remote
Lead Infrastructure Security Engineer - Data at Rest Encryption - Wells Fargo
Security Engineer
Lead the design and delivery of data‑at‑rest encryption solutions, driving tokenization and key‑management initiatives across enterprise infrastructure while collaborating with security, technology, and business stakeholders.
About the role
Key Responsibilities
- Architect, implement, and maintain Transparent Data Encryption solutions for enterprise‑wide data‑at‑rest protection.
- Design and integrate tokenization and key‑management platforms, ensuring compliance with security policies and regulatory requirements.
- Partner with infrastructure, cybersecurity, and line‑of‑business teams to define security requirements and drive product delivery.
- Lead incident response and vulnerability remediation related to encryption technologies.
- Develop technical standards, best practices, and automation scripts to streamline encryption deployment and lifecycle management.
Requirements
- 5+ years of experience in information security engineering, with deep expertise in encryption, tokenization, and key‑management solutions.
- Hands‑on experience with CipherTrust Transparent Data Encryption or comparable TDE platforms.
- Strong understanding of cloud security architectures (AWS, Azure, GCP) and integration of encryption services within them.
- Proven ability to collaborate across cross‑functional teams and influence security strategy.
- Relevant certifications (CISSP, CISM, CEH, or vendor‑specific encryption certifications) preferred.