Senior Information Security Engineer - Cryptography & Automation

About this role:

The Unstructured Data at Rest Encryption (File/Folder) Team, within the Wells Fargo Technology Infrastructure – Secure Network Services – Critical Security Infrastructure organization, is seeking a Senior Information Security Engineer to join an exciting, fast-paced team working on cutting edge cryptographic related technologies. 

In this role, you will:

• Be responsible for infrastructure design, engineering, automation, and day to day management of crypto infrastructure.  This infrastructure consists of Windows and Linux servers, software and hardware-based appliances leveraged to provide Cryptographic capabilities companywide at Wells Fargo

• Lead incident response activities for highly complex events

• Conduct technical investigation of incidents to identify causes and recommend future mitigation strategies

• Need to be capable of creating technical/engineering documentation and have excellent written and oral communication skills

• Design, develop and implement automation for manual processes via scripting and other automation tools

• Provide security engineering/design for cryptographic solutions and ensure risk mitigation via effective security configuration standards, best practices and while ensuring engineering discipline and quality security technology and business outcomes

• Participate in the research, analysis, design, testing and implementation of complex information protection technologies, alongside other teams within our organization

• Design, document, test, maintain, and provide issue resolution recommendations for highly complex security and cryptographic technology solutions

• Utilize subject matter knowledge in industry leading security solutions and best practices to implement one or more components of information security such as availability, integrity, confidentiality, risk management, threat identification, modeling, monitoring, incident response, access management, and business continuity

• Work with vendors to understand the technology vendor's roadmap, help to influence that roadmap, and ensure requests for technology/product enhancements are meeting the needs of Wells Fargo

• Work with partner engineering teams on identification and remediation of security vulnerabilities and may also conduct risk assessments of infrastructure to ensure compliance with corporate security policies and adherence to best practices

• Collaborate and influence all levels of professionals, including managers

• Provide periodic 24/7 on-call support rotation and some work will be required to be completed during off hours

• May provide technical guidance to less experienced staff.  Given the nature of the encryption technologies, the team environment is very fast paced and requires the ability to drive to solutions as an individual and to work effectively with the team as well

• Collaborate and consult with peers, colleagues, and managers to resolve issues and achieve goals

Required Qualifications:

• 4+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

• 3+ years of Unix/Linux Systems Administration experience with in-depth knowledge of troubleshooting, OS hardening and OS tuning

• 2+ years of intermediate to advanced level experience with scripting/automation using tools such as: Bash, PowerShell, Python, Ansible, VBScript, or JavaScript, UI path, etc.

• Proven experience successfully designing, developing, and deploying automation solutions for technical and engineering processes

• 2+ years of experience with encryption or tokenization technologies

• 2+ years of experience performing builds, administration and/or support of hardware security modules or security appliance devices

• Intermediate or higher knowledge of cryptographic protocols & algorithms

• Knowledge and understanding of implementing infrastructure upgrades, security patches, version upgrades for systems, appliances, and HSMs

• Experience with Agile Scrum or Kanban methodologies

• Proven experience with change and incident management practices in medium to large enterprise environments

• Intermediate to advanced skills with M365/MS Office: PowerPoint, Excel, Word, Outlook, MS Teams, MS SharePoint Online

Desired Qualifications:

• Experience with and the ability to thrive in a complex and fast-paced technology