{"id":3484935,"url":"https://alion.io/job/wells-fargo-principal-engineer-agentic-identity-security","title":"Principal Engineer - Agentic Identity Security","company":{"id":1977,"name":"Wells Fargo","domain":"wellsfargo.com","url":"https://alion.io/company/wells-fargo","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":100,"open_postings":87,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":18,"computed_at":"2026-11-04T06:34:25Z"}},"role":"AI/ML","role_family":"AI/ML","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Las Colinas, United States","Charlotte, United States","Columbus, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":159000,"max":254000,"currency":"USD","period":"year","gross":null,"usd_annual":254000},"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Azure","optional":false},{"name":"Copilot","optional":false},{"name":"CyberArk","optional":false},{"name":"GCP","optional":false},{"name":"Least Privilege","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-28T00:00:00Z","employer_posted_date":"2026-10-28","last_verified_at":"2026-11-04T12:05:42Z","board_verified":true,"closed_at":null,"days_open":7,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":7},"description":"About this role:\nWells Fargo is seeking a Principal Engineer in Cybersecurity as part of Identity and Access Management Engineering. Learn more about career areas and business divisions at wellsfargojobs.com\nThis role will serve as a senior technical leader responsible for defining the enterprise architecture and security strategy for agentic identity, including AI agents, autonomous systems, machine identities, workload identities, and other non-human access models.\nThis role will establish enterprise standards, reference architectures, security patterns, and governance controls that enable responsible AI innovation while maintaining strong security, accountability, auditability, and regulatory compliance.\nThis individual will partner across Identity and Access Management, Cybersecurity, Infrastructure, Product, Engineering, Data, AI Governance, Risk, Compliance, and Enterprise Architecture to deliver secure and scalable identity controls for AI agents and emerging autonomous technologies.\nIn this role, you will:\nAct as an advisor to leadership to develop or influence applications, network, information security, database, operating systems, or web technologies for highly complex business and technical needs across multiple groups\nLead the strategy and resolution of highly complex and unique challenges requiring in-depth evaluation across multiple areas or the enterprise, delivering solutions that are long-term, large-scale and require vision, creativity, innovation, advanced analytical and inductive thinking\nTranslate advanced technology experience, an in-depth knowledge of the organization’s tactical and strategic business objectives, the enterprise technological environment, the organizational structure, and strategic technological opportunities and requirements into technical engineering solutions\nProvide vision, direction and expertise to leadership on implementing innovative and significant business solutions\nMaintain knowledge of industry best practices and emerging technologies and recommend innovations that enhance operations or provide a competitive advantage to the organization\nStrategically engage with all levels of professionals and managers across the enterprise and serve as an expert advisor to leadership\nDefine the enterprise architecture and security strategy for AI agents, autonomous systems, machine identities, workload identities, and other non-human identities\nEstablish reference architectures, engineering standards, reusable security patterns, solution blueprints, and guardrails for agentic identity initiatives\nDesign authentication, authorization, delegation, lifecycle management, observability, accountability, and auditability models for AI agents\nDevelop security patterns for agent registration, ownership, agent-to-agent communication, delegated access, capability-based authorization, and decommissioning\nDefine identity-centric security controls that support Zero Trust principles and reduce reliance on standing privileges and long-lived credentials\nArchitect integrations across enterprise Identity Governance and Administration, Privileged Access Management, cloud, directory, workload identity, and cybersecurity platforms\nPartner with product managers and engineering teams to translate strategic objectives into practical, scalable, and secure identity solutions\nEvaluate emerging platforms, frameworks, and vendor capabilities related to agentic identity, AI security, and non-human identity governance\nEnsure architecture and engineering solutions meet internal control, audit, risk, regulatory, privacy, and compliance requirements\nDemonstrate proficiency in using AI-assisted development and analysis tools, such as GitHub Copilot and approved code-centric agents\nLeverage AI to accelerate system design, coding, testing, analysis, and troubleshooting\nApply strong technical judgment when validating and integrating AI-assisted outputs into solutions\nUnderstand and account for model limitations, security risks, and operational considerations\nApply AI responsibly in development and production environments\nEnsure AI usage aligns with security, compliance, privacy, and ethical standards\nRequired Qualifications:\n7+ years of Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education\n7+ years of experience in Identity and Access Management, cybersecurity, software engineering, or enterprise architecture\n5+ years of experience designing enterprise identity architecture and identity-centric security solutions\nDesired Qualifications:\nExperience defining enterprise architecture and security strategies for agentic AI, autonomous systems, machine identities, workload identities, or other non-human identities\nExperience securing AI agents, large language model integrations, agent orchestration frameworks, and autonomous platforms\nExperience designing authentication, authorization, delegated access, identity lifecycle management, observability, and accountability controls for AI agents\nExperience developing enterprise reference architectures, design standards, reusable security patterns, solution blueprints, and technical guardrails\nDeep understanding of Zero Trust architecture, identity-centric security models, least privilege, short-lived credentials, and policy-based authorization\nExperience designing enterprise-scale Identity Governance and Administration, Privileged Access Management, workload identity, and non-human identity solutions\nExperience with Microsoft Entra ID, Azure, Amazon Web Services, Google Cloud Platform, CyberArk, Saviynt, or similar enterprise identity and cloud platforms\nStrong knowledge of OAuth, OpenID Connect, SAML, SPIFFE/SPIRE, certificates, Public Key Infrastructure, API security, secrets management, and policy-based authorization\nExperience establishing governance controls for agent registration, ownership, delegated authority, monitoring, lifecycle management, and decommissioning\nExperience integrating identity platforms with cloud, container, API, automation, data, and AI ecosystems\nExperience establishing security controls that support auditability, traceability, and accountability for AI-driven actions\nExperience evaluating emerging technologies, platforms, frameworks, and vendor solutions related to AI security and identity\nExperience influencing engineering roadmaps, modernization initiatives, and enterprise-wide architecture decisions\nExperience leading large-scale identity modernization, platform transformation, or emerging technology initiatives\nExperience partnering with engineering, product, cybersecurity, infrastructure, data, AI governance, risk, compliance, and architecture teams\nExperience designing solutions for financial services or other highly regulated environments\nAbility to communicate complex identity and AI security concepts to engineers, executives, auditors, risk partners, and regulators\nExceptional architecture, solution design, and technical documentation skills\nProven ability to influence technical strategy and drive consensus across diverse stakeholder groups\nRelevant identity, cloud, architecture, or security certifications such as CISSP, CCSP, SABSA, TOGAF, or equivalent credentials\nLocations:\n300 S Brevard, Charlotte, North Carolina 28202\n401 Las Colinas Blvd W Bldg. A, Irving, Texas 75039\n3075 Loyalty Cir., Columbus, Ohio 43219\nPosting Statements:\nJob posting may come down early due to volume of applicants.\nRequired location(s) listed above. Relocation assistance is not available for this position.\nSalary range is determined by location of the job. May be considered for a discretionary bonus, Restricted Share Rights, or other long-term incentive awards.\nThis position is not eligible for visa sponsorship.\nPay Range\nReflected is the base pay range offered for this position. Pay may vary depending on factors including but not limited to demonstrated examples of prior performance, skills, experience, or work location. Employees may also be eligible for incentive opportunities.\n$159,000.00 - $254,000.00\nBenefits\nWells Fargo provides eligible employees with a comprehensive set of benefits, many of which are listed below. Visit Benefits - Wells Fargo Jobs for an overview of the following benefit plans and programs offered to employees.\nHealth benefits\n401(k) Plan\nPaid time off\nDisability benefits\nLife insurance, critical illness insurance, and accident insurance\nParental leave\nCritical caregiving leave\nDiscounts and savings\nCommuter benefits\nTuition reimbursement\nScholarships for dependent children\nAdoption reimbursement\nPosting End Date:\n4 Nov 2026*Job posting may come down early due to volume of applicants.\nWe Value Equal Opportunity\nWells Fargo is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic.\nEmployees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit’s risk appetite and all risk and compliance program requirements.\nApplicants with Disabilities\nTo request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo.\nDrug and Alcohol Policy\nWells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.\nWells Fargo Recruitment and Hiring Requirements:\na. Third-Party recordings are prohibited unless authorized by Wells Fargo.\nb. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.","description_format":"text","description_chars":10431,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Life insurance","Parental leave","Relocation assistance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":true,"industries":["Wealth Management & Financial Advisors","Information Security","Investment Banking & M&A Advisory","Mortgage Lending & Brokers"],"lifecycle":[{"event":"open","at":"2026-10-29T21:27:27Z"}],"visa":[],"liveness":{"score":81,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":0.9,"age_days":7,"expected_fill_days":18,"reasons":["conf:5","velocity","win:mid","comp:brand"],"computed_at":"2026-11-04T06:34:25Z"},"pay":{"stated_usd_annual":254000,"is_top_pay":true},"html_url":"https://alion.io/job/wells-fargo-principal-engineer-agentic-identity-security","json_url":"https://alion.io/job/wells-fargo-principal-engineer-agentic-identity-security.json","meta":{"generated_at":"2026-11-04T12:50:24Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":19359,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1977},"rest":"https://alion.io/mcp/rest/get_company?id=1977"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fwells-fargo-principal-engineer-agentic-identity-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fwells-fargo-principal-engineer-agentic-identity-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fwells-fargo-principal-engineer-agentic-identity-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/wells-fargo-principal-engineer-agentic-identity-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fwells-fargo-principal-engineer-agentic-identity-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3484935}},{"tool":"search_jobs","arguments":{"company":"wellsfargo.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3484935},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}