Principal Engineer - Agentic Identity Security

About this role:Wells Fargo is seeking a Principal Engineer in Cybersecurity as part of Identity and Access Management Engineering. Learn more about career areas and business divisions at wellsfargojobs.comThis role will serve as a senior technical leader responsible for defining the enterprise architecture and security strategy for agentic identity, including AI agents, autonomous systems, machine identities, workload identities, and other non-human access models.This role will establish enterprise standards, reference architectures, security patterns, and governance controls that enable responsible AI innovation while maintaining strong security, accountability, auditability, and regulatory compliance.This individual will partner across Identity and Access Management, Cybersecurity, Infrastructure, Product, Engineering, Data, AI Governance, Risk, Compliance, and Enterprise Architecture to deliver secure and scalable identity controls for AI agents and emerging autonomous technologies.In this role, you will:Act as an advisor to leadership to develop or influence applications, network, information security, database, operating systems, or web technologies for highly complex business and technical needs across multiple groupsLead the strategy and resolution of highly complex and unique challenges requiring in-depth evaluation across multiple areas or the enterprise, delivering solutions that are long-term, large-scale and require vision, creativity, innovation, advanced analytical and inductive thinkingTranslate advanced technology experience, an in-depth knowledge of the organization’s tactical and strategic business objectives, the enterprise technological environment, the organizational structure, and strategic technological opportunities and requirements into technical engineering solutionsProvide vision, direction and expertise to leadership on implementing innovative and significant business solutionsMaintain knowledge of industry best practices and emerging technologies and recommend innovations that enhance operations or provide a competitive advantage to the organizationStrategically engage with all levels of professionals and managers across the enterprise and serve as an expert advisor to leadershipDefine the enterprise architecture and security strategy for AI agents, autonomous systems, machine identities, workload identities, and other non-human identitiesEstablish reference architectures, engineering standards, reusable security patterns, solution blueprints, and guardrails for agentic identity initiativesDesign authentication, authorization, delegation, lifecycle management, observability, accountability, and auditability models for AI agentsDevelop security patterns for agent registration, ownership, agent-to-agent communication, delegated access, capability-based authorization, and decommissioningDefine identity-centric security controls that support Zero Trust principles and reduce reliance on standing privileges and long-lived credentialsArchitect integrations across enterprise Identity Governance and Administration, Privileged Access Management, cloud, directory, workload identity, and cybersecurity platformsPartner with product managers and engineering teams to translate strategic objectives into practical, scalable, and secure identity solutionsEvaluate emerging platforms, frameworks, and vendor capabilities related to agentic identity, AI security, and non-human identity governanceEnsure architecture and engineering solutions meet internal control, audit, risk, regulatory, privacy, and compliance requirementsDemonstrate proficiency in using AI-assisted development and analysis tools, such as GitHub Copilot and approved code-centric agentsLeverage AI to accelerate system design, coding, testing, analysis, and troubleshootingApply strong technical judgment when validating and integrating AI-assisted outputs into solutionsUnderstand and account for model limitations, security risks, and operational considerationsApply AI responsibly in development and production environmentsEnsure AI usage aligns with security, compliance, privacy, and ethical standardsRequired Qualifications:7+ years of Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education7+ years of experience in Identity and Access Management, cybersecurity, software engineering, or enterprise architecture5+ years of experience designing enterprise identity architecture and identity-centric security solutionsDesired Qualifications:Experience defining enterprise architecture and security strategies for agentic AI, autonomous systems, machine identities, workload identities, or other non-human identitiesExperience securing AI agents, large language model integrations, agent orchestration frameworks, and autonomous platformsExperience designing authentication, authorization, delegated access, identity lifecycle management, observability, and accountability controls for AI agentsExperience developing enterprise reference architectures, design standards, reusable security patterns, solution blueprints, and technical guardrailsDeep understanding of Zero Trust architecture, identity-centric security models, least privilege, short-lived credentials, and policy-based authorizationExperience designing enterprise-scale Identity Governance and Administration, Privileged Access Management, workload identity, and non-human identity solutionsExperience with Microsoft Entra ID, Azure, Amazon Web Services, Google Cloud Platform, CyberArk, Saviynt, or similar enterprise identity and cloud platformsStrong knowledge of OAuth, OpenID Connect, SAML, SPIFFE/SPIRE, certificates, Public Key Infrastructure, API security, secrets management, and policy-based authorizationExperience establishing governance controls for agent registration, ownership, delegated authority, monitoring, lifecycle management, and decommissioningExperience integrating identity platforms with cloud, container, API, automation, data, and AI ecosystemsExperience establishing security controls that support auditability, traceability, and accountability for AI-driven actionsExperience evaluating emerging technologies, platforms, frameworks, and vendor solutions related to AI security and identityExperience influencing engineering roadmaps, modernization initiatives, and enterprise-wide architecture decisionsExperience leading large-scale identity modernization, platform transformation, or emerging technology initiativesExperience partnering with engineering, product, cybersecurity, infrastructure, data, AI governance, risk, compliance, and architecture teamsExperience designing solutions for financial services or other highly regulated environmentsAbility to communicate complex identity and AI security concepts to engineers, executives, auditors, risk partners, and regulatorsExceptional architecture, solution design, and technical documentation skillsProven ability to influence technical strategy and drive consensus across diverse stakeholder groupsRelevant identity, cloud, architecture, or security certifications such as CISSP, CCSP, SABSA, TOGAF, or equivalent credentialsLocations:300 S Brevard, Charlotte, North Carolina 28202401 Las Colinas Blvd W Bldg. A, Irving, Texas 750393075 Loyalty Cir., Columbus, Ohio 43219Posting Statements:Job posting may come down early due to volume of applicants.Required location(s) listed above. Relocation assistance is not available for this position.Salary range is determined by location of the job. May be considered for a discretionary bonus, Restricted Share Rights, or other long-term incentive awards.This position is not eligible for visa sponsorship.Pay RangeReflected is the base pay range offered for this position. Pay may vary depending on factors including but not limited to demonstrated examples of prior performance, skills, experience, or work location. Employees may also be eligible for incentive opportunities. $159,000.00 - $254,000.00Benefits Wells Fargo provides eligible employees with a comprehensive set of benefits, many of which are listed below. Visit Benefits - Wells Fargo Jobs for an overview of the following benefit plans and programs offered to employees.Health benefits401(k) PlanPaid time offDisability benefitsLife insurance, critical illness insurance, and accident insuranceParental leaveCritical caregiving leaveDiscounts and savingsCommuter benefitsTuition reimbursementScholarships for dependent childrenAdoption reimbursementPosting End Date:27 Sep 2026*Job posting may come down early due to volume of applicants.We Value Equal OpportunityWells Fargo is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic.Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit’s risk appetite and all risk and compliance program requirements.Applicants with DisabilitiesTo request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo.Drug and Alcohol PolicyWells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.Wells Fargo Recruitment and Hiring Requirements:a. Third-Party recordings are prohibited unless authorized by Wells Fargo.b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.SummaryLocation: IRVING, TX; CHARLOTTE, NC; COLUMBUS, OHType: Full time