Senior Information Security Engineer - Cryptographic Products and Services

Wells Fargo•Minneapolis, MN

1d•$100,000 - $179,000•Hybrid

About The Position

Wells Fargo is seeking a Senior Information Security Engineer to join a team working on encryption, tokenization, and key management technologies used to protect company information. This individual-contributor role designs, deploys, and operationally maintains cryptographic products and services, including Hardware Security Modules (HSMs) and security appliances. The role includes work in physical, virtual, and containerized environments and automation of product builds, operational maintenance, customer integration, and onboarding. The engineer will develop service-health capabilities such as synthetic transactions and system monitoring, evaluate new cryptographic products and services, maintain technical and operational documentation, support audits and remediation of findings, and contribute to incident response and root-cause analysis. The role collaborates with professionals at all levels and uses Agile Scrum and Kanban processes to track work and participate in recurring meetings. The position is hybrid, with three days per week onsite/in-office and two days remote. Remote-only work is not available. Locations listed are Irving, Texas; Columbus, Ohio; and Arlington, Virginia. Travel may be up to 10% of the time. This position is not eligible for visa sponsorship.

Requirements

At least 4 years of Information Security Engineering experience, or equivalent demonstrated through work experience, training, military experience, or education.
At least 2 years of intermediate-to-advanced scripting or automation experience using tools such as Bash, PowerShell, Python, Ansible, VBScript, JavaScript, or UiPath.
At least 2 years of experience successfully designing, developing, and deploying automated solutions for technical and engineering processes.
At least 1 year of experience designing solutions using Hardware Security Modules (HSMs) or security appliance devices.
At least 2 years of experience with change and incident management practices in medium-to-large enterprise environments.
Ability to create technical and engineering documentation and strong written and oral communication skills.

Nice To Haves

Experience with DevOps and CI/CD automated build and deployment processes.
Experience with Agile Scrum or Kanban methodologies.
Advanced scripting skills related to log rotation, data collection, error collection, and alerting.
Experience designing, developing, and implementing synthetic transactions to monitor applications or infrastructure.
Experience with Puppet, Chef, Ansible, or similar automation tools.
Knowledge of infrastructure upgrades, security patches, or version upgrades.
Application development experience.
Experience supporting applications in Linux and Windows server environments.
Experience performing technical product assessments, including developing implementation plans, in a large enterprise.
Strong analytical skills and attention to detail and accuracy.
Advanced critical-thinking, problem-solving, and technical troubleshooting abilities.
Security certifications such as CISSP, GIAC, or equivalent.
Cloud certifications such as AZ-900, MS-900, or equivalent or higher.
Knowledge of Splunk.
Knowledge of banking or the financial services industry.
Strong verbal, written, and interpersonal communication skills.

Responsibilities

Design, deploy, and operationally maintain Hardware Security Modules and security appliances.
Drive design, deployment, and automation strategies for encryption, tokenization, and key management products and services in physical, virtual, and containerized environments.
Develop and deploy service-health features, including synthetic transactions and system monitoring using standard protocols and tools such as Syslog, Splunk, and Prometheus.
Participate in the evaluation and testing of new cryptographic products and services.
Develop and maintain design and build guides, deployment strategies, automation guides, and operational-process documentation.
Support company-driven audits, gather evidence of compliance with company policies, and drive product enhancements to remediate findings when needed.
Collaborate with professionals at all levels, including managers.
Support incident response, root-cause analysis, and corrective-action activities.
Investigate incidents technically to identify causes and recommend mitigation strategies.
Create technical and engineering documentation and communicate effectively in writing and verbally.
Use Agile Scrum and Kanban processes to track work and participate in recurring Agile meetings.