SIEM and Data Pipeline Principal Engineer

Wells Fargo•Iselin, NJ

22h•$159,000 - $305,000

About The Position

About this role: Wells Fargo is seeking a Principal Engineer in Technology as part of Cybersecurity. Learn more about the career areas and lines of business at wellsfargojobs.com. Wells Fargo is seeking a Principal SIEM Engineer to join our Cybersecurity team. This role will serve as the senior technical authority for log management, data pipeline architecture, and observability engineering across the enterprise. The ideal candidate will lead strategy, design, and implementation efforts for Splunk Cloud, CRIBL Stream, and scalable data ingestion pipelines. In this role, you will: Act as a trusted advisor to leadership on Splunk Cloud and CRIBL architecture decisions. Lead resolution of complex engineering challenges across observability and data pipeline domains. Translate business objectives and compliance requirements into scalable technical solutions. Maintain deep knowledge of industry best practices in log management, data streaming, and observability. Drive innovation and continuous improvement across telemetry platforms. Serve as the Principal Engineer (SME) for Splunk Cloud architecture, CRIBL Stream deployment, and data pipeline optimization. Design and implement scalable log ingestion frameworks using CRIBL and Splunk forwarders. Lead strategy and roadmap development for observability and telemetry platforms. Collaborate with cybersecurity, infrastructure, and application teams to ensure log fidelity, performance, and security. Develop automation and orchestration solutions to streamline data onboarding and enrichment. Provide technical oversight and mentorship to engineering teams working on Splunk and CRIBL integrations. Evaluate emerging technologies and recommend solutions to enhance data pipeline efficiency and observability capabilities. Interface with executive leadership to align technical solutions with business priorities and compliance requirements.

Requirements

7+ years of Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
5+ years of hands-on experience with Splunk Enterprise or Cloud architecture and administration.
3+ years of experience with CRIBL Stream or similar data routing platforms.
Proven experience designing and managing data pipelines for large-scale enterprise environments.
Strong understanding of data normalization, enrichment, and transformation techniques.
Experience with automation tools (e.g., Ansible, Terraform, Python scripting).

Nice To Haves

Certifications in Splunk (e.g., Splunk Certified Architect), CRIBL, or related technologies.
Experience integrating Splunk with cloud-native services (AWS, Azure, GCP).
Familiarity with SIEM, SOAR, and threat detection use cases.
Ability to communicate technical concepts to non-technical stakeholders.
Experience working in regulated industries such as finance or healthcare.

Responsibilities

Act as a trusted advisor to leadership on Splunk Cloud and CRIBL architecture decisions.
Lead resolution of complex engineering challenges across observability and data pipeline domains.
Translate business objectives and compliance requirements into scalable technical solutions.
Maintain deep knowledge of industry best practices in log management, data streaming, and observability.
Drive innovation and continuous improvement across telemetry platforms.
Serve as the Principal Engineer (SME) for Splunk Cloud architecture, CRIBL Stream deployment, and data pipeline optimization.
Design and implement scalable log ingestion frameworks using CRIBL and Splunk forwarders.
Lead strategy and roadmap development for observability and telemetry platforms.
Collaborate with cybersecurity, infrastructure, and application teams to ensure log fidelity, performance, and security.
Develop automation and orchestration solutions to streamline data onboarding and enrichment.
Provide technical oversight and mentorship to engineering teams working on Splunk and CRIBL integrations.
Evaluate emerging technologies and recommend solutions to enhance data pipeline efficiency and observability capabilities.
Interface with executive leadership to align technical solutions with business priorities and compliance requirements.