What are the responsibilities and job description for the Information Security Engineer position at Wells Fargo?
Title: Information Security Engineer
Location: Chandler, AZ
Alternative Locations: Dallas, TX, Charlotte, NC, Minneapolis, MN, or Columbus, OH
Duration: 18 months
Work Engagement: W2
Work Schedule: 3 days in office/2 days remote
Benefits on offer for this contract position: Health Insurance, Life insurance, 401K and Voluntary Benefits
Summary:
We are seeking a Senior Information Security Engineer to support enterprise IAM platforms, including both vendor solutions such as CyberArk and internally developed IAM applications. This role focuses on operational stability, execution of daily service requests, adherence to SLAs, and full lifecycle management of change requests. The engineer will troubleshoot issues, support integrations, perform hygiene/audit tasks, and participate in on‑call rotations for critical IAM services.
Key Responsibilities:
Provide day‑to‑day operational support for IAM platforms including CyberArk and in‑house IAM applications.
Perform BAU activities such as account unlocks/unsuspends, onboarding/offboarding, password rotations, health checks, and access lifecycle tasks.
Analyze, create, validate, implement, and close change requests in alignment with established processes.
Support requests from IAM integration teams and internal stakeholders.
Perform operational hygiene tasks including human/non-human account cleanup, permissions reviews, and audit activities.
Troubleshoot incidents, assist in root-cause analysis, and support platform upgrades, patching, and maintenance.
Identify and implement automation opportunities using scripting and APIs.
Participate in on‑call rotations to ensure high availability of IAM services.
Key Requirements:
Applicants must be authorized to work for ANY employer in the U.S. This position is not eligible for visa sponsorship.
Experience in Information Security, with a strong emphasis on Identity and Access Management (IAM).
Hands-on experience administering CyberArk or comparable Privileged Access Management (PAM) platforms.
Demonstrated ability to manage change requests end‑to‑end, including analysis, build, validation, implementation, and closure.
Proven experience supporting production IAM environments with defined SLAs and operational support processes.
Strong scripting and automation skills, including PowerShell, Python, and RESTful APIs.
Solid understanding of IAM principles, including access lifecycle management, role-based access control, and operational security best practices.
Ability and willingness to participate in on‑call rotations to ensure high availability of critical IAM services.
CyberArk certifications (Defender, Sentry, Guardian) or equivalent experience with other IAM/PAM solutions.
Experience supporting custom-built or in‑house IAM applications.
Working knowledge of Active Directory, Windows and Linux administration, and cloud IAM integrations (AWS and/or Azure).