Principal Engineer
Wells Fargo1 day ago
Base Salary
$191k - $305k/yr
Responsibilities
- Serve as a principal technical advisor for enterprise identity architecture, authentication, authorization, federation, access governance, and privileged access.
- Design and lead adoption of identity solutions using Microsoft Entra ID, Active Directory, Privileged Identity Management, Conditional Access, and related technologies.
- Define IAM reference architectures, engineering standards, roadmaps, reusable patterns, and enterprise identity strategies.
- Lead Zero Trust, RBAC, ABAC, least-privilege, privileged access, identity governance, access certification, and lifecycle management initiatives.
- Design and implement secure authentication and authorization services across cloud, on-premises, and hybrid environments.
- Lead architecture reviews, threat modeling, technology assessments, and strategic IAM engineering decisions.
- Collaborate with Cybersecurity, Infrastructure, Product, Risk, Application, and Architecture teams to address identity risks and deliver secure solutions.
- Evaluate emerging identity and AI-agent technologies and improve enterprise security posture, compliance, and operational readiness.
- Mentor engineers and architects and communicate technical strategy, architecture direction, and risk considerations to senior stakeholders.
- Use AI-assisted development and analysis tools responsibly for system design, coding, testing, analysis, and troubleshooting.
Requirements
- At least 7 years of engineering experience or equivalent demonstrated through work experience, training, military experience, or education.
- At least 7 years of experience designing and implementing enterprise Identity and Access Management solutions.
- Deep expertise in Microsoft Entra ID, Active Directory, Conditional Access, Privileged Identity Management, identity governance, and access reviews.
- Experience with authentication and federation technologies including SAML, OAuth 2.0, OpenID Connect, Kerberos, and SCIM.
- Experience with identity governance, entitlement management, access certifications, joiner/mover/leaver processes, and role lifecycle management.
- Experience implementing passwordless authentication, phishing-resistant MFA, and modern access management solutions.
- Strong knowledge of Zero Trust architecture, RBAC, ABAC, least-privilege access, and privileged access management.
- Experience leading enterprise identity architecture and engineering initiatives in large-scale organizations.
- Experience defining engineering standards, technical roadmaps, and enterprise architecture strategies.
- Experience integrating enterprise applications with Microsoft identity services and cloud-based access management platforms.
- Experience with automation and Identity-as-Code using PowerShell, APIs, Terraform, or related technologies.
- Experience supporting regulated environments and frameworks such as SOX, FFIEC, NIST, or PCI-DSS.
- Preferred certifications include Microsoft Certified: Identity and Access Administrator Associate, Microsoft Cybersecurity Architect Expert, CISSP, CCSP, SABSA, or TOGAF.
- Strong leadership, stakeholder management, and executive communication skills.
Benefits
- Health benefits, 401(k) plan, paid time off, disability benefits, life insurance, critical illness insurance, accident insurance, parental leave, and critical caregiving leave.
- Discounts and savings, commuter benefits, tuition reimbursement, scholarships for dependent children, and adoption reimbursement.
- The position is based at 150 E 42nd Street, New York, NY, is not 100% remote, and does not provide relocation assistance.
- May be eligible for a discretionary bonus, Restricted Share Rights, or other long-term incentive awards.
About Wells Fargo
Wells Fargo & Company is a U.S.-based financial services firm providing consumer and commercial banking, mortgages, credit, and wealth/investment services to individuals, small businesses, and enterprises. It earns revenue from interest income and fees across retail banking, payments, lending, and capital markets. Founded in 1852 and headquartered in San Francisco, it is publicly traded on the NYSE (WFC) and operates nationally with offices in multiple countries.