Principal Engineer – AWS Platform Engineering

The Principal Engineer will lead the design and implementation of foundational AWS services including AWS Landing Zones, AWS Organizations, Identity and Access Management (IAM), networking, security guardrails, and platform automation capabilities. Working closely with cloud architecture, cybersecurity, infrastructure, and engineering teams, this individual will help establish scalable, secure, and compliant patterns that accelerate AWS adoption across the enterprise.
 

In This Role, You Will

AWS Platform Engineering Leadership

• Lead the engineering design, implementation, and evolution of Wells Fargo's AWS platform capabilities.
• Partner with cloud architecture and engineering leaders to translate strategic direction into scalable platform services.
• Serve as the senior technical leader within the AWS platform engineering team, driving engineering excellence and operational maturity.
• Establish engineering standards, reusable patterns, reference implementations, and automation frameworks.

AWS Landing Zones & Organizations

• Lead the design and ongoing evolution of AWS Landing Zones and multi-account operating models.
• Define and govern AWS Organizational Unit (OU) structures, account lifecycle management, account vending processes, and environment segmentation strategies.
• Implement and manage governance controls using AWS Organizations, Service Control Policies (SCPs), Control Tower, and policy-based guardrails.
• Drive continuous improvements to account onboarding and operational automation.

Identity & Access Management

• Design and implement enterprise IAM solutions and access control strategies.
• Define standards for federation, IAM Identity Center, role-based access controls, and privileged access management.
• Establish least-privilege access patterns and scalable authorization models across AWS environments.
• Partner with security teams to strengthen cloud identity governance and compliance.

Networking & Connectivity

• Lead engineering efforts related to AWS networking and connectivity services.
• Design and implement solutions leveraging VPCs, AWS Cloud WAN, Transit Gateway, Direct Connect, Route 53, PrivateLink, and VPC Endpoints.
• Establish secure connectivity patterns between AWS, on-premises environments, Azure, and GCP.
• Drive architectural improvements for resiliency, segmentation, performance, and disaster recovery.

Platform Automation & DevOps

• Champion Infrastructure as Code and platform automation using Terraform and GitHub.
• Define reusable Terraform modules, automated deployment pipelines, and self-service platform capabilities.
• Promote GitOps, Policy as Code, and platform engineering best practices.
• Improve operational efficiency through automation, standardization, and engineering discipline.

Future Platform Capabilities

• Evaluate and enable emerging AWS services that align with platform strategy.
• Support future expansion into AI/ML platform capabilities including Amazon Bedrock and related AWS services.
• Contribute to the development of secure consumption patterns for advanced AWS services and platform offerings.
• Help establish engineering standards for newly adopted AWS capabilities.

Technical Leadership & Mentorship

• Mentor senior engineers and provide technical guidance across AWS platform initiatives.
• Lead design reviews and technical decision-making for complex platform projects.
• Drive collaboration across infrastructure, cybersecurity, operations, architecture, and application teams.
• Influence technical direction through expertise, partnership, and engineering leadership.

Required Qualifications

• 7+ years of Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
• 7+ years of cloud engineering experience.
• 5+ years of hands-on AWS engineering experience.
• 5+ years of experience designing and operating enterprise AWS platforms.
• 5+ years of experience with AWS Organizations, multi-account architectures, and governance frameworks.
• 5+ years of experience with AWS networking services and hybrid cloud connectivity architectures.
• 4+ years of experience implementing Infrastructure as Code using Terraform.
• Proven experience leading complex technical initiatives and influencing engineering teams.

Desired Qualifications

Deep expertise in:

• AWS Landing Zones
• AWS Organizations
• AWS Control Tower
• AWS IAM and IAM Identity Center
• Service Control Policies (SCPs)
• AWS Cloud WAN
• AWS Transit Gateway
• AWS Direct Connect
• Route 53
• AWS PrivateLink
• VPC Endpoints
• Experience building cloud platforms within highly regulated financial services environments.
• Strong knowledge of cloud security, risk management, and compliance controls.
• Experience integrating AWS environments with enterprise identity, networking, and security services.
• Advanced Terraform expertise including reusable module development and platform automation.
• Experience with GitHub Enterprise, CI/CD pipelines, and GitOps methodologies.
• Experience with Amazon Bedrock or other AWS AI/ML services.
• Strong Python, PowerShell, and automation skills.
• AWS Professional and Specialty certifications preferred.

Job Expectations:

• This position is not eligible for Visa sponsorship.
• Telecommuting is not available; this is a hybrid role.
• Relocation assistance is not provided.

Pay Range
 

Reflected is the base pay range offered for this position. Pay may vary depending on factors including but not limited to demonstrated examples of prior performance, skills, experience, or work location. Employees may also be eligible for incentive opportunities.

$159,000.00 - $305,000.00

Posting End Date:

23 Jul 2026

*Job posting may come down early due to volume of applicants.

We Value Equal Opportunity

Wells Fargo is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic.

Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit’s risk appetite and all risk and compliance program requirements.

Applicants with Disabilities

To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo.

Drug and Alcohol Policy

 

Wells Fargo maintains a drug free workplace.  Please see our Drug and Alcohol Policy to learn more.

Wells Fargo Recruitment and Hiring Requirements:

a. Third-Party recordings are prohibited unless authorized by Wells Fargo.

b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.