Principal Engineer - AWS Platform Engineering

The Principal Engineer will lead the design and implementation of foundational AWS services including AWS Landing Zones, AWS Organizations, Identity and Access Management (IAM), networking, security guardrails, and platform automation capabilities. Working closely with cloud architecture, cybersecurity, infrastructure, and engineering teams, this individual will help establish scalable, secure, and compliant patterns that accelerate AWS adoption across the enterprise.In This Role, You WillAWS Platform Engineering LeadershipLead the engineering design, implementation, and evolution of Wells Fargo's AWS platform capabilities.Partner with cloud architecture and engineering leaders to translate strategic direction into scalable platform services.Serve as the senior technical leader within the AWS platform engineering team, driving engineering excellence and operational maturity.Establish engineering standards, reusable patterns, reference implementations, and automation frameworks.AWS Landing Zones & OrganizationsLead the design and ongoing evolution of AWS Landing Zones and multi-account operating models.Define and govern AWS Organizational Unit (OU) structures, account lifecycle management, account vending processes, and environment segmentation strategies.Implement and manage governance controls using AWS Organizations, Service Control Policies (SCPs), Control Tower, and policy-based guardrails.Drive continuous improvements to account onboarding and operational automation.Identity & Access ManagementDesign and implement enterprise IAM solutions and access control strategies.Define standards for federation, IAM Identity Center, role-based access controls, and privileged access management.Establish least-privilege access patterns and scalable authorization models across AWS environments.Partner with security teams to strengthen cloud identity governance and compliance.Networking & ConnectivityLead engineering efforts related to AWS networking and connectivity services.Design and implement solutions leveraging VPCs, AWS Cloud WAN, Transit Gateway, Direct Connect, Route 53, PrivateLink, and VPC Endpoints.Establish secure connectivity patterns between AWS, on-premises environments, Azure, and GCP.Drive architectural improvements for resiliency, segmentation, performance, and disaster recovery.Platform Automation & DevOpsChampion Infrastructure as Code and platform automation using Terraform and GitHub.Define reusable Terraform modules, automated deployment pipelines, and self-service platform capabilities.Promote GitOps, Policy as Code, and platform engineering best practices.Improve operational efficiency through automation, standardization, and engineering discipline.Future Platform CapabilitiesEvaluate and enable emerging AWS services that align with platform strategy.Support future expansion into AI/ML platform capabilities including Amazon Bedrock and related AWS services.Contribute to the development of secure consumption patterns for advanced AWS services and platform offerings.Help establish engineering standards for newly adopted AWS capabilities.Technical Leadership & MentorshipMentor senior engineers and provide technical guidance across AWS platform initiatives.Lead design reviews and technical decision-making for complex platform projects.Drive collaboration across infrastructure, cybersecurity, operations, architecture, and application teams.Influence technical direction through expertise, partnership, and engineering leadership.Required Qualifications7+ years of Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education7+ years of cloud engineering experience.5+ years of hands-on AWS engineering experience.5+ years of experience designing and operating enterprise AWS platforms.5+ years of experience with AWS Organizations, multi-account architectures, and governance frameworks.5+ years of experience with AWS networking services and hybrid cloud connectivity architectures.4+ years of experience implementing Infrastructure as Code using Terraform.Proven experience leading complex technical initiatives and influencing engineering teams.Desired QualificationsDeep expertise in:AWS Landing ZonesAWS OrganizationsAWS Control TowerAWS IAM and IAM Identity CenterService Control Policies (SCPs)AWS Cloud WANAWS Transit GatewayAWS Direct ConnectRoute 53AWS PrivateLinkVPC EndpointsExperience building cloud platforms within highly regulated financial services environments.Strong knowledge of cloud security, risk management, and compliance controls.Experience integrating AWS environments with enterprise identity, networking, and security services.Advanced Terraform expertise including reusable module development and platform automation.Experience with GitHub Enterprise, CI/CD pipelines, and GitOps methodologies.Experience with Amazon Bedrock or other AWS AI/ML services.Strong Python, PowerShell, and automation skills.AWS Professional and Specialty certifications preferred.Job Expectations:This position is not eligible for Visa sponsorship.Telecommuting is not available; this is a hybrid role.Relocation assistance is not provided.Pay RangeReflected is the base pay range offered for this position. Pay may vary depending on factors including but not limited to demonstrated examples of prior performance, skills, experience, or work location. Employees may also be eligible for incentive opportunities.$159,000.00 - $305,000.00Benefits Wells Fargo provides eligible employees with a comprehensive set of benefits, many of which are listed below. Visit Benefits - Wells Fargo Jobs for an overview of the following benefit plans and programs offered to employees.Health benefits401(k) PlanPaid time offDisability benefitsLife insurance, critical illness insurance, and accident insuranceParental leaveCritical caregiving leaveDiscounts and savingsCommuter benefitsTuition reimbursementScholarships for dependent childrenAdoption reimbursementPosting End Date:5 Sep 2026*Job posting may come down early due to volume of applicants.We Value Equal OpportunityWells Fargo is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic.Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit’s risk appetite and all risk and compliance program requirements.Applicants with DisabilitiesTo request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo.Drug and Alcohol PolicyWells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.Wells Fargo Recruitment and Hiring Requirements:a. Third-Party recordings are prohibited unless authorized by Wells Fargo.b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.SummaryLocation: MCLEAN, VA; IRVING, TX; CHARLOTTE, NC; MINNEAPOLIS, MN; ISELIN, NJType: Full time