Lead Information Security Engineer, Certificate Management Services

Wells Fargo

Confirmed live 2 days ago High trust
Closes in 7 days Hybrid

Quick summary

Work type
Hybrid
Location
Irving, TXChandler, AZColumbus, OHCharlotte, NC
Salary
$119,000–$187,000 / yr
Posted
3 days ago
Freshness
Confirmed live 2 days ago
Closes
Sep 18, 2026 (soon)

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $180k
This role $153k
$107k most similar roles pay here $232k

This role pays less than 74% of similar roles. Most pay $151,500–$208,800 — the shaded band above. At the midpoint, this role pays about $153k versus about $180k for comparable roles.

Based on 240 similar postings.

Employer

About Wells Fargo

Wells Fargo & Company is one of the largest banks in the United States, providing banking, investment, mortgage, and consumer and commercial finance products and services nationwide. Industry: Banking & Financial Services

Wells Fargo currently has 33 open roles on FindRole.

Listed pay typically runs $159,000–$260,000 across 13 roles with salary data.

Most-posted roles

View all roles at Wells Fargo

At a glance

TL;DR · Lead Information Security Engineer, Certificate Management Services

Lead Information Security Engineer- Certificate Management Services joins the Cybersecurity Critical Infrastructure Services team to support Digital Certificate Management Services. This role focuses on the engineering, automation, and operation of enterprise Public Key Infrastructure (PKI), machine identity, and certificate lifecycle management services to protect critical business applications. The engineer will design, develop, and automate scalable solutions for cryptography, authentication, and certificate issuance while driving cryptographic modernization and post-quantum cryptography readiness. Day-to-day tasks include building automation tools, integrating platforms via REST APIs, and managing workloads using technologies like ACME, EST, SCEP, and SPIFFE/SPIRE. Required skills include Python, PowerShell, Ansible, Terraform, and Git-based workflows. The role addresses the technical challenge of securing infrastructure through automated certificate discovery, inventory, and compliance monitoring while ensuring operational efficiency across various enterprise systems and security protocols.

What you'll do

  • Lead the design, engineering, automation, and operation of enterprise PKI and certificate lifecycle management services.
  • Develop automation for certificate issuance, renewal, discovery, inventory, and compliance monitoring.
  • Engineer integrations between certificate management platforms and enterprise applications using APIs and automation frameworks.
  • Design and support standards-based certificate enrollment solutions using protocols like ACME, EST, and SCEP.
  • Drive cryptographic modernization initiatives including crypto-agility and post-quantum cryptography (PQC) readiness.
  • Implement emerging machine identity and workload identity technologies such as SPIFFE/SPIRE.
  • Create reusable automation tools and self-service capabilities using source control and modern software engineering practices.
  • Identify security risks, vulnerabilities, and control gaps to recommend effective remediation strategies.

What we're looking for

  • 7+ years of Information Security Engineering experience or equivalent through work, training, military service, or education.
  • 1+ years of experience providing production support.
  • 1+ years of experience using ticket tracking tools for change, problem, incident, and availability management.
  • Experience designing, implementing, or operating enterprise PKI and certificate lifecycle management solutions (preferred).
  • Experience with certificate management platforms such as Venafi, DigiCert, Microsoft ADCS, Keyfactor, or comparable solutions (preferred).
  • Experience developing automation using Python, PowerShell, Ansible, Terraform, or similar technologies (preferred).
  • Experience with Git-based development workflows and modern software engineering practices like Infrastructure as Code (preferred).
  • Knowledge of cryptographic modernization, machine identity frameworks like SPIFFE/SPIRE, and NIST security standards (preferred).

More like this

Similar roles

Lead Information Security Engineer

Wells Fargo

Minneapolis, MN +4 8 days ago $119,000$206,000
Palo Alto Firewall Fortigate Firewall Network Security Firewalls IPv4 IPv6 Routing Splunk Packet Capture Intrusion Detection Cyber Threat Automation Technical Documentation Network Infrastructure
5+ yrs exp

PKI Engineer

State Street

Quincy, MA 13 days ago $120,000$202,500
PKI Certificate Lifecycle Management Python PowerShell TLS SSL Microsoft ADCS Keyfactor DigiCert APIs Linux Windows Cloud Platforms Networking Automation ServiceNow
5+ yrs exp

Principal Software Engineer, Information Security

Walmart

Bentonville, AR +1 79 days ago $110,000$220,000
PKI HSM DevSecOps CI/CD AWS Azure GCP Kubernetes Terraform Ansible CloudFormation Python Java API cert-manager ACME Infrastructure-as-Code Telemetry
5+ yrs exp

Information Security Engineer

Lam Research

Fremont, CA 43 days ago $92,000$211,000
Silverfort Microsoft Defender for Identity Microsoft Defender for Endpoint Microsoft Defender for Cloud Microsoft Purview Netskope Palo Alto Networks Imperva Perception Point Microsoft Intune Security Copilot IAM DLP EPM WAF CSPM SIEM SOAR Vulnerability Management
8+ yrs exp Hybrid

Principal Information Systems Security Engineer

Leidos

MD 74 days ago $154,050$278,475
Risk Management Framework (RMF) CNSSI 1253 DoD 8500 Zero Trust Cloud Computing Cybersecurity Risk Assessment Information Assurance Incident Response System Engineering
10+ yrs exp

Senior Security Engineer, Identity

Anduril Industries

Costa Mesa, CA +2 99 days ago $166,000$220,000
Identity and Access Management Go Rust Terraform AWS CDK SAML OIDC SCIM OAuth Okta Azure AD CI/CD RBAC ABAC OPA Cedar AWS Azure GCP