Lead Infrastructure as Code (HashiCorp & Infrastructure Tooling)

Wells Fargo & Company•Irving, TX

3d•Hybrid

About The Position

The Lead Infrastructure Engineer will be part of a team that engineers and manages data protection technologies, including HashiCorp Terraform, Packer, and Vault. The role requires intermediate to advanced systems engineering experience in medium- to large-scale enterprise environments, extensive Linux server experience (Red Hat preferred), strong scripting and automation capabilities, and the ability to produce technical documentation and communicate effectively with technical and non-technical partners. The engineer independently supports HashiCorp platforms with minimal oversight, establishes Terraform and Packer standards, and develops solutions for complex technical challenges involving cloud-native and multi-cloud integrations, Kubernetes authentication, PKI, replication, and performance. The role also coordinates with vendors and internal stakeholders to ensure solutions meet Wells Fargo's objectives and security requirements, and provides rotational on-call support. This position is hybrid and requires working from one of the posted locations. Visa sponsorship and relocation allowance are not available. The posting end date is November 14, 2026, though the posting may be removed earlier due to applicant volume.

Requirements

At least 5 years of Technology Infrastructure Engineering and Solutions experience, or equivalent demonstrated through work experience, training, military experience, education, or a combination of these.
At least 3 years of hands-on Terraform and Packer pipeline development experience, with a track record in enterprise-grade automation.
At least 3 years of hands-on Ansible, CI/CD pipeline, and GitHub experience, with a strong understanding of modern provisioning and configuration automation pipelines.
Intermediate to advanced systems engineering experience in medium- to large-scale enterprise environments.
Extensive experience with Linux server operating systems; Red Hat is preferred.
Extensive experience with scripting and automation practices using Python and Terraform.
Ability to create technical and engineering documentation and communicate effectively in writing and verbally.

Nice To Haves

Understanding of Linux system administration for installing, configuring, securing, and troubleshooting Vault clusters.
Understanding of the Vault lifecycle, including installation, upgrades, high-availability deployment, scaling, and cluster maintenance.
Experience configuring and maintaining audit logging, monitoring, and metrics using tools such as Splunk, Grafana, and other observability platforms.
Hands-on expertise with Vault Agent, templates, auto-auth, and Vault Proxy integrations.
Hands-on experience with HashiCorp Vault services such as key management, secret management, and certificate management.
Good knowledge of DevOps and SDLC concepts for IaC CI/CD, GitHub, and branching strategies.
Professional HashiCorp Vault Certification (HVCP or equivalent).
Practical experience with Enterprise Change Management, change control processes, and procedural, compliance-driven environments.

Responsibilities

Independently support HashiCorp Terraform, Packer, and Vault platforms with minimal oversight from lead engineers.
Develop and enforce Terraform and Packer platform standards and best practices across the organization using CI/CD pipelines.
Work with HashiCorp platforms on OpenShift Container Platform (OCP).
Analyze and solve complex technical challenges involving cloud-native and multi-cloud integrations, Kubernetes authentication, PKI hierarchies, replication, and performance optimization.
Collaborate with security, platform engineering, application teams, product owners, and vendors to deliver architecturally sound HashiCorp platform solutions.
Independently troubleshoot technical issues, including high-availability failures, unseal workflows, authentication method problems, and secret engine configuration errors.
Identify and implement improvements in automation, performance, reliability, and security hardening.
Provide rotational on-call support according to the team's schedule.
Ensure vendor product engineering aligns with Wells Fargo objectives and security requirements, and coordinate with vendor support teams to resolve issues.
Participate in companywide interactions with technical, engineering, and non-technical partners.
Follow applicable company policies and procedures and fulfill risk, compliance, escalation, and remediation obligations.