> Markdown version of [/jobs/ext/240278-lead-cloud-infrastructure-engineer](https://www.wearedevelopers.com/jobs/ext/240278-lead-cloud-infrastructure-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Lead Cloud Infrastructure Engineer - **Company:** Wells Fargo - **Location:** Charlotte, NC, United States (Remote available) - **Experience:** Expert - **Salary:** $119,000.0 - $224,000.0 - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Artificial Intelligence, Application Performance Management, Architectural Patterns, Microsoft Azure, Bash Shell, Cloud Computing, Continuous Integration, Data Masking, DevOps, Django Web Framework, Github, Monitoring of Systems, Identity and Access Management, Python (Programming Language), Key Management, PostgreSQL, Microsoft SQL Server, SQL Azure, Windows PowerShell, Software Engineering, SQL Databases, Tokenization, Management of Software Versions, Policy as Code, Data Logging, Scripting, Software Modules, Cloud Platform System, Microsoft Power Automate, Azure Data Factory, Cloud Monitoring, ReactJS, Firewalls (Computer Science), Build Management, Hashicorp, Terraform, Api Management, Key Vault, Jenkins, Databricks - **Published:** May 19, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=662a5cb35aa5f2ad ## About the Role Wells Fargo is seeking a Lead Infrastructure Engineer on the Cloud Policy and Data Protection Engineering team within Core Infrastructure Services (CIS). CIS accelerates enterprise application transformation by empowering engineers to build and run secure, scalable applications on cloud platforms. This role requires strong software engineering fundamentals, extensive automation experience, and the ability to design, build, and lead delivery of enterprise cloud compliance and data protection capabilities. Must have extensive experience with scripting and automation practices., * 5+ years of Software Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education * 3+ years full-stack development (ReactJS, Python, Django, MI/ SQL Server) * 3+ years IaC with Terraform and GitHub (module development, versioning, reusable patterns, and compliance controls) * 3+ years cloud platform security services * 3+ years DevOps/CI-CD engineering (GitHub Actions, Jenkins, Harness) Desired Qualifications: * 3 yrs with Azure or GCP platform security services * Scripting in PowerShell/Bash * Experience with key/secret management and encryption technologies * IAM/Entra ID, service accounts, managed identities, least-privilege * Experience automating and managing Palo Alto cloud firewall policies through Terraform, GitHub workflows, or other CI/CD platforms * Cloud networking fundamentals * Terraform Enterprise, remote state/workspaces, policy-as-code * Event-driven automation and modern authentication * CSPM and Cloud Control Matrix familiarity * Azure data services experience (Private Link, Key Vault, Data Factory, Purview, Databricks, Synapse) * Experience with paved-path/internal platform module development * Azure and/or GCP certifications (preferred professional level) * DLP, data masking, tokenization * AI/GenAI for cloud automation ## Description * Design and build internal applications, dashboards, and APIs for cloud policy, firewall, and data-protection services using ReactJS, Python, Django, Postgres SQL and Azure SQL Managed Instance (SQL MI). * Create secure, testable backend services (REST), integrate with cloud policy/KMS platforms, and automation systems. * Build reusable UI components and front-end frameworks that support consistent user experiences across policy, firewall, and data-protection dashboards. * Own the full API lifecycle, including design, versioning, documentation, and long-term maintenance, to support scalable integration patterns across engineering teams. * Implement monitoring and observability for applications and services using tools such as Application Insights, Azure Monitor, and Cloud Logging to ensure reliability and performance. * Ensure strong developer experience (DX) through intuitive APIs, documentation, self-service workflows, and responsive support patterns. Cloud policy engineering: * Engineer and operationalize policy frameworks across Azure and GCP (e.g., Azure Policy, GCP Organization Policy, HashiCorp Sentinel), including remediation, exemptions, compliance mapping. * Resolve complex cloud-control challenges such as VPC-SC errors and guardrail conflicts. * Contribute to companywide standards/best practices, landing-zone patterns, and "secure-by-default" resource templates. Data protection engineering: * Engineer, operate, and automate key and secret management and data protection services (e.g., Azure Key Vault, Managed HSM, Cloud KMS; rotation, audit, monitoring) for Azure and GCP platforms. * Provide Tier-3 engineering support, incident response, and vendor escalation for encryption technologies to ensure resiliency and alignment with enterprise security requirements. Platform, IaC & DevOps: * Design, code, test, and ship cloud infrastructure using Terraform (modules, registries, versioning, policy-as-code) with GitHub and CI/CD (GitHub Actions, Jenkins, Harness). * Implement event-driven automation (Functions/Logic Apps/Event Grid; Pub/Sub equivalents), IaC testing (tflint, compliance tests), and Terraform Enterprise workflows for scale. Leadership & collaboration: * Lead complex, cross-org cloud initiatives; act as an escalation point; mentor engineers; and collaborate with partner teams and vendors in a globally distributed environment. * Define architectural patterns and technical strategy for cloud policy, compliance automation, and data-protection services, ensuring solutions scale across multiple cloud platforms and engineering teams. ## Related Videos - [Enterprise-Cloud-Native - Fast-Paced Development & Deployment in a Highly Secure Banking Environment](https://www.wearedevelopers.com/videos/671-enterprise-cloud-native-fast-paced-development-deployment-in-a-highly-secure-banking-environment) - [The Road to MLOps: How Verivox Transitioned to AWS](https://www.wearedevelopers.com/videos/1050-the-road-to-mlops-how-verivox-transitioned-to-aws) - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next) - [Our GitOps approach for deploying an Identity Provider and an API Gateway in a SaaS company](https://www.wearedevelopers.com/videos/776-our-gitops-approach-for-deploying-an-identity-provider-and-an-api-gateway-in-a-saas-company) - [Inside Bitpanda's Tech Stack: Scaling a European Fintech Leader - Markus Dorner](https://www.wearedevelopers.com/videos/1979-inside-bitpanda-s-tech-stack-scaling-a-european-fintech-leader-markus-dorner) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Got AI ideas but no money? Here are 10 free ways to level up your AI skills with Google Cloud](https://www.wearedevelopers.com/magazine/600-got-ai-ideas-but-no-money-here-are-10-free-ways-to-level-up-your-ai-skills-with-google-cloud) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence) - [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift)