Lead Information Security Engineer

Join Wells Fargo’s IAM/PAM Engineering Organization as a Lead Information Security Engineer supporting the design, implementation, and ongoing operations of CyberArk-based privileged access and credential management solutions. This hybrid role in Charlotte, NC offers a comprehensive benefits package and the opportunity to provide technical leadership across enterprise security, automation, and platform lifecycle activities.

Pay range: $119,000 - $187,000 per year
Location: Charlotte, NC (hybrid)
Experience: 3+ years (plus CyberArk experience as noted below)

What you’ll do

• Design, implement, and support CyberArk capabilities including Enterprise Password Vault (EPV), Privileged Session Manager (PSM), Privileged Session Manager for SSH (PSMP), Central Policy Manager (CPM), Credential Providers, and Central Credential Provider (CCP).
• Onboard and manage privileged accounts and non-human identities across Windows, Linux, database, cloud, and enterprise platforms, including service accounts, application credentials, SSH keys, and other identity types.
• Engineer and maintain privileged access controls such as password rotation, credential reconciliation, session isolation, session recording, and just-in-time access.
• Build and support integrations between CyberArk and enterprise platforms including Active Directory, Entra ID, SailPoint, ServiceNow, cloud providers, virtualization platforms, and custom applications.
• Automate account onboarding and credential management using CyberArk APIs, PowerShell, and infrastructure automation tools, including compliance reporting and operational processes.
• Troubleshoot and resolve complex issues across production environments involving CyberArk infrastructure, authentication, connectivity, and application integrations.
• Support CyberArk platform upgrades and lifecycle activities including patching, high availability, disaster recovery, performance tuning, and capacity planning.
• Partner with application, infrastructure, cloud, and security teams to deliver privileged access solutions aligned to enterprise security requirements and regulatory standards.
• Assess new CyberArk capabilities, PAM technologies, and architectural approaches to improve security posture, scalability, and operational efficiency.
• Act as a CyberArk subject matter expert, providing technical leadership, operational guidance, documentation, and mentoring for engineering and support teams.

Required qualifications

• 5+ years of Information Security Engineering experience, or an equivalent combination of work experience, training, military experience, and/or education.
• 3+ years of experience with CyberArk.

Preferred / desired qualifications

• 5+ years of credential management expertise and advanced experience managing credential management systems.
• 5+ years of Windows OS administration experience.
• 2+ years of experience automating workflows using PowerShell, VBScript, Shell, or related tooling.
• Ability to manage complex issues and develop solutions.
• Excellent verbal and written communication skills.

Technologies you’ll work with

CyberArk, Enterprise Password Vault (EPV), Privileged Session Manager (PSM), Privileged Session Manager for SSH (PSMP), Central Policy Manager (CPM), Credential Providers, Central Credential Provider (CCP), Active Directory, Entra ID, SailPoint, ServiceNow, PowerShell, CyberArk APIs, Windows, Linux, SSH keys, VBScript, Shell

Benefits

• Health benefits
• 401(k) Plan
• Paid time off
• Disability benefits
• Life insurance, critical illness insurance, and accident insurance
• Parental leave
• Critical caregiving leave
• Discounts and savings
• Commuter benefits
• Tuition reimbursement
• Scholarships for dependent children
• Adoption reimbursement

Job expectations and additional information

• Hybrid work in one of the listed locations; no fully remote option.
• This position is not available for visa sponsorship.
• Posting end date: 14 Oct 2026. Job posting may come down early due to volume of applicants.
• Applicants with disabilities can request a medical accommodation during the application or interview process via Disability Inclusion at Wells Fargo.
• Wells Fargo maintains a drug-free workplace. See the Drug and Alcohol Policy to learn more.
• Third-party recordings are prohibited unless authorized by Wells Fargo.
• During recruiting and hiring, Wells Fargo requires you to directly represent your own experiences.