Principal Engineer - IAM
Wells Fargo2 days ago
Base Salary
$191k - $305k/yr
Responsibilities
- Define enterprise IAM technical strategy, reference architectures, engineering standards, reusable patterns, platform roadmaps, and investment priorities.
- Design and modernize complex IAM and PAM platforms covering identity lifecycle management, application onboarding, access governance, RBAC, least privilege, segregation of duties, and access recertification.
- Develop secure integrations across IAM, IGA, PAM, cloud, application, and enterprise service-management platforms.
- Lead privileged access capabilities including time-bound access, session provisioning, secrets management, auditing, and access monitoring.
- Establish fine-grained authorization for applications, APIs, workload identities, AI agents, and machine-to-machine interactions.
- Evaluate and implement secure generative AI capabilities, including AI agents, MCP servers, RAG solutions, identity propagation, and authorization controls.
- Establish observability, resiliency, testing, deployment, and production-support practices for security-critical identity platforms.
- Partner with cybersecurity, product, risk, architecture, infrastructure, application teams, and senior stakeholders to translate business and regulatory needs into engineering solutions.
- Mentor engineers and technical leads while promoting software engineering, security, automation, and operational best practices.
- Use AI-assisted development and analysis tools responsibly for system design, coding, testing, analysis, and troubleshooting while accounting for security, compliance, privacy, ethical, and operational risks.
Requirements
- At least 7 years of engineering experience, or equivalent demonstrated through work experience, training, military experience, or education.
- At least 7 years of experience designing and engineering enterprise IAM, IGA, or PAM platforms.
- Advanced experience with Java, Spring Boot, Spring Security, REST APIs, microservices, and event-driven architectures.
- Experience with IAM or PAM platforms such as Saviynt, Oracle Identity Manager, CyberArk, BeyondTrust, or comparable technologies.
- Experience developing identity lifecycle, Joiner-Mover-Leaver, access recertification, role management, segregation-of-duties, and least-privilege solutions.
- Experience designing privileged access capabilities involving session provisioning, credential management, access monitoring, audit controls, and time-bound access.
- Experience with Kubernetes, EKS, Docker, Helm, Terraform, GitOps, and cloud-native engineering patterns.
- Experience developing CI/CD pipelines and automated delivery practices using GitHub Actions, Argo CD, Bamboo, Bitbucket, or similar technologies.
- Knowledge of authentication, authorization, RBAC, policy-based access control, workload identity, secrets management, and fine-grained entitlement models.
- Experience designing secure AI platforms involving generative AI, AI agents, MCP servers, RAG, LLM integrations, or AI authorization controls.
- Experience establishing enterprise reference architectures, engineering standards, design-review practices, and platform roadmaps.
- Experience supporting security-critical platforms in regulated environments, including audit readiness, risk management, monitoring, and production support.
- Strong executive communication, stakeholder management, technical leadership, and engineering mentorship skills.
Benefits
- The position is located at 150 E 42nd Street, New York, NY, and is not available for 100% remote work.
- Relocation assistance is not available.
- Eligible employees may receive health benefits, a 401(k) plan, paid time off, disability benefits, life insurance, critical illness and accident insurance, parental leave, critical caregiving leave, commuter benefits, tuition reimbursement, dependent-child scholarships, adoption reimbursement, and discounts and savings.
- The role may be eligible for a discretionary bonus, Restricted Share Rights, or other long-term incentive awards.
Tech Stack
Categories
About Wells Fargo
Wells Fargo & Company is a U.S.-based financial services firm providing consumer and commercial banking, mortgages, credit, and wealth/investment services to individuals, small businesses, and enterprises. It earns revenue from interest income and fees across retail banking, payments, lending, and capital markets. Founded in 1852 and headquartered in San Francisco, it is publicly traded on the NYSE (WFC) and operates nationally with offices in multiple countries.