About this role:

The architect will partner closely with application development, platform engineering, cloud, infrastructure, cybersecurity, risk, and line-of-business teams to establish scalable, secure, and resilient identity controls for applications, services, workloads, APIs, containers, CI/CD pipelines, and emerging AI platforms.

This role will influence enterprise architecture decisions, develop reference architectures and standards, and lead strategic initiatives focused on machine identities, secrets lifecycle management, privileged access, and zero trust security principles.

In this role, you will:

• Act as an advisor to senior leadership to develop the architectural framework & delivery for highly complex business and technical needs across multiple groups
• Lead the strategy and resolution of highly complex and unique challenges requiring in-depth evaluation across multiple areas or the enterprise, delivering products and solutions that are long-term, large-scale, and require vision, creativity, innovation, advanced analytical and inductive thinking
• Provide vision, direction, and expertise to senior leadership on implementing the transformation strategy describing the current state, target state, and transition architecture
• Develop and influence strategic plans, investment planning, and execution on cutover strategies to target
• Strategically engage with all levels of professionals and managers across the enterprise and serve as an architectural domain expert advisor to leadership
• Drive target investments towards target technologies and rationalize spend, total cost of ownership, and return on investment
• Ensure applications adhere to established Wells Fargo standards, policies, methodologies, and industry best practices as it transforms toward target state architecture
• Drive the definition, establishment, selection of strategic tools, and application of architecture frameworks
• Maintain knowledge of industry best practices and new technologies and recommends innovations that enhance operations or provide a competitive advantage to the organization and can influence internal and vendor roadmaps in a significant capacity
• Demonstrate proficiency in using AIassisted development and analysis tools (e.g., GitHub Copilot and approved codecentric agents)
• Leverage AI to accelerate system design, coding, testing, analysis, and troubleshooting
• Apply strong technical judgment when validating and integrating AIassisted outputs into solutions
• Understand and account for model limitations, security risks, and operational considerations
• Apply AI responsibly in development and production environments
• Ensure AI usage aligns with security, compliance, privacy, and ethical standards

Required Qualifications:

• 7+ years of architecture experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

• 7+ years of experience implementing enterprise-scale Identity Access Management solutions

Desired Qualifications:

• Deep expertise in Identity Governance, Privileged Access Management, authentication, authorization, and security architecture.
• Experience designing distributed, cloud-native platforms using microservices and APIs.Strong knowledge of AWS, Kubernetes, Docker, CI/CD, Infrastructure as Code, and platform engineering practices.
• Experience with enterprise IAM and PAM solutions such as Saviynt, CyberArk, BeyondTrust, Oracle Identity Manager, or equivalent platforms.
• Proficiency in Java/Spring ecosystem and modern application architecture patterns.
• Experience working with regulated environments, audit requirements, and security compliance programs.
• Experience with AI security, secure generative AI platforms, Agentic AI, and model governance.
• Knowledge of Zero Trust Architecture and machine/workload identity security.
• Experience defining enterprise reference architectures and architecture governance standards.
• Ability to influence technology strategy across large, complex organizations.
• Industry certifications in cloud, security, cybersecurity, or architecture disciplines.

Locations:

• 150 E 42nd Street, New York, NY 10017

Posting Statements:

• Job posting may come down early due to volume of applicants.
• Required location(s) listed above. Relocation assistance is not available for this position
• Salary range is determined by location of the job. May be considered for a discretionary bonus, Restricted Share Rights, or other long term incentive awards.
• This position is not eligible for visa sponsorship
• This role is NOT available for 100% remote work

Pay Range

Reflected is the base pay range offered for this position. Pay may vary depending on factors including but not limited to demonstrated examples of prior performance, skills, experience, or work location. Employees may also be eligible for incentive opportunities.

Posting End Date:

*Job posting may come down early due to volume of applicants.