Lead Information Security Engineer

Join Wells Fargo’s Information Security team in a hybrid role based in Charlotte, NC. This position focuses on building and operating CyberArk-based privileged access and credential management capabilities that support enterprise security and regulatory needs. You will work with a specialized IAM/PAM Engineering Organization while contributing to solutions used across Windows, Linux, databases, cloud, and other enterprise platforms.

Compensation: USD 119,000 - 187,000 per year. Experience required: minimum 3 years. The posting end date is 14 Oct 2026 and it may close early due to applicant volume.

What you’ll be doing

• Design, implement, and support CyberArk solutions including Enterprise Password Vault (EPV), Privileged Session Manager (PSM), Privileged Session Manager for SSH (PSMP), Central Policy Manager (CPM), Credential Providers, and Central Credential Provider (CCP).
• Onboard and manage privileged accounts such as service accounts, application credentials, SSH keys, and non-human identities across Windows, Linux, database, cloud, and enterprise platforms.
• Engineer and maintain privileged access controls including password rotation, credential reconciliation, session isolation, session recording, and just-in-time access.
• Develop and support integrations between CyberArk and enterprise platforms including Active Directory, Entra ID, SailPoint, ServiceNow, cloud providers, virtualization platforms, and custom applications.
• Automate account onboarding and credential management workflows using CyberArk APIs, PowerShell, and infrastructure automation tools, including compliance reporting and operational processes.
• Troubleshoot and resolve complex issues across production environments, including infrastructure, authentication, connectivity, and application integrations.
• Support CyberArk platform upgrades and lifecycle activities such as patching, high availability, disaster recovery, performance tuning, capacity planning, and overall platform management.
• Partner with application, infrastructure, cloud, and security teams to deliver privileged access solutions aligned with enterprise security requirements and regulatory standards.
• Evaluate new CyberArk capabilities, PAM technologies, and architectural designs to improve security posture, scalability, and operational efficiency.
• Act as a CyberArk subject matter expert, providing technical leadership, operational guidance, documentation, and mentoring to engineering and support teams.

What you’ll need

• 5+ years of Information Security Engineering experience (or equivalent through work experience, training, military experience, or education).
• 3+ years of experience with CyberArk.

Skills and tools

CyberArk, EPV, PSM, PSMP, CPM, Credential Providers, CCP, Active Directory, Entra ID, SailPoint, ServiceNow, PowerShell, CyberArk APIs, Windows, Linux, SSH keys, VBScript, Shell.

Benefits

• Health benefits
• 401(k) Plan
• Paid time off
• Disability benefits
• Life insurance, critical illness insurance, and accident insurance
• Parental leave
• Critical caregiving leave
• Discounts and savings
• Commuter benefits
• Tuition reimbursement
• Scholarships for dependent children
• Adoption reimbursement

Role expectations

• Hybrid work arrangement in one of the listed locations. No fully remote option.
• This position is not available for visa sponsorship.

Additional information

Applicants with disabilities can request a medical accommodation during the application or interview process by visiting Disability Inclusion at Wells Fargo. Wells Fargo maintains a drug-free workplace (see Drug and Alcohol Policy for details). Third-party recordings are prohibited unless authorized by Wells Fargo, and Wells Fargo requires candidates to directly represent their own experiences during recruiting and hiring.