Senior Information Security EngineerWells Fargo is seeking a Senior Information Security Engineer to be a key member of the Directory Services Engineering team. This individual will be responsible for securing and modernizing the enterprise identity infrastructure that supports workforce, application, service, and machine authentication across the organization. The ideal candidate will serve as both a security architect and hands-on engineer, partnering across Cyber Security, Infrastructure, Cloud, Application Development, and Operations teams to design, implement, and maintain secure identity services that support regulatory, audit, and operational requirements.In this role, you will:Design, implement, and maintain secure Active Directory environments, including: Domain Services, Group Policy, Organizational Unit (OU) Design, Delegation Models, Trust Relationships, and Authentication Services.Develop and maintain security standards, hardening baselines, and control frameworks for Active Directory and cloud identity platforms.Lead initiatives focused on reducing identity-related attack surface and improving directory hygiene. Assess and remediate identity security risks, misconfigurations, and excessive privileges.Engineer and support Microsoft Entra ID security controls, including: Conditional Access, Multi-Factor Authentication (MFA), Passwordless Authentication, FIDO2 and Passkeys, Temporary Access Pass (TAP), Identity Protection, Privileged Identity Management (PIM), and Workload Identity Security.Design and implement authentication and authorization controls for cloud applications and enterprise integrations.Develop monitoring and reporting capabilities for Entra sign-in activity, authentication events, and security posture metrics.Support cloud identity modernization and Zero Trust initiatives.Design, support, and secure enterprise virtual directory services utilizing Radiant Logic Virtual Directory.Integrate multiple identity repositories including: Active Directory, LDAP, Cloud Identity Providers, HR Systems, and Application Repositories.Develop identity aggregation, attribute transformation, and identity correlation strategies.Ensure security, resiliency, and scalability of virtual directory services supporting enterprise applications and regulatory requirements.Engineer and maintain Linux authentication and authorization integrations.Implement and support: LDAP, Kerberos, SSSD, PAM, SSH Security Controls, and Certificate-Based AuthenticationSecure privileged access across Linux environments through integration with PAM solutions and enterprise credential management platforms.Develop and maintain hardening standards for Linux operating systems and directory service integrations.Support enterprise IAM initiatives including: Role-Based Access Control (RBAC), Attribute-Based Access Control (ABAC), Privileged Access Management (PAM), Service Account Governance, and Non-Person Entity Security.Evaluate emerging authentication technologies and industry best practices.Support identity lifecycle management and governance processes.Investigate directory service security incidents and suspicious authentication activity.Develop detection content leveraging: Microsoft Sentinel, Splunk, KQL, and Security Information and Event Management (SIEM) platforms.Partner with Cyber Defense and Incident Response teams to mitigate identity-based threats.Support threat modeling and security assessments of identity platforms.Partner with internal audit, risk, and regulatory organizations to demonstrate identity control effectiveness.Produce technical documentation, architecture diagrams, control evidence, and security standards.Support regulatory examinations and security reviews involving identity and authentication controls.Drive remediation activities for audit findings and risk observations.Required Qualifications:4+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education4+ years of experience in Active Directory, Microsoft Entra ID, Radiant Virtual Directory, or Linux security platforms4+ years of experience in identity governance, authentication technologies, privileged access management, and enterprise security controls.Desired Qualifications:7+ years of Information Security, Identity Security, or Infrastructure Security experienceExperience with Radiant RBDS platformExperience administering and securing Microsoft Entra ID environmentsExperience with LDAP and directory service architecturesExperience securing Linux platforms and authentication servicesStrong understanding of: Kerberos, LDAP, SAML, OAuth, and MFAExperience with PowerShell automation and scriptingExperience supporting enterprise-scale identity environmentsBachelor's Degree in Cybersecurity, Information Technology, Computer Science, or related field, or equivalent experienceJob Expectations:This role is not eligible for visa sponsorship now or in the futureAbility to work on-site in one of the listed locations in a hybrid model. There is no option for 100% remote work.Posting End Date:2 Oct 2026*Job posting may come down early due to volume of applicants.We Value Equal OpportunityWells Fargo is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic.
Apply Now
GET
