Principal Security Engineer - Reliability

Wells Fargo is seeking a Principal Security Engineer to lead reliability and governance improvements for enterprise network security platforms. This role blends senior technical ownership with cross-functional partnership, shaping security platform strategy, incident leadership, and automation to reduce operational and cyber risk.

Based in Irving, TX with a hybrid work model (three days per week in the office), you will define reliability outcomes for security services while guiding engineering decisions across core network security capabilities.

What you’ll do

• Define and drive reliability, security posture, policy governance, service health indicators, risk measures, and improvement plans for security platforms.
• Guide engineering decisions for proxy, firewall, network access control (NAC), web application firewall (WAF), secure access, and segmentation platforms to improve scalability, resiliency, and operational simplicity.
• Strengthen firewall rules, proxy policies, NAC and WAF controls, segmentation models, exception handling, certification practices, and compliance-aligned controls.
• Lead major incident response and service restoration for security product incidents, including root cause analysis and prevention of repeat issues.
• Expand telemetry, alerting, service health reporting, policy validation, configuration management, automated testing, and self-service capabilities.
• Review and guide designs to improve security effectiveness, failure isolation, availability, inspection performance, and operational readiness.
• Partner with cybersecurity, network, cloud, infrastructure, application, architecture, risk, and compliance teams while mentoring engineers and influencing senior stakeholders.

Required experience

• 7+ years in network security, network engineering, or security infrastructure supporting business-critical enterprise network services.
• 5+ years expert knowledge of network security platforms including firewalls, proxy, NAC, WAF, ZTNA, segmentation, and secure access.
• 5+ years with TCP/IP, routing, switching, DNS, load balancing, TLS/SSL, and application-layer protocols.
• 5+ years applying reliability or SRE practices to infrastructure or security platforms, including service health measurement, problem management, operational health metrics, and continuous improvement.
• 5+ years improving operational stability and reducing repeat incidents through root cause analysis, post-incident reviews, corrective action planning, systemic remediation, and recurrence prevention.
• 5+ years owning corrective actions from post-incident review through implementation, validation, and closure.
• 5+ years improving change success rates using risk assessment, peer review, validation testing, rollback planning, and post-change verification.
• 5+ years conducting operational readiness reviews, production readiness assessments, failure-mode reviews, or service acceptance reviews.
• 5+ years managing vendor escalations, product defects, support cases, and platform lifecycle risks that impact service stability.
• 5+ years improving security control effectiveness, audit readiness, exception governance, and policy compliance across network security platforms.
• 5+ years hands-on automation or scripting experience with Python, Ansible, Terraform, APIs, or equivalent technologies.
• 5+ years improving monitoring, telemetry, logging, and service health visibility.

Technology areas

• Python, Ansible, Terraform, APIs
• TCP/IP, routing, switching, DNS, load balancing, TLS/SSL
• Next-generation firewalls, firewall management platforms
• Secure web proxy, secure internet access
• Network access control (NAC), identity-aware access, web application firewall (WAF), application protection
• Secure remote access, ZTNA, SASE, network segmentation and micro-segmentation
• Threat prevention, intrusion prevention, inspection, encrypted traffic analysis
• Logging, telemetry, monitoring, observability platforms, automation, configuration management, infrastructure-as-code tooling

Role details

• Employment type: Full time
• Role type: Individual contributor (not a people-manager role)
• Work model: Hybrid (3 days in office, 2 days remote)
• Eligible locations: Dallas, TX metro; Charlotte, NC metro; or Chandler, AZ metro
• Escalation expectations: Senior technical escalation for critical incidents and high-risk changes; expected to support critical incident response as needed (any recurring on-call rotation will be defined before offer acceptance)
• Travel expectations: 5% or less

Education

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field, or equivalent practical experience

Compensation

Salary range: USD 159,000 - 305,000 per year.

Benefits

• Health benefits
• 401(k) Plan
• Paid time off
• Disability benefits
• Life insurance, critical illness insurance, and accident insurance
• Parental leave
• Critical caregiving leave
• Discounts and savings
• Commuter benefits
• Tuition reimbursement
• Scholarships for dependent children
• Adoption reimbursement

Additional posting information

• Posting end date: 15 Nov 2026 (may come down early due to volume of applicants)
• Visa sponsorship: Not eligible for visa sponsorship