Lead Information Security Engineer- Certificate Management Services

WELLS FARGO BANK; San Francisco (CA); On-site; USD 133,000 - 238,000; Full time

Job summary

A leading financial institution is seeking a Lead Information Security Engineer to support the Digital Certificate Management Services team. The role involves designing and deploying infrastructure solutions related to digital certificate lifecycle management, leading security incident responses, and collaborating with various stakeholders to ensure security compliance. Candidates should have extensive experience in information security engineering, automation, and cloud technologies.

Benefits

401(k) Plan

Paid time off

Disability benefits

Life insurance

Parental leave

Qualifications

• 5+ years of Information Security Engineering experience.
• Experience with ticket tracking tools for change management.

Responsibilities

• Lead computer security incident response activities.
• Conduct technical investigation of security incidents.
• Provide security consulting on large projects.

Skills

Information Security Engineering

Incident Response

Risk Management

Communication

Automation

Tools

Ansible

Terraform

Jenkins

GitHub

Venafi

Job description

Wells Fargo is seeking a Lead Information Security Engineer in Technology as part of the Chief Technology Office (CTO). Learn more about the career areas and lines of business at wellsfargojobs.com . The Lead Information Security Engineer will support the Digital Certificate Management Services team as part of the Technology Infrastructure group. The Certificate Management Services Engagement and Support team provides support to Certification Management Administrators using Venafi's product suite to manage Enterprise level Certificate Management and Issuance. In this role you would be responsible for Designing, Developing and deploying large scale infrastructure solutions related to Digital Certificates Lifecycle management using advanced, innovative and latest technologies in multi-platform hybrid cloud deployments.

In this role, you will :

• Lead computer security incident response activities for highly complex events
• Conduct technical investigation of security related incidents and post incident digital forensics to identify causes and recommend future mitigation strategies
• Provide security consulting on large projects for internal clients to ensure conformity with corporate information, security policy, and standards
• Design, document, test, maintain, and provide issue resolution recommendations for highly complex security solutions related to networking, cryptography, cloud, authentication and directory services, email, internet, applications, and endpoint security
• Review and correlate security logs
• Utilize subject matter knowledge in industry leading security solutions and best practices to implement one or more components of information security such as availability, integrity, confidentiality, risk management, threat identification, modeling, monitoring, incident response, access management, and business continuity
• Identify security vulnerabilities and issues, perform risk assessments, and evaluate remediation alternatives
• Collaborate and influence all levels of professionals including managers
• Lead a team to achieve objectives

Required Qualifications :

• 5+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following : work experience, training, military experience, education
• 5+ years of experience providing production support
• 5+ years of experience using ticket tracking tools for change management, problem and incident management, and availability management

Desired Qualifications :

• 5+ years of demonstrated experience developing automation with infrastructure as Code (IaC) tools like Ansible, Terraform, Chef, Puppet etc..
• 5+ years of experience with Continuous Integration / Continuous Deployment (CI / CD) tools for automation such as Jenkins, Github, Terraform, Harness, etc.
• 5+ years of experience implementing or managing Certificate Lifecycle Management for a variety of certificate use cases (TLS, machine identity, Code Signing, S / MIME, SSH).
• 5+ years of experience with one or more certificate management tools (Venafi, DigiCert, Microsoft)
• 5+ years of experience developing API automation to consume REST API methods to automate client integrations.
• 5+ years of experience with Cloud platforms, Kubernetes container architecture and deployment services
• 5+ years of experience with industry standard security controls (NIST) related to digital certificates
• 5+ years of experience with Agile methodologies Kanban / Scrum and processing workflow using Jira tool.
• Self-starter with the ability to manage multiple engineering projects
• Cloud vendor certification such as Microsoft Azure or Google Cloud Intermediate to advanced hands-on experience in scripting, orchestration, and automation languages such as PowerShell / DSC, Python and Ansible to deploy Infrastructure as Code (IaC)
• Strong communication and interpersonal skills

Job Expectations :

• Ability to work on-site at posted location
• This position is not eligible for Visa sponsorship

Pay range :

• New Jersey, NJ - Pay Range : 122,200.00 - 217,200.00 USD Annually
• San Francisco, CA - Pay Range : 133,300.00 - 237,100.00 USD Annually

Pay Range

Reflected is the base pay range offered for this position. Pay may vary depending on factors including but not limited to achievements, skills, experience, or work location. The range listed is just one component of the compensation package offered to candidates.

111,100.00 - $237,100.00

Wells Fargo provides eligible employees with a comprehensive set of benefits, many of which are listed below. Visit Benefits - Wells Fargo Jobs for an overview of the following benefit plans and programs offered to employees.

• 401(k) Plan
• Paid time off
• Disability benefits
• Life insurance, critical illness insurance, and accident insurance
• Parental leave
• Critical caregiving leave
• Discounts and savings

Posting End Date : 25 May 2025

• Job posting may come down early due to volume of applicants.

Wells Fargo is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic.

Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit's risk appetite and all risk and compliance program requirements.

Applicants with Disabilities

To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo .

Drug and Alcohol Policy

Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.

Wells Fargo Recruitment and Hiring Requirements :

a. Third-Party recordings are prohibited unless authorized by Wells Fargo.

b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.

Create a job alert for this search

Information Security Engineer • SAN FRANCISCO, California, United States of America

We Care About Your Privacy

We and our 1 partners store and access personal data, like browsing data or unique identifiers, on your device. Selecting I Accept enables tracking technologies to support the purposes shown under we and our partners process data to provide. Selecting Reject All or withdrawing your consent will disable them. If trackers are disabled, some content and ads you see may not be as relevant to you. You can resurface this menu to change your choices or withdraw consent at any time by clicking the Show Purposes link on the bottom of the webpage [or the floating icon on the bottom-left of the webpage, if applicable]. Your choices will have effect within our Website. For more details, refer to our Privacy Policy.