Principal Engineer - Agentic Identity Security

Wells Fargo•Columbus, OH

2d•$159,000 - $254,000

About The Position

Wells Fargo is seeking a Principal Engineer in Cybersecurity within Identity and Access Management Engineering. This senior technical leader will define enterprise architecture and security strategy for agentic identity, including AI agents, autonomous systems, machine identities, workload identities, and other non-human access models. The role establishes standards, reference architectures, security patterns, and governance controls that enable responsible AI innovation while supporting security, accountability, auditability, and regulatory compliance. The Principal Engineer partners across Identity and Access Management, Cybersecurity, Infrastructure, Product, Engineering, Data, AI Governance, Risk, Compliance, and Enterprise Architecture to deliver secure, scalable identity controls for AI agents and emerging autonomous technologies. The role advises leadership, resolves complex enterprise-wide technical challenges, translates business and technology strategy into engineering solutions, and recommends innovations based on industry practices and emerging technologies. The position also defines authentication, authorization, delegation, lifecycle, observability, and auditability models; architects integrations across identity, cloud, directory, workload identity, and cybersecurity platforms; and ensures solutions meet internal control, audit, risk, regulatory, privacy, and compliance requirements. The role uses approved AI-assisted development and analysis tools responsibly, applying technical judgment to validate AI-generated outputs and account for model limitations, security risks, and operational considerations. The position is based at one of the listed required locations: Charlotte, North Carolina; Irving, Texas; or Columbus, Ohio. Relocation assistance is not available, and the position is not eligible for visa sponsorship. The role may be considered for a discretionary bonus, Restricted Share Rights, or other long-term incentive awards.

Requirements

At least 7 years of engineering experience, or equivalent demonstrated through work experience, training, military experience, or education.
At least 7 years of experience in Identity and Access Management, cybersecurity, software engineering, or enterprise architecture.
At least 5 years of experience designing enterprise identity architecture and identity-centric security solutions.

Nice To Haves

Experience defining enterprise architecture and security strategies for agentic AI, autonomous systems, machine identities, workload identities, or other non-human identities.
Experience securing AI agents, large language model integrations, agent orchestration frameworks, and autonomous platforms.
Experience designing authentication, authorization, delegated access, identity lifecycle management, observability, and accountability controls for AI agents.
Experience developing enterprise reference architectures, design standards, reusable security patterns, solution blueprints, and technical guardrails.
Deep understanding of Zero Trust architecture, identity-centric security models, least privilege, short-lived credentials, and policy-based authorization.
Experience designing enterprise-scale Identity Governance and Administration, Privileged Access Management, workload identity, and non-human identity solutions.
Experience with Microsoft Entra ID, Azure, Amazon Web Services, Google Cloud Platform, CyberArk, Saviynt, or similar enterprise identity and cloud platforms.
Strong knowledge of OAuth, OpenID Connect, SAML, SPIFFE/SPIRE, certificates, Public Key Infrastructure, API security, secrets management, and policy-based authorization.
Experience establishing governance controls for agent registration, ownership, delegated authority, monitoring, lifecycle management, and decommissioning.
Experience integrating identity platforms with cloud, container, API, automation, data, and AI ecosystems.
Experience establishing security controls that support auditability, traceability, and accountability for AI-driven actions.
Experience evaluating emerging technologies, platforms, frameworks, and vendor solutions related to AI security and identity.
Experience influencing engineering roadmaps, modernization initiatives, and enterprise-wide architecture decisions.
Experience leading large-scale identity modernization, platform transformation, or emerging technology initiatives.
Experience partnering with engineering, product, cybersecurity, infrastructure, data, AI governance, risk, compliance, and architecture teams.
Experience designing solutions for financial services or other highly regulated environments.
Ability to communicate complex identity and AI security concepts to engineers, executives, auditors, risk partners, and regulators.
Exceptional architecture, solution design, and technical documentation skills.
Proven ability to influence technical strategy and drive consensus across diverse stakeholder groups.
Relevant identity, cloud, architecture, or security certifications such as CISSP, CCSP, SABSA, TOGAF, or equivalent credentials.

Responsibilities

Advise leadership on applications, network, information security, database, operating systems, and web technologies for complex business and technical needs.
Lead strategy and resolution of complex, enterprise-wide technical challenges, delivering long-term and large-scale solutions.
Translate technology experience, business objectives, enterprise technology context, and strategic opportunities into technical engineering solutions.
Provide vision and expertise to leadership on implementing innovative business solutions.
Maintain knowledge of industry best practices and emerging technologies and recommend innovations.
Engage with professionals and managers across the enterprise and serve as an expert advisor to leadership.
Define enterprise architecture and security strategy for AI agents, autonomous systems, machine identities, workload identities, and other non-human identities.
Establish reference architectures, engineering standards, reusable security patterns, solution blueprints, and guardrails for agentic identity initiatives.
Design authentication, authorization, delegation, lifecycle management, observability, accountability, and auditability models for AI agents.
Develop security patterns for agent registration, ownership, agent-to-agent communication, delegated access, capability-based authorization, and decommissioning.
Define identity-centric security controls that support Zero Trust and reduce reliance on standing privileges and long-lived credentials.
Architect integrations across Identity Governance and Administration, Privileged Access Management, cloud, directory, workload identity, and cybersecurity platforms.
Partner with product managers and engineering teams to turn strategic objectives into practical, scalable, secure identity solutions.
Evaluate emerging platforms, frameworks, and vendor capabilities related to agentic identity, AI security, and non-human identity governance.
Ensure architecture and engineering solutions meet internal control, audit, risk, regulatory, privacy, and compliance requirements.
Use AI-assisted development and analysis tools, such as GitHub Copilot and approved code-centric agents.
Leverage AI to accelerate system design, coding, testing, analysis, and troubleshooting, and validate AI-assisted outputs with sound technical judgment.
Account for model limitations, security risks, and operational considerations, and apply AI responsibly in development and production.
Ensure AI usage aligns with security, compliance, privacy, and ethical standards.