Lead Information Security Engineer- Certificate Management Services
Wells Fargo1 day ago
Columbus, OH, USA +2 moreStaff+
Base Salary
$119k - $187k/yr
Responsibilities
- Lead the design, engineering, automation, and operation of enterprise PKI and certificate lifecycle management services.
- Design, document, test, maintain, and improve scalable security solutions for cryptography, authentication, machine identity, and certificate management.
- Develop automation for certificate issuance, renewal, discovery, inventory, compliance monitoring, and lifecycle management.
- Engineer API and automation-framework integrations between certificate management platforms and enterprise applications.
- Design and support certificate enrollment and lifecycle solutions using ACME, EST, and SCEP.
- Contribute to crypto-agility and post-quantum cryptography readiness initiatives.
- Evaluate and implement machine identity and workload identity technologies such as SPIFFE/SPIRE.
- Develop reusable automation, tooling, and self-service capabilities using source control and software engineering practices.
- Identify security risks, vulnerabilities, and control gaps and recommend remediation strategies.
- Collaborate with application, infrastructure, architecture, and security teams to drive adoption of certificate management and machine identity services.
- Provide technical leadership and mentorship across PKI and certificate management initiatives.
Requirements
- 7+ years of Information Security Engineering experience, or equivalent demonstrated through work experience, training, military experience, education, or a combination.
- At least 1 year of production support experience.
- At least 1 year of experience using ticket tracking tools for change management, problem and incident management, and availability management.
- Hands-on experience designing, implementing, or operating enterprise PKI and certificate lifecycle management solutions is desired.
- Experience with certificate use cases including TLS, machine identities, code signing, S/MIME, SSH, and workload identities is desired.
- Strong understanding of PKI concepts including certificate authorities, registration authorities, enrollment, revocation, OCSP, CRL, key management, and cryptographic trust models is desired.
- Experience with certificate management platforms such as Venafi, DigiCert, Microsoft ADCS, or Keyfactor is desired.
- Experience with Python, PowerShell, Ansible, Terraform, REST APIs, Git-based workflows, CI/CD pipelines, Infrastructure as Code, and platform integration is desired.
- Knowledge of cryptographic modernization, crypto-agility, post-quantum cryptography, SPIFFE/SPIRE, certificate-based identity technologies, and NIST security standards is desired.
- Experience with Agile methodologies such as Kanban or Scrum and workflow management using Jira is desired.
- Ability to manage multiple engineering projects, communicate effectively, and collaborate with professionals at all levels is required.
Benefits
- Hybrid work schedule.
- Health benefits, 401(k) plan, paid time off, disability benefits, life insurance, critical illness insurance, and accident insurance.
- Parental leave and critical caregiving leave.
- Discounts and savings, commuter benefits, tuition reimbursement, scholarships for dependent children, and adoption reimbursement.
About Wells Fargo
Wells Fargo & Company is a U.S.-based financial services firm providing consumer and commercial banking, mortgages, credit, and wealth/investment services to individuals, small businesses, and enterprises. It earns revenue from interest income and fees across retail banking, payments, lending, and capital markets. Founded in 1852 and headquartered in San Francisco, it is publicly traded on the NYSE (WFC) and operates nationally with offices in multiple countries.