Job Description

Responsibilities About this role

Cryptographic Engineering Team is focused on the design, provisioning, build and day-to-day management, operations, engineering, and vulnerability remediation for all cryptographic infrastructure delivering cryptographic solutions across Wells Fargo. Cryptographic Engineering Team is seeking a Senior Information Security Engineer to work on end-to-end engineering and management of multiple data protection/encryption solutions along with production support responsibilities.

In this role, you will:
Provide Tier 3 support and engineering for multiple data protection technologies deployed across Wells Fargo networks, applications, public key infrastructure and authentication services.
Performs access, configuration change and health monitoring of cryptographic appliances/Hardware Security Modules(HSM)/Key Management Systems (KMS) which may include reviewing logs, writing scripts for automation of tasks, and taking other technical actions required to keep infrastructure healthy and highly available
Need to be capable of creating technical/engineering documentation and have excellent written and oral communication.
Participate in the research, analysis, design, testing and implementation of complex data protection technologies alongside other teams within our organization.
Participates in interactions with encryption technology vendors helps to ensure vendor product engineering is in line with the objectives and security requirements of Wells Fargo
Work with partner Engineering Teams on identification and remediation of security vulnerabilities and may also conduct risk assessments of Infrastructure to ensure compliance with corporate security policies and adherence to best practices.
Performs access, configuration change and health monitoring of appliances/HSMs, which may include reviewing logs, writing scripts for automation of tasks, and taking other technical actions required to keep Infrastructure healthy and highly available.
Provide periodic 24/7 on-call support rotation and some work will be required to be done during off hours.
May provide technical guidance to less experienced staff. Given the nature of the encryption technologies, the team environment is very fast paced and requires the ability to drive to solutions as an individual and to work effectively with the team as well.

Required Qualifications:
4 years of information security applications and systems experience
3 years of Linux operating system engineering or automation
2 years of experience with supporting, or strong conceptual understanding of, data encryption technologies and/or infrastructure
2 years of experience with databases such as Oracle, DB2, SQL server, Mongo db, Teradata.
Experience providing production support and end to end management of production servers or appliances
Must have intermediate to advanced systems engineering experience in medium to large Enterprise environments
Capable of creating technical/engineering documentation
Participates in interactions with encryption technology vendors helps to ensure vendor product engineering is in line with the objectives and security requirements of Wells Fargo and coordinates with the vendor support team to ensure issues impacting Wells Fargo are resolved quickly and effectively
Excellent written and oral communication
Participates in interactions with technical, engineering, and non-technical partners across the Enterprise for technologies listed above
Bachelors and/or Masters degree in Engineering or Technology or related streams.

Desired Qualifications:
Experience with engineering and support of cryptographic products such as Vormetric key management, Voltage SecureData, CipherTrust Data Security, Entrust nCipher HSM, Safenet Luna HSM etc.
Experience with Agile Scrum (Daily Standup, Sprint Planning and Sprint Retrospective meetings) and Kanban process
Knowledge and understanding of encryption technologies for file/folder encryption, database encryption, application encryption & storage encryption technology
Knowledge of Cryptographic protocols & algorithms
Understanding of (format preserving encryption) FPE, tokenization and TDE (transparent data encryption) etc.
Knowledge of Key Management life cycle and key rotation policies
Knowledge and understanding of implementing infrastructure upgrades, security patches, version upgrades for systems, appliances and HSMs
Knowledge on security technology product evaluation, proof of concepts, & testing
Knowledge of Python and PowerShell scripting
Ability to coordinate completion of multiple tasks and meet aggressive time frames
Certified Information Systems Security Professional (CISSP) certification
Customer engagement & service experience, working with L1 & L2 engineers to support critical incidents
Experience facilitating meetings with team members in various remote locations
Advanced problem solving and technical troubleshooting capabilities
Education: Any Graduate
Industry: Financial Services/Stockbroking, Banking

Skills Required