Principal Engineer - Agentic Identity Security

About this role:

Wells Fargo is seeking a Principal Engineer in Cybersecurity as part of Identity and Access Management Engineering. Learn more about career areas and business divisions at wellsfargojobs.com

This role will serve as a senior technical leader responsible for defining the enterprise architecture and security strategy for agentic identity, including AI agents, autonomous systems, machine identities, workload identities, and other non-human access models.

This role will establish enterprise standards, reference architectures, security patterns, and governance controls that enable responsible AI innovation while maintaining strong security, accountability, auditability, and regulatory compliance.

This individual will partner across Identity and Access Management, Cybersecurity, Infrastructure, Product, Engineering, Data, AI Governance, Risk, Compliance, and Enterprise Architecture to deliver secure and scalable identity controls for AI agents and emerging autonomous technologies.

In this role, you will:

• Act as an advisor to leadership to develop or influence applications, network, information security, database, operating systems, or web technologies for highly complex business and technical needs across multiple groups
• Lead the strategy and resolution of highly complex and unique challenges requiring in-depth evaluation across multiple areas or the enterprise, delivering solutions that are long-term, large-scale and require vision, creativity, innovation, advanced analytical and inductive thinking
• Translate advanced technology experience, an in-depth knowledge of the organization’s tactical and strategic business objectives, the enterprise technological environment, the organizational structure, and strategic technological opportunities and requirements into technical engineering solutions
• Provide vision, direction and expertise to leadership on implementing innovative and significant business solutions
• Maintain knowledge of industry best practices and emerging technologies and recommend innovations that enhance operations or provide a competitive advantage to the organization
• Strategically engage with all levels of professionals and managers across the enterprise and serve as an expert advisor to leadership
• Define the enterprise architecture and security strategy for AI agents, autonomous systems, machine identities, workload identities, and other non-human identities
• Establish reference architectures, engineering standards, reusable security patterns, solution blueprints, and guardrails for agentic identity initiatives
• Design authentication, authorization, delegation, lifecycle management, observability, accountability, and auditability models for AI agents
• Develop security patterns for agent registration, ownership, agent-to-agent communication, delegated access, capability-based authorization, and decommissioning
• Define identity-centric security controls that support Zero Trust principles and reduce reliance on standing privileges and long-lived credentials
• Architect integrations across enterprise Identity Governance and Administration, Privileged Access Management, cloud, directory, workload identity, and cybersecurity platforms
• Partner with product managers and engineering teams to translate strategic objectives into practical, scalable, and secure identity solutions
• Evaluate emerging platforms, frameworks, and vendor capabilities related to agentic identity, AI security, and non-human identity governance
• Ensure architecture and engineering solutions meet internal control, audit, risk, regulatory, privacy, and compliance requirements
• Demonstrate proficiency in using AI-assisted development and analysis tools, such as GitHub Copilot and approved code-centric agents
• Leverage AI to accelerate system design, coding, testing, analysis, and troubleshooting
• Apply strong technical judgment when validating and integrating AI-assisted outputs into solutions
• Understand and account for model limitations, security risks, and operational considerations
• Apply AI responsibly in development and production environments
• Ensure AI usage aligns with security, compliance, privacy, and ethical standards

Required Qualifications:

• 7+ years of Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
• 7+ years of experience in Identity and Access Management, cybersecurity, software engineering, or enterprise architecture
• 5+ years of experience designing enterprise identity architecture and identity-centric security solutions

Desired Qualifications:

• Experience defining enterprise architecture and security strategies for agentic AI, autonomous systems, machine identities, workload identities, or other non-human identities
• Experience securing AI agents, large language model integrations, agent orchestration frameworks, and autonomous platforms
• Experience designing authentication, authorization, delegated access, identity lifecycle management, observability, and accountability controls for AI agents
• Experience developing enterprise reference architectures, design standards, reusable security patterns, solution blueprints, and technical guardrails
• Deep understanding of Zero Trust architecture, identity-centric security models, least privilege, short-lived credentials, and policy-based authorization
• Experience designing enterprise-scale Identity Governance and Administration, Privileged Access Management, workload identity, and non-human identity solutions
• Experience with Microsoft Entra ID, Azure, Amazon Web Services, Google Cloud Platform, CyberArk, Saviynt, or similar enterprise identity and cloud platforms
• Strong knowledge of OAuth, OpenID Connect, SAML, SPIFFE/SPIRE, certificates, Public Key Infrastructure, API security, secrets management, and policy-based authorization
• Experience establishing governance controls for agent registration, ownership, delegated authority, monitoring, lifecycle management, and decommissioning
• Experience integrating identity platforms with cloud, container, API, automation, data, and AI ecosystems
• Experience establishing security controls that support auditability, traceability, and accountability for AI-driven actions
• Experience evaluating emerging technologies, platforms, frameworks, and vendor solutions related to AI security and identity
• Experience influencing engineering roadmaps, modernization initiatives, and enterprise-wide architecture decisions
• Experience leading large-scale identity modernization, platform transformation, or emerging technology initiatives
• Experience partnering with engineering, product, cybersecurity, infrastructure, data, AI governance, risk, compliance, and architecture teams
• Experience designing solutions for financial services or other highly regulated environments
• Ability to communicate complex identity and AI security concepts to engineers, executives, auditors, risk partners, and regulators
• Exceptional architecture, solution design, and technical documentation skills
• Proven ability to influence technical strategy and drive consensus across diverse stakeholder groups
• Relevant identity, cloud, architecture, or security certifications such as CISSP, CCSP, SABSA, TOGAF, or equivalent credentials

Locations:

• 300 S Brevard, Charlotte, North Carolina 28202
• 401 Las Colinas Blvd W Bldg. A, Irving, Texas 75039
• 3075 Loyalty Cir., Columbus, Ohio 43219

Posting Statements:

• Job posting may come down early due to volume of applicants.
• Required location(s) listed above. Relocation assistance is not available for this position.
• Salary range is determined by location of the job. May be considered for a discretionary bonus, Restricted Share Rights, or other long-term incentive awards.
• This position is not eligible for visa sponsorship.

Pay Range
 

Reflected is the base pay range offered for this position. Pay may vary depending on factors including but not limited to demonstrated examples of prior performance, skills, experience, or work location. Employees may also be eligible for incentive opportunities.
$159,000.00 - $254,000.00

Posting End Date:

27 Sep 2026

*Job posting may come down early due to volume of applicants.

We Value Equal Opportunity

Wells Fargo is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic.

Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit’s risk appetite and all risk and compliance program requirements.

Applicants with Disabilities

To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo.

Drug and Alcohol Policy

Wells Fargo maintains a drug free workplace.  Please see our Drug and Alcohol Policy to learn more.

Wells Fargo Recruitment and Hiring Requirements:

a. Third-Party recordings are prohibited unless authorized by Wells Fargo.

b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.