Lead Information Security Engineer - Directory Security

About this role:

Wells Fargo is seeking a Lead Information Security Engineer that has experience with directory server solutions to join our dynamic team.  This team member’s responsibilities are to provide technical leadership in designing authentication solution and managing the directory server infrastructure of a large organization. The primary goal for this role is to ensure system reliability of critical business applications with enhanced operational procedures. The secondary goal for this role is to drive application modernization and automation.

This team member’s responsibilities will include developing automation to support the installation, configuration, administration of the PingDirectory Server Suite and CA Directory solutions.  Additional tasks include the installation, testing and deployment of new versions of software, hotfixes and security fixes.  Architecting secure LDAP solutions to meet business requirements.  Installation, configuration and use of the SLAMD tool to execute performance testing.  Provide consultancy in planning, testing and documenting environment changes which include new integrations as well as the existing environment.  Configure connection policies, alert handlers, replication topology, management of bulk transactions, recommend solutions to potential performance issues, etc.  Will be actively involved in Audit-related activities and provide second level troubleshooting of PingDirectory Server Suite and CA Directory.

Support production deployments after-hours for PingDirectory Server Suite and CA Directory integrations or other infrastructure maintenance activities which involve communication and coordination with Engineering, Operations, project management, and customer application resources to ensure the scheduled deployments are successful.

This role will allow learning and growth on our directory solutions and security technologies. 

In this role, you will:

• Conduct technical investigation of security related incidents and post incident digital forensics to identify causes and recommend future mitigation strategies
• Provide security consulting on large projects for internal clients to ensure conformity with corporate information, security policy, and standards
• Design, document, test, maintain, and provide issue resolution recommendations for highly complex security solutions related to networking, cryptography, cloud, authentication and directory services, email, internet, applications, and endpoint security
• Review and correlate security logs
• Utilize subject matter knowledge in industry leading security solutions and best practices to implement one or more components of information security such as availability, integrity, confidentiality, risk management, threat identification, modeling, monitoring, incident response, access management, and business continuity
• Identify security vulnerabilities and issues, perform risk assessments, and evaluate remediation alternatives
• Collaborate and influence all levels of professionals including managers
• Lead a team to achieve objectives

Required Qualifications:

• 5+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
• 5+ years of information security applications and authentication systems experience
• 5+ years of developing automation using Unix Shell scripting, Bash experience
• 4+ years of developing automation with Python, Ruby, CI/CD tools (GitHub, Jenkins, Artifactory) and Ansible orchestration experience
• 4+ years of Linux operating systems experience
• 2+ years of Ping Directory product set (Directory, Proxy, Sync), commands and tools experience
• 2+ years of working in an environment utilizing Agile methodology experience
• 2+ years of processing workflow using Jira tool experience
• 2+ years of monitoring and data analysis tools such as Splunk, Sitescope, Grafana and Kafka experience
• 2+ years of making audit-related assessments, document changes needed, deploying feasible audit-related changes experience
• Minimum of a Bachelor's degree is required

Desired Qualifications:

• Overall configuration, troubleshooting, patch application, configuring replication, schema management, ACI management, encryption, patch application, etc. of directory server solution
• Familiarity with directories password policy configuration
• Demonstrated technical ability to make performance/tuning recommendations for directory
• Demonstrated ability to document procedures for other engineers to follow
• Excellent communication skills working with development, production and application teams for multiple lines of busine