Senior Information Security Engineer – Directory Services

Wells Fargo

. Design, implement, and maintain secure Active Directory environments, including Domain Services, Group Policy, OU Design, delegation models, trust relationships, and authentication services .

Posted 9/22/2026full-timeUnited StatesSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and securing Active Directory environments, implementing identity governance, and managing authentication technologies. Proficient in developing security standards and controls for cloud identity platforms and Linux authentication services.

Highest-signal resume keywords

Active Directory ManagementMicrosoft Entra ID SecurityIdentity GovernancePrivileged Access ManagementLinux Security Platforms

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Identity Lifecycle ManagementAuthentication TechnologiesPowerShell AutomationKerberosLDAPSAMLOAuthMFARBACABAC

Tools & Technologies

Microsoft SentinelSplunkKQLRadiant Logic Virtual DirectoryPAM

Certifications & Qualifications

Bachelor's Degree in CybersecurityBachelor's Degree in Information TechnologyBachelor's Degree in Computer Science

Industry Keywords

Identity SecurityZero TrustSecurity StandardsControl FrameworksDirectory Service Security

Tech Stack

Tools & technologies

CloudCyber SecurityLinuxSplunk

About the role

Key responsibilities & impact

Design, implement, and maintain secure Active Directory environments, including Domain Services, Group Policy, OU Design, delegation models, trust relationships, and authentication services
Develop and maintain security standards, hardening baselines, and control frameworks for Active Directory and cloud identity platforms
Lead initiatives to reduce identity-related attack surface and improve directory hygiene
Assess and remediate identity security risks, misconfigurations, and excessive privileges
Engineer and support Microsoft Entra ID security controls, including Conditional Access, MFA, passwordless authentication, FIDO2, Passkeys, TAP, Identity Protection, PIM, and workload identity security
Design and implement authentication and authorization controls for cloud applications and enterprise integrations
Develop monitoring and reporting for Entra sign-in activity, authentication events, and security posture metrics
Support cloud identity modernization and Zero Trust initiatives
Design, support, and secure enterprise virtual directory services using Radiant Logic Virtual Directory
Integrate identity repositories including Active Directory, LDAP, cloud identity providers, HR systems, and application repositories
Develop identity aggregation, attribute transformation, and identity correlation strategies
Ensure security, resiliency, and scalability of virtual directory services
Engineer and maintain Linux authentication and authorization integrations using LDAP, Kerberos, SSSD, PAM, SSH security controls, and certificate-based authentication
Secure privileged access across Linux environments through PAM and enterprise credential management integrations
Develop and maintain Linux hardening standards and directory service integrations
Support IAM initiatives including RBAC, ABAC, PAM, service account governance, and non-person entity security
Evaluate emerging authentication technologies and industry best practices
Support identity lifecycle management and governance processes
Investigate directory service security incidents and suspicious authentication activity
Develop detection content using Microsoft Sentinel, Splunk, KQL, and SIEM platforms
Partner with Cyber Defense and Incident Response teams to mitigate identity-based threats
Support threat modeling and security assessments of identity platforms
Partner with internal audit, risk, and regulatory organizations to demonstrate identity control effectiveness
Produce technical documentation, architecture diagrams, control evidence, and security standards
Support regulatory examinations and security reviews involving identity and authentication controls
Drive remediation activities for audit findings and risk observations

Requirements

What you’ll need

4+ years of Information Security Engineering experience, or equivalent demonstrated through work experience, training, military experience, or education
4+ years of experience in Active Directory, Microsoft Entra ID, Radiant Virtual Directory, or Linux security platforms
4+ years of experience in identity governance, authentication technologies, privileged access management, and enterprise security controls
No visa sponsorship now or in the future
Ability to work on-site in one of the listed locations in a hybrid model
Experience with Radiant RBDS platform
Experience administering and securing Microsoft Entra ID environments
Experience with LDAP and directory service architectures
Experience securing Linux platforms and authentication services
Strong understanding of Kerberos, LDAP, SAML, OAuth, and MFA
Experience with PowerShell automation and scripting
Experience supporting enterprise-scale identity environments
Bachelor's Degree in Cybersecurity, Information Technology, Computer Science, or related field, or equivalent experience

Benefits

Comp & perks

Hybrid work model with on-site work in one of the listed locations
Equal opportunity employment
Medical accommodation support during recruitment or interviews
Drug-free workplace