Lead Architect – IAM AWS Cloud (IAM Solution Design)

About this role: Wells Fargo is seeking a Lead IAM AWS Architect in Cybersecurity as part of Identity Access Management. Learn more about career areas and business divisions at wellsfargojobs.com The Lead Architect will partner closely with Cybersecurity, Cloud Engineering, Infrastructure, Risk, Product, and Application teams to define and implement secure, scalable, and resilient cloud identity architectures. This role will serve as a key technical leader responsible for establishing enterprise standards, reference architectures, and design patterns that enable secure cloud adoption while supporting Zero Trust principles, regulatory requirements, and business objectives. In this role, you will: Lead the implementation of complex projects and initiatives that have companywide scope Lead the development and adoption of AWS IAM reference architectures, design standards, and solution patterns Define architecture strategies supporting authentication, authorization, federation, access governance, and privileged access management within AWS environments Identify medium to high architectural impact projects Conduct complex technology and system assessments for architecture solutions Communicate the companywide Architecture strategy and direction to both management and systems related teams Make decisions in the development and maintenance of architectures Understand compliance and risk management requirements for supported areas Promote automation, Identity-as-Code, and API-driven integration capabilities across cloud identity services. Collaborate and consult with peers, colleagues and managers to resolve issues and achieve goals Demonstrate proficiency in using AI‑assisted development and analysis tools (e.g., GitHub Copilot and approved code‑centric agents) Leverage AI to accelerate system design, coding, testing, analysis, and troubleshooting Apply strong technical judgment when validating and integrating AI‑assisted outputs into solutions Understand and account for model limitations, security risks, and operational considerations Apply AI responsibly in development and production environments Ensure AI usage aligns with security, compliance, privacy, and ethical standards Required Qualifications: 5+ years of Architecture experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education 5+ years of experience designing and implementing enterprise-scale Identity and Access Management and cloud security solutions.

Deep expertise in AWS IAM, AWS Identity Center, AWS Organizations, Service Control Policies (SCPs), federation, roles, policies, and cross-account access models. Experience developing enterprise architecture strategies, reference architectures, technology standards, and cloud transformation roadmaps. Strong knowledge of cloud security principles including Zero Trust, least privilege, Role-Based Access Control (RBAC), and Attribute-Based Access Control (ABAC). Experience designing identity governance, privileged access management, and cloud entitlement management solutions. Knowledge of authentication and identity protocols including SAML, OAuth, OpenID Connect (OIDC), SCIM, and federation technologies. Experience supporting large-scale AWS environments in highly regulated organizations. Experience implementing Identity-as-Code, infrastructure automation, and API-first integration patterns. Ability to evaluate and mitigate cloud identity, access, and entitlement risks while balancing security, usability, and operational efficiency. Experience supporting SOX, SOC1, SOC2, PCI-DSS, FFIEC, or other regulatory compliance programs. Strong executive communication, stakeholder management, and architecture leadership skills. Industry certifications such as AWS Certified Solutions Architect Professional, AWS Certified Security Specialty, CISSP, CCSP, TOGAF, SABSA, or comparable credentials. ​ Locations:  300 S