> Markdown version of [/jobs/ext/2117081-lead-infrastructure-engineer-encryption](https://www.wearedevelopers.com/jobs/ext/2117081-lead-infrastructure-engineer-encryption). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Lead Infrastructure Engineer (Encryption... - **Company:** Wells Fargo - **Location:** Columbus, OH, United States (Remote available) - **Experience:** Expert - **Salary:** $119,000.0 - $224,000.0 - **Contract:** Permanent contract - **Skills:** Systems Engineering, Audit Trail, Microsoft Azure, Cloud Engineering, Databases, System Configuration, Continuous Integration, DevOps, Github, Key Management, Lightweight Directory Access Protocols (LDAP), Linux System Administration, Linux Servers, OpenID, Performance Tuning, Public Key Infrastructure, Systems Development Life Cycle, Red Hat Enterprise Linux, Ansible, Systems Integration, SSL Certificate Management, Google Cloud, Delivery Pipeline, Grafana, Multi-Cloud, Git Flow, Kubernetes, Performance Monitor, Hashicorp, Terraform, Splunk - **Published:** August 19, 2026 - **Apply:** https://www.juju.com/job/00000000gnuslx ## About the Role + 5+ years of Technology Infrastructure Engineering and Solutions experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education + 3+ years of hands-on experience with HashiCorp Vault, with a proven track record in enterprise-grade Vault design, deployment, and automation + 1+ years of Linux system administration, required for installing, configuring, securing, and troubleshooting Vault clusters + 1+ years of the Vault lifecycle, including installation, upgrades, HA deployment, scaling, and cluster maintenance Desired Qualifications: + Practical experience with Enterprise Change Management, change control processes, and operating within procedural, compliance-driven environments + Hands-on expertise with Terraform, Ansible, CI/CD pipelines, and GitHub, with strong understanding of modern automation pipelines for Vault provisioning and configuration + Proven experience designing, integrating, and maintaining Vault Secret Engines, including: KV, Database, PKI, Azure, GCP, LDAP, Dynamic secret engines, and secret rotation flows + Strong experience designing, implementing, and maintaining Vault Auth Engines, such as: LDAP, AppRole, Kubernetes, JWT/OIDC, TLS Certificate authentication + Hands-on experience implementing Vault Auto-Unseal using HSM-based solutions + Experience configuring and maintaining Vault audit logging, monitoring, and metrics, using tools like Splunk, Grafana, and other observability platforms. + Hands-on expertise with Vault Agent, templates, auto-auth, and Vault Proxy integrations + Should have hands on experience in using Hashicorp Vault service like (Key management system, Secret and certificate management) + Good knowledge of DevOps and SDLC for IaC CI/CD concepts, GitHub, branching strategies + Professional HashiCorp Vault Certification (HVCP or equivalent) ## Description This position will be part of a Team that performs engineering and management of data protection technologies that includes Hashicorp Vault. Candidates must have intermediate to advanced systems engineering experience in medium to large Enterprise environments. Must have extensive experience with Linux Server operating systems, Red Hat preferred. Experience providing production support and end to end management of HSMs and/or security appliances and/or data protection/encryption technologies. Need to be capable of creating technical/engineering documentation and have excellent written and oral communication. Must have extensive experience with scripting and automation practices. Participates in interactions with encryption technology and HSM vendors - helps to ensure vendor product engineering is in line with the objectives and security requirements of Wells Fargo and coordinates with the vendor support teams to ensure issues impacting Wells Fargo are resolved quickly and effectively. Participates in interactions with technical, engineering and non-technical partners companywide for the technologies listed above. In this role, you will: + Independently design, implement, and manage secure, highly available HashiCorp Vault platform with minimal oversight from lead engineers + Contribute to end-to-end automation of Vault provisioning, configuration, and lifecycle management using Ansible and Terraform + Develop and enforce platform standards for secrets management, authentication, authorization, and Vault best practices across the organization + Analyze and solve complex technical challenges, including cloud native and multi-cloud integrations, Kubernetes auth setups, PKI hierarchies, replication, and performance optimization + Collaborate directly with cross-functional teams-security, platform engineering, application teams, product owners, and vendors-to deliver architecturally sound Vault solutions + Troubleshoot deep technical issues independently, including HA failures, unseal workflows, auth method problems, and secret engine configuration errors + Implement advanced Vault capabilities, such as static and dynamic secrets, PKI secret engine, dynamic Database secrets, and namespace management + Guide and support engineering teams, providing Vault expertise, technical recommendations, and onboarding assistance without requiring constant supervision + Drive continuous improvement, identifying opportunities for automation, performance tuning, reliability enhancements, and security hardening across Vault deployments, Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit's risk appetite and all risk and compliance program requirements. ## Related Videos - [Securing Secrets in the GitOps era](https://www.wearedevelopers.com/videos/546-securing-secrets-in-the-gitops-era) - [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next) - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [Best Practices for Using GitHub Secrets](https://www.wearedevelopers.com/videos/1214-best-practices-for-using-github-secrets) - [Bringing AI Model Testing and Prompt Management to Your Codebase with GitHub Models](https://www.wearedevelopers.com/videos/1536-bringing-ai-model-testing-and-prompt-management-to-your-codebase-with-github-models) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Where to Find Entry-Level Software Engineering Jobs](https://www.wearedevelopers.com/magazine/397-where-to-find-entry-level-software-engineering-jobs) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)