Data at Rest Encryption Infrastructure Engineering and Delivery Lead Information Security Engineer

$133,300 - $237,100/Yr

Wells Fargo - Raleigh, NC

Full-time - Mid Level

Onsite - Raleigh, NC

Credit Intermediation and Related Activities

About the position

Wells Fargo is seeking a Lead Information Security Engineer to join the Chief Technology Office, focusing on encryption, tokenization, and key management technologies. This role involves providing technical leadership and contributing to the design, deployment, and operational maintenance of cryptographic products and services, including Hardware Security Modules (HSMs). The ideal candidate will have extensive experience in cryptographic product deployment and automation processes.

Responsibilities

• Drive design, deployment and automation strategies for encryption, tokenization and key management products and services.
• Provide technical guidance and oversight to teams responsible for product delivery and operational maintenance.
• Develop and maintain documentation including design and build guides, deployment strategies, automation guides and operational processes.
• Participate in research, analysis and evaluation of new cryptographic products and services.
• Support company driven audits and drive product enhancements to remediate findings.
• Conduct technical investigation of incidents to identify causes and recommend future mitigation strategies.
• Collaborate with compliance, security architecture and security evaluation teams to ensure cryptographic products are compliant with company policies.
• Work with vendors to understand technology roadmaps and influence enhancements to meet company needs.
• Support incident response, root cause analysis and corrective action activities.
• Oversee a team of engineers and influence design/architecture decisions regarding encryption infrastructure.

Requirements

• 5+ years of Information Security Engineering experience.
• 4+ years of scripting/automation experience using tools such as Bash, PowerShell, Python, Ansible, VBScript, or JavaScript.
• 4+ years of Linux and Windows server experience.
• 3+ years of experience with encryption or tokenization and key management technologies.
• 3+ years of experience performing builds, administration and/or support of hardware security modules or security appliance devices.
• 3+ years of advanced knowledge of Cryptographic protocols & algorithms.
• 3+ years of experience with Format Preserving Encryption (FPE), tokenization and Transparent Data Encryption (TDE).
• 3+ years of experience designing solutions for Data at Rest encryption using Thales Vormetric DSM and CipherTrust Manager appliances.

Nice-to-haves

• Experience with DevOps and CI/CD automated build and deployment processes.
• Advanced scripting skills for log rotation, data collection, error collection and alerting.
• Experience designing, developing, and implementing synthetic transactions for monitoring applications and/or infrastructure.
• Experience with Puppet/Chef/Ansible or similar automation tools.
• Experience with Agile Scrum or Kanban methodologies.
• Public cloud engineering or support experience.
• Application development experience.
• Experience with application support in Linux and Windows server environments.
• Experience performing technical product assessments in a large enterprise.
• Experience mentoring/guiding less experienced staff.
• Strong analytical skills with high attention to detail and accuracy.
• Advanced critical thinking, problem solving and technical troubleshooting abilities.
• Security certifications such as CISSP, GIAC or equivalent.
• Cloud certifications such as AZ-900, MS-900 or equivalent/higher.

Benefits

• Health benefits
• 401(k) Plan
• Paid time off
• Disability benefits
• Life insurance, critical illness insurance, and accident insurance
• Parental leave
• Critical caregiving leave
• Discounts and savings
• Commuter benefits
• Tuition reimbursement
• Scholarships for dependent children
• Adoption reimbursement