> Markdown version of [/jobs/ext/561285-lead-information-security-engineer-contract](https://www.wearedevelopers.com/jobs/ext/561285-lead-information-security-engineer-contract). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Lead Information Security Engineer (contract) - **Company:** Wells Fargo - **Location:** Irving, TX, United States - **Experience:** Expert - **Contract:** Temporary contract - **Skills:** Agile Methodology, Microsoft Azure, Cloud Computing, Cloud Computing Security, Cloud Database, Cyber Security, Continuous Integration, Data Mining, Query Languages, Github, Information Security Management, Python (Programming Language), Microsoft Office, Scrum Methodology, Policy as Code, Data Logging, Google Cloud, Infrastructure as Code (IaC), Gitlab-ci, Kubernetes, Deployment Automation, Cloud Migration, Api Design, Restful APIs, Terraform, Prisma Cloud Platform, Devsecops, Jenkins - **Published:** June 17, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=206ff61f24dbb7f3 ## About the Role Do you have experience in DevOps automation?, * Applicants must be authorized to work for ANY employer in the U.S. This position is not eligible for visa sponsorship. * Demonstrated experience in Information Security Engineering or equivalent * Strong experience with Terraform and automation frameworks * Practical experience and strong understanding of Azure and Google Cloud (GCP) platforms, services, configurations, workloads, and hardening practices * Experience with Rego and/or Resource Query Language (RQL) * Experience working with REST APIs for data extraction, transformation, and integration * Advanced experience with Python programming and automation * Familiarity with CI/CD tools (GitHub Actions, Jenkins, GitLab CI, Azure DevOps) * Strong analytical, problem-solving, and critical thinking abilities * Ability to work independently and collaboratively across distributed teams * Strong communication skills (written and verbal) * Experience working in an Agile delivery environment * Proficiency with Microsoft Office tools * Ability to manage multiple, high-priority deliverables concurrently * Hands-on experience with Wiz CNAPP (CSPM) (preferred) * Advanced experience with Rego policy automation (preferred) * Strong understanding of DevSecOps practices and cloud automation * Expertise in API-driven policy creation and automation * Experience with Infrastructure as Code (IaC) and Policy as Code (PaC) * Knowledge of automated testing frameworks * Experience with Kubernetes platforms (AKS, GKE, OCP preferred) * Familiarity with cloud security frameworks: + CSA, CIS, NIST * Experience with enterprise change and incident management processes * Relevant certifications such as: + CISSP, CISM, CISA, CRISC, CCSK, GIAC + Azure and/or Google Cloud certifications ## Description We are seeking a highly skilled Lead Information Security Engineer to join the Cloud Workload Lifecycle Security (CWLS) - Posture Management Engineering team. This role plays a critical part in securing the enterprise's cloud transformation by designing, engineering, and supporting cloud security posture management (CSPM) solutions. The position will focus on leading the migration from Palo Alto Prisma Cloud Enterprise to Wiz CNAPP, with deep specialization in Cloud Security Posture Management (CSPM) capabilities. The engineer will drive policy-as-code innovation, automate detection of cloud misconfigurations and configuration drift, and enable scalable integrations across enterprise security platforms. This is a fast-paced, highly collaborative environment supporting a distributed global team., * Lead engineering efforts supporting the migration from Prisma Cloud Enterprise to Wiz CNAPP (CSPM module) * Develop and enhance Policy-as-Code (PaC) frameworks using Rego, including semi-automation capabilities for scalable policy creation * Serve as Subject Matter Expert (SME) for Wiz CSPM features, roadmap, and best practices * Design and optimize security detections for: + Public cloud misconfigurations + Configuration drift detection + On-demand scanning (including IDE integrations for developers) * Translate security requirements into effective Rego policies * Build and maintain integrations for logging, findings delivery, and partner systems * Utilize REST APIs for data extraction, transformation, and automation workflows * Collaborate closely with engineering teams, partners, and vendors * Lead technical discussions and design scalable cloud security solutions * Troubleshoot and resolve Wiz CSPM escalations and production issues * Contribute to internal code repositories, improving quality and automation * Create clear, comprehensive documentation for all solutions * Train and mentor team members on PaC automation frameworks * Operate effectively in an Agile (Scrum/Kanban) environment * Manage multiple high-priority initiatives with minimal oversight ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines) - [The Road to MLOps: How Verivox Transitioned to AWS](https://www.wearedevelopers.com/videos/1050-the-road-to-mlops-how-verivox-transitioned-to-aws) - [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next) - [Enterprise-Cloud-Native - Fast-Paced Development & Deployment in a Highly Secure Banking Environment](https://www.wearedevelopers.com/videos/671-enterprise-cloud-native-fast-paced-development-deployment-in-a-highly-secure-banking-environment) - [DevSecOps: Security in DevOps](https://www.wearedevelopers.com/videos/36-devsecops-security-in-devops) ## Related Articles - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Why Attend a Developer Event in 2026?](https://www.wearedevelopers.com/magazine/688-why-attend-a-developer-event-in-2026) - [Find a Developer Job: 12 Best Job Sites For Developers](https://www.wearedevelopers.com/magazine/165-find-a-developer-job-12-best-job-sites-for-developers)