SENIOR INFORMATION SECURITY ENGINEER - CRYPTOGRAPHIC INFRASTRUCTURE

We’re seeking a collaborative and security-minded engineer to help build and support our cryptographic infrastructure. In this role, you will work closely with teams responsible for operating systems and applications to support the integration and management of encryption technologies. This includes collaborating on the implementation and maintenance of tools such as Control-M (CTM), Hardware Security Modules (HSM), and Vormetric. You will help ensure secure data handling practices, troubleshoot encryption-related issues, and contribute to the development of secure infrastructure solutions. This position offers the opportunity to apply existing knowledge of encryption technologies in a hands-on environment, while also deepening expertise through cross-functional collaboration.

In this role, you will:

• Design, maintain, and automate cryptographic infrastructure to support secure data protection
• Lead and support incident response efforts, especially for complex or high-impact events
• Automate manual tasks using scripting languages and modern tooling
• Collaborate with teams to implement secure configurations and encryption best practices
• Contributes to the design and deployment of cryptographic solutions, including integration with CTM and Vormetric
• Work with vendors to understand product roadmaps and advocate for enhancements
• Partner with engineering teams to identify and remediate vulnerabilities
• Document and support cryptographic solutions and provide guidance on issue resolution

Required Qualifications:

• 4+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
• 3+ years of Unix/Linux Systems Administration experience with in-depth knowledge of troubleshooting, OS hardening and OS tuning
• 2+ years of experience with encryption or tokenization technologies
• 2+ years of experience performing builds, administration and/or support of hardware security modules or security appliance devices

Desired Qualifications:

• 2+ years of experience with scripting/automation using tools such as: Bash, PowerShell, Python, Ansible, VBScript, or JavaScript, UI path, etc.
• Experience with encryption technologies, whether direct or through support of OS/app teams using them
• Familiarity with CTM, Vormetric, or similar platforms is a plus
• Ability to automate tasks using scripting (e.g., Python, PowerShell)
• Solid understanding of core security principles and risk mitigation
• Strong communication and collaboration skills across technical and business teams
• Intermediate or higher knowledge of cryptographic protocols & algorithms
• Knowledge and understanding of implementing infrastructure upgrades, security patches, version upgrades for systems, appliances, and HSMs
• Experience with Agile Scrum or Kanban methodologies
• Proven experience with change and incident management practices in medium to large enterprise environments
• Intermediate to advanced skills with M365/MS Office: PowerPoint, Excel, Word, Outlook, MS Teams, MS SharePoint Online
• Experience with and the ability to thrive in a complex and fast-paced technology and/or information security organization, within a large enterprise environment
• Experience with application support in Linux and Windows server environments
• Experience performing technical product assessments, including development of implementation plans, in a large enterprise
• Experience mentoring/guiding less experienced staff
• Advanced critical thinking, problem solving and technical troubleshooting abilities
• Security certifications such as Certified Information Systems Security Professional (CISSP), Global Information Assurance Certification (GIAC), or equivalent
• Cloud certifications such as AZ-900, MS-900, or equivalent/higher
• Strong verbal, written, and interpersonal communication skills

Job Expectations:

• Ability to work on call/off-hours as assigned per the Team on-call rotation
• Ability to travel up to 10% of the time
• This role offers a hybrid in-office work schedule
• This position is not eligible for Visa sponsorship or transfer of sponsorship

APPLICANTS WITH DISABILITIES

To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo .

WELLS FARGO RECRUITMENT AND HIRING REQUIREMENTS:

a. Third-Party recordings are prohibited unless authorized by Wells Fargo.
b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process

• Design, maintain, and automate cryptographic infrastructure to support secure data protection
• Lead and support incident response efforts, especially for complex or high-impact events
• Automate manual tasks using scripting languages and modern tooling
• Collaborate with teams to implement secure configurations and encryption best practices
• Contributes to the design and deployment of cryptographic solutions, including integration with CTM and Vormetric
• Work with vendors to understand product roadmaps and advocate for enhancements
• Partner with engineering teams to identify and remediate vulnerabilities
• Document and support cryptographic solutions and provide guidance on issue resolutio