Lead Infrastructure Engineer

Wells Fargo Bank•Mclean, VA

1d•Hybrid

About The Position

Wells Fargo is seeking a Lead Infrastructure Engineer to drive the evolution of our AWS cloud platform by designing, building, and operating scalable, secure, and resilient cloud foundations. In this role, you will provide technical leadership across engineering teams, mentor infrastructure engineers, establish and promote cloud engineering best practices, and influence enterprise cloud strategy. The ideal candidate will possess deep hands-on experience with AWS Landing Zones, Infrastructure as Code (Terraform), cloud governance, event-driven architectures, and modern DevOps/GitOps practices. This role requires strong technical leadership, architectural expertise, and the ability to collaborate across engineering, security, operations, and product teams to deliver innovative, enterprise-grade cloud solutions. In this role, you will: Lead the strategy, architecture, and delivery of highly complex, large-scale AWS cloud solutions, leveraging expertise across distributed systems, networking, security, data platforms, automation, DevOps, and application modernization. Drive long-term technical direction through innovation, strategic thinking, and engineering excellence Translate business objectives and enterprise technology requirements into AWS-based infrastructure solutions, utilizing deep knowledge of AWS services such as Amazon EKS, ECS, EC2, Lambda, API Gateway, EventBridge, SQS, SNS, DynamoDB, RDS, VPC, and AWS Organizations, while ensuring alignment with enterprise cloud governance, security, and modernization initiatives implement enterprise IAM solutions and access control strategies Follow standards for federation, IAM Identity Center, role-based access controls, and privileged access management Lead ongoing evolution of AWS Landing Zones and multi-account operating models Lead and manage governance controls using AWS Organizations, Service Control Policies (SCPs), Control Tower, and policy-based guardrails Partner closely with engineering, security, infrastructure, operations, risk, and product teams, serving as a trusted technical advisor for AWS strategy, architecture reviews, cloud governance, and enterprise transformation initiatives Drive infrastructure automation and standardization through Terraform, CI/CD pipelines, and GitOps methodologies, enabling consistent, repeatable, and secure cloud deployments across the organization.

Requirements

5+ years of Infrastructure Engineering, Cloud Engineering, or related experience, or equivalent demonstrated through work experience, training, military experience, or education
5+ years of hands-on AWS cloud engineering experience designing, implementing, and supporting enterprise-scale cloud platforms
5+ years of experience designing and managing AWS Landing Zones, multi-account strategies, and enterprise governance frameworks using AWS Organizations and Control Tower
3+ years of experience with AWS foundational services, including networking, identity and access management, security, monitoring, logging, and compliance
3+ years of experience partnering with Cloud Operations and Site Reliability Engineering (SRE) teams to provide L3 support, perform root cause analysis, resolve complex AWS infrastructure issues, and implement long-term reliability improvements
3+ years of Terraform experience, including developing reusable modules, implementing Infrastructure as Code standards, managing remote state securely, and automating AWS infrastructure deployments at scale.

Nice To Haves

Strong expertise in AWS cloud platform architecture, including multi-account, multi-region, hybrid cloud, and multi-cloud deployment patterns
Broad technical expertise across networking, compute, storage, security, compliance, identity and access management, encryption, disaster recovery, and observability
Advanced knowledge of GitOps, Infrastructure as Code, Policy as Code, and enterprise configuration management practices
Deep experience with Terraform and GitHub ecosystem tools, including GitHub Actions, repositories, workflows, and CI/CD automation
Hands-on experience with Site Reliability Engineering (SRE) or Cloud Operation principles, including incident management, capacity planning, resiliency engineering, and performance optimization
Strong understanding of AWS Identity and Access Management (IAM), AWS Organizations, Service Control Policies (SCPs), AWS KMS, AWS Secrets Manager, Security Hub, GuardDuty, CloudTrail, Config, and Control Tower
Advanced proficiency in Python, PowerShell, and Terraform, with demonstrated ability to design reusable automation frameworks and cloud engineering platforms
Experience implementing least-privilege access models, privileged access management, segregation of duties, and cloud security best practices
Hands-on experience building event-driven automation solutions using AWS Lambda, EventBridge, SNS, SQS, Step Functions, or similar cloud-native services
Proven ability to mentor engineers, lead large-scale infrastructure initiatives, and influence global cross-functional engineering teams
AWS certifications such as AWS Certified Solutions Architect Professional, AWS Certified DevOps Engineer Professional, or AWS Advanced Networking Specialty are highly preferred.

Responsibilities

Lead the strategy, architecture, and delivery of highly complex, large-scale AWS cloud solutions, leveraging expertise across distributed systems, networking, security, data platforms, automation, DevOps, and application modernization.
Drive long-term technical direction through innovation, strategic thinking, and engineering excellence
Translate business objectives and enterprise technology requirements into AWS-based infrastructure solutions, utilizing deep knowledge of AWS services such as Amazon EKS, ECS, EC2, Lambda, API Gateway, EventBridge, SQS, SNS, DynamoDB, RDS, VPC, and AWS Organizations, while ensuring alignment with enterprise cloud governance, security, and modernization initiatives
Implement enterprise IAM solutions and access control strategies
Follow standards for federation, IAM Identity Center, role-based access controls, and privileged access management
Lead ongoing evolution of AWS Landing Zones and multi-account operating models
Lead and manage governance controls using AWS Organizations, Service Control Policies (SCPs), Control Tower, and policy-based guardrails
Partner closely with engineering, security, infrastructure, operations, risk, and product teams, serving as a trusted technical advisor for AWS strategy, architecture reviews, cloud governance, and enterprise transformation initiatives
Drive infrastructure automation and standardization through Terraform, CI/CD pipelines, and GitOps methodologies, enabling consistent, repeatable, and secure cloud deployments across the organization.