Lead Architect - Identity Access Management

Wells Fargo is seeking a Lead Architect in Cybersecurity to support Identity Access Management (IAM). The architect will partner closely with application development, platform engineering, cloud, infrastructure, cybersecurity, risk, and line-of-business teams to establish scalable, secure, and resilient identity controls for applications, services, workloads, APIs, containers, CI/CD pipelines, and emerging AI platforms.

Responsibilities

• Lead the implementation of complex projects and initiatives that have companywide scope
• Assist in the creation of architectural artifacts for key technology initiatives
• Participate in the definition of future technology architecture and strategy
• Identify medium to high architectural impact projects
• Conduct complex technology and system assessments for architecture solutions
• Communicate the companywide Architecture strategy and direction to both management and systems-related teams
• Make decisions in the development and maintenance of architectures
• Understand compliance and risk management requirements for supported areas
• Ensure applications adhere to established Wells Fargo standards, policies, methodologies, and industry best practices
• Collaborate and consult with peers, colleagues, and managers to resolve issues and achieve goals
• Demonstrate proficiency in using AI-assisted development and analysis tools (e.g., GitHub Copilot and approved code-centric agents)
• Leverage AI to accelerate system design, coding, testing, analysis, and troubleshooting
• Apply strong technical judgment when validating and integrating AI-assisted outputs into solutions
• Understand and account for model limitations, security risks, and operational considerations
• Apply AI responsibly in development and production environments
• Ensure AI usage aligns with security, compliance, privacy, and ethical standards

Requirements

• 5+ years of Architecture experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
• 5+ years of experience implementing enterprise-scale Identity Access Management solutions

Qualifications

• Deep expertise in Non-Human Identity (NHI), Machine Identity Management (MIM), Secrets Management, and Privileged Access Management
• Experience designing vaulting architectures supporting large-scale application, cloud, and workload ecosystems
• Experience managing or securing CI/CD platforms including Jenkins, GitHub Actions, Azure DevOps, or similar technologies
• Experience with cloud platforms such as AWS, Azure, and Kubernetes-based environments
• Experience implementing enterprise solutions using CyberArk, HashiCorp Vault, SailPoint, Saviynt, Okta, or related IAM technologies
• Experience developing architecture strategies, technology roadmaps, and transformation programs
• Knowledge of cryptographic key management, certificate lifecycle management, and hardware security modules (HSMs)
• Experience supporting SOX, SOC1, SOC2, PCI-DSS, FFIEC, or other regulatory compliance programs
• Experience implementing security controls for AI platforms, agent-based systems, or machine-to-machine communications
• Industry certifications such as CISSP, CCSP, SABSA, TOGAF, CyberArk Defender/Sentry, HashiCorp Vault Certification, or comparable credentials

Locations: 194 S Wood Ave - Iselin, NJ 08830; 401 Las Colinas Blvd W Bldg. A - Irving, TX 75039. Relocation assistance is not available for this position.

Pay

Salary range is determined by location of the job and may vary depending on factors including but not limited to demonstrated examples of prior performance, skills, experience, or work location. The base pay range for this position is $119,000.00 - $224,000.00. Employees may also be eligible for incentive opportunities, including a discretionary bonus, Restricted Share Rights, or other long-term incentive awards.

Benefits

• Health benefits
• 401(k) Plan
• Paid time off
• Disability benefits
• Life insurance, critical illness insurance, and accident insurance
• Parental leave
• Critical caregiving leave
• Discounts and savings
• Commuter benefits
• Tuition reimbursement
• Scholarships for dependent children
• Adoption reimbursement