Lead Infrastructure Engineer –OS engineering/Azure Cloud

About this role:

Wells Fargo is seeking a Lead Infrastructure Engineer.

In this role, you will:

• Lead complex initiatives to develop infrastructure to provide solutions for business applications

• Participate in various projects intended to continually improve or upgrade the infrastructure

• Evaluate internal and external software solutions which could be leveraged to meet target state architecture goals

• Review and analyze high impact outages to ensure the proper processes and procedures are in place to avoid problems in the future

• Design, build, deploy and maintain infrastructure solutions through collaborative efforts with the team and third party vendors

• Design, code, test, debug and document programs using Agile development practices

• Make decisions in technical designs, implementation plans and identify project risks and resource requirements

• Direct the daily risk and control flow of operations, focusing on policies, procedures and work standards to ensure success

• Recommend courses of action to maintain cost effectiveness and achieve results

• Collaborate and consult with peers, colleagues and managers to resolve issues and achieve goals

• Interact with customer and vendor

Required Qualifications:

• 5+ years of Technology Infrastructure Engineering and Solutions experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

Desired Qualifications:

• 5+ years in infrastructure engineering with strong focus on Windows OS engineering in large enterprise environments.

• Deep understanding of Windows internals (services, kernel components, memory, policies, drivers, certificates, update service).

• Strong hands-on experience with modern endpoint management technologies:

• Azure AD / Entra ID

• Zero Trust

• Certificate services

• Advanced PowerShell engineering skills, including:

• Modular script design

• Strong logging & telemetry

• Error handling & retry logic

• Idempotent execution patterns

• Secure credential handling

• Use of Microsoft Graph & REST APIs

• Experience managing OS lifecycle at scale—feature update flights, ring management, controlled rollout, and rollback plans.

• Strong troubleshooting skills across OS, identity, networking, secure boot/UEFI/TPM, and endpoint security control interactions.

• Familiarity with CI/CD concepts:

• Git/Git branching strategies

• Automated validation pipelines

• Shift left testing

• Artifact versioning

• Infrastructure-as-code or configuration-as-code patterns (where applicable)

• Knowledge of observability for endpoints:

• Log Analytics

• KQL

• Performance troubleshooting

• Experience with driver, firmware, and BIOS/UEFI configuration across OEM hardware.

• Understanding security frameworks such as CIS Benchmarks, Microsoft Security Baselines, Zero Trust principles.

• Strong collaboration and team-player mindset, with ability to lead design sessions and mentor junior engineers.

• Awareness of Agile ways of working, sprint planning, backlog refinement, and continuous improvement.

• Hands‑on experience with DEX/XLA tools such as Nexthink, Lakeside SysTrack, Aternity, ControlUp, Microsoft Endpoint Analytics or similar platform

• Awareness of leveraging AI for day‑to‑day engineering tasks, including using AI tools for automation, analysis, and building intelligent agents to improve operational efficiency.

Job Expectations:

• Participate in high level technical concepts spanning technology and business

• Define and maintain the enterprise OS roadmap (feature updates, end-of-support planning, version cadence).

• Create and maintain hardware driver strategy and compatibility matrices across OEM models

• Own OS-level configuration standards (services, startup, performance tuning, reliability settings).

• Ensure consistent OS experience across device types

• Design, implement, and optimize Windows Autopilot and modern provisioning flows (user-driven, pre-provisioning/white glove).

• Manage and version OS build artifacts (language packs, Features on Demand, optional components, OEM customizations).

• Integrate provisioning with identity, compliance, and access controls (Entra ID / hybrid)  

• Improve end-user experience through automation and reduction of provisioning time.

• Engineer monthly patching and feature update strategy aligned to business risk and change windows.

• Manage update rings, rollout waves, deferrals, validation gates, and rollback plans.

• Implement and maintain OS security baselines aligned to security posture (e.g., Microsoft Security Baselines/CIS where applicable).

• Build and maintain automation using advanced PowerShell, scripting, and endpoint management APIs (Microsoft Graph preferred).

• Engineer and support standard OS builds (base images / reference images / provisioning packages).

• Coach and mentor team members, promoting engineering best practices and knowledge sharing.

• Contribute to CI/CD workflows, version control practices, and automation pipelines for OS engineering (e.g., Git, Azure DevOps, GitHub Enterprise).

• Collaborate closely as a strong team player across engineering, security, and operations teams.

• Skilled in Proactive Remediation using Analytics with custom

• Strong understanding of XLA (Experience Level Agreements) and improving digital experience through data‑driven insights and proactive remediation and self‑healing scripts.

Posting End Date: 

7 Sep 2026

*Job posting may come down early due to volume of applicants.

We Value Equal Opportunity

Wells Fargo is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic.

Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit’s risk appetite and all risk and compliance program requirements.

Candidates applying to job openings posted in Canada: Applications for employment are encouraged from all qualified candidates, including women, persons with disabilities, aboriginal peoples and visible minorities. Accommodation for applicants with disabilities is available upon request in connection with the recruitment process.

Applicants with Disabilities

To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo.

Drug and Alcohol Policy

 

Wells Fargo maintains a drug free workplace.  Please see our Drug and Alcohol Policy to learn more.

Wells Fargo Recruitment and Hiring Requirements:

a. Third-Party recordings are prohibited unless authorized by Wells Fargo.

b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.