot and resolve complex CyberArk infrastructure, authentication, connectivity, and application integration issues across production environments.
Support CyberArk platform upgrades, patching, high availability, disaster recovery, performance tuning, capacity planning, and platform lifecycle management.
Partner with application, infrastructure, cloud, and security teams to design and implement privileged access solutions that align with enterprise security requirements and regulatory standards.
Evaluate new CyberArk capabilities, PAM technologies, and architectural designs to improve security posture, scalability, and operational efficiency.
Serve as a CyberArk subject matter expert providing technical leadership, operational guidance, documentation, and mentoring to engineering and support.