Principal Systems Architect - Application Security

About the Role

Wells Fargo is seeking a Principal Security Architect – Application Security to shape the future of secure software development across one of the world’s largest financial institutions. As a senior technical leader, you will influence enterprise security strategy, define architecture standards, and drive secure‑by‑design practices across modern application platforms, cloud‑native technologies, software supply chains, and emerging technologies, including AI‑enabled systems.

Responsibilities

• Advise senior technology and cybersecurity leaders on application security strategy, architecture, and risk management.
• Define and drive enterprise security standards, reference architectures, design patterns, and security requirements.
• Lead security architecture reviews, threat modeling, and risk assessments for strategic initiatives, enterprise platforms, and emerging technologies.
• Champion secure‑by‑design practices across application development, APIs, cloud‑native platforms, DevSecOps pipelines, and software supply chain ecosystems.
• Lead enterprise initiatives related to secure software development, software supply chain security, developer security platforms, application security modernization, and secure AI adoption.
• Influence enterprise technology strategy, architectural direction, and investment decisions that advance secure software development and technology modernization.
• Evaluate technologies through architecture analysis, design reviews, prototyping, automation, and technical experimentation.
• Drive adoption of automation and AI‑enabled capabilities that improve security outcomes, engineering productivity, and operational efficiency.
• Mentor architects and senior engineers while fostering technical excellence and innovation.

Required Qualifications

• 7+ years of architecture experience, or equivalent demonstrated through work experience, training, military experience, or education.
• 7+ years of Architecture, Application Security, Software Security, or related cybersecurity experience.
• Deep expertise in application security architecture, secure software development, software supply chain security, threat modeling, and modern application architectures.
• Experience establishing enterprise security standards, architecture patterns, governance frameworks, or strategic initiatives adopted across multiple organizations.
• Experience leading enterprise‑scale transformation initiatives involving application security, secure software development, software supply chain security, developer security platforms, or secure adoption of emerging technologies.
• Strong technical and engineering background with the ability to evaluate architectures, review technical designs, assess application code, and validate solutions through prototyping or proof‑of‑concept development.
• Experience securing modern application ecosystems, including APIs, cloud‑native platforms, software delivery pipelines, open‑source software, and distributed architectures.
• Proven ability to influence senior technology leaders, architects, engineering organizations, and cybersecurity stakeholders.

Desired Qualifications

• Expertise in cloud‑native security, API security, DevSecOps, and software supply chain security.
• Experience with modern application security capabilities, including SAST, DAST, SCA, secrets detection, infrastructure‑as‑code security, container security, SBOM management, and CI/CD security controls.
• Experience developing secure software, automation, security tooling, reusable frameworks, prototypes, or proof‑of‑concepts.
• Demonstrated engineering depth sufficient to engage credibly with software engineers and evaluate application code, development practices, and emerging technologies.
• Knowledge of secure AI development practices, AI‑assisted development technologies, AI application architectures, and security approaches for AI‑enabled systems.
• Ability to translate complex technical challenges into enterprise standards, architecture patterns, and strategic recommendations.

Job Expectations

• Hybrid work schedule.
• Position is not eligible for Visa sponsorship.
• Demonstrate proficiency in using AI‑assisted development and analysis tools (e.g., GitHub Copilot and approved code‑centric agents).
• Leverage AI to accelerate system design, coding, testing, analysis, and troubleshooting.
• Apply strong technical judgment when validating and integrating AI‑assisted outputs into solutions.
• Understand and account for model limitations, security risks, and operational considerations.
• Apply AI responsibly in development and production environments, ensuring alignment with security, compliance, privacy, and ethical standards.

Pay

Base pay ranges vary by location: $159,000 – $254,000 (Charlotte, NC; Chandler, AZ; Irving, TX) and $175,000 – $279,000 (Minneapolis, MN). Pay may vary based on performance, skills, experience, or work location. Employees may also be eligible for incentive opportunities.

Benefits

• Health benefits
• 401(k) plan
• Paid time off
• Disability benefits
• Life, critical illness, and accident insurance
• Parental leave
• Critical caregiving leave
• Discounts and savings programs
• Commuter benefits
• Tuition reimbursement
• Scholarships for dependent children
• Adoption reimbursement