Principal Engineer - IAM Directory Services

About this role:
Wells Fargo is seeking a Principal Engineer to help lead our directory services modernization initiatives. This indivudual will be a key engineer and leader for our Identity & Access Management (IAM) Engineering organization.
In this role, you will:

• Lead the strategy, planning and development of the Active Directory environment
• Ensure compliance with bank security policies and controls as well as government regulations
• Formulate and implement authentication and authorization solutions and controls
• Work with internal teams and external partners to ensure the success of execution of authentication and authorization strategies and roadmap
• Work with external product vendors and professional services vendors to ensure project success
• Architect scalable and secure payment systems, leveraging cutting-edge technologies and best practices to deliver robust, reliable and compliant solutions
• Provide technical leadership and mentorship to a team of engineers, fostering a culture of innovation, collaboration and excellence
• Drive continuous improvement through rigorous evaluation of existing systems and processes, recommending and implementing enhancements to optimize performance, reliability and cost efficiency
• Act as an advisor to leadership to develop or influence applications, network, information security, database, operating systems, or web technologies for highly complex business and technical needs across multiple groups
• Lead the strategy and resolution of highly complex and unique challenges requiring in-depth evaluation across multiple areas or the enterprise, delivering solutions that are long-term, large-scale and require vision, creativity, innovation, advanced analytical and inductive thinking
• Translate advanced technology experience, an in-depth knowledge of the organizations tactical and strategic business objectives, the enterprise technological environment, the organization structure, and strategic technological opportunities and requirements into technical engineering solutions
• Provide vision, direction and expertise to leadership on implementing innovative and significant business solutions
• Maintain knowledge of industry best practices and new technologies and recommends innovations that enhance operations or provide a competitive advantage to the organization
• Strategically engage with all levels of professionals and managers across the enterprise and serve as an expert advisor to leadership

Required Qualifications:

• 7+ years of Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
• 7+ years in Active Directory engineering roles, with enterprise-scale deployments and migrations

Desired Qualifications:

• Ideally, 8-10+ years in Active Directory engineering roles, with enterprise-scale deployments and migrations
• Proven ability to design and implement complex AD forests, federation services, and bastion forest solutions
• Strong scripting skills (PowerShell, Graph API)
• Preferred certifications: MCSE, Microsoft Certified: Identity and Access Administrator, Azure Solutions Architect, Security+, CISSP.
• Expert-level knowledge of Active Directory, Windows Server (2012/2016/2019), DFS, DNS, LDAP, and Kerberos.
• Experience with Azure AD Connect, O365, Exchange Online, and virtualization (VMware, Hyper-V).
• Familiarity with MFA, SSO, Conditional Access, and privileged access management
• Understanding of compliance standards (SOX, ISO, NIST)
• A minimum of a Bachelor's degree in Computer Science, Information Systems, or related field

Job Expectations:

• Ability to work on-site in one of the listed locations. This is a hybrid work environment with no option for fully remote work
• This position is not available for visa sponsorship

Posting End Date:
14 Nov 2025
*Job posting may come down early due to volume of applicants.
We Value Equal Opportunity
Wells Fargo is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic.
Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit's risk appetite and all risk and compliance program requirements.
Candidates applying to job openings posted in Canada: Applications for employment are encouraged from all qualified candidates, including women, persons with disabilities, aboriginal peoples and visible minorities. Accommodation for applicants with disabilities is available upon request in connection with the recruitment process.
Applicants with Disabilities
To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo .
Drug and Alcohol Policy
Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.
Wells Fargo Recruitment and Hiring Requirements:
a. Third-Party recordings are prohibited unless authorized by Wells Fargo.
b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.