Lead Infrastructure Engineer OS engineering/Azure Cloud

About this role:

Wells Fargo is seeking a Lead Infrastructure Engineer.

In this role, you will:

• Lead complex initiatives to develop infrastructure to provide solutions for business applications
• Participate in various projects intended to continually improve or upgrade the infrastructure
• Evaluate internal and external software solutions which could be leveraged to meet target state architecture goals
• Review and analyze high impact outages to ensure the proper processes and procedures are in place to avoid problems in the future
• Design, build, deploy and maintain infrastructure solutions through collaborative efforts with the team and third party vendors
• Design, code, test, debug and document programs using Agile development practices
• Make decisions in technical designs, implementation plans and identify project risks and resource requirements
• Direct the daily risk and control flow of operations, focusing on policies, procedures and work standards to ensure success
• Recommend courses of action to maintain cost effectiveness and achieve results
• Collaborate and consult with peers, colleagues and managers to resolve issues and achieve goals
• Interact with customer and vendor

Required Qualifications:

• 5+ years of Technology Infrastructure Engineering and Solutions experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

Desired Qualifications:

• 5+ years in infrastructure engineering with strong focus on Windows OS engineering in large enterprise environments.
• Deep understanding of Windows internals (services, kernel components, memory, policies, drivers, certificates, update service).
• Strong hands-on experience with modern endpoint management technologies:
• Azure AD / Entra ID
• Zero Trust
• Certificate services
• Advanced PowerShell engineering skills, including:
• Modular script design
• Strong logging & telemetry
• Error handling & retry logic
• Idempotent execution patterns
• Secure credential handling
• Use of Microsoft Graph & REST APIs
• Experience managing OS lifecycle at scalefeature update flights, ring management, controlled rollout, and rollback plans.
• Strong troubleshooting skills across OS, identity, networking, secure boot/UEFI/TPM, and endpoint security control interactions.
• Familiarity with CI/CD concepts:
• Git/Git branching strategies
• Automated validation pipelines
• Shift left testing
• Artifact versioning
• Infrastructure-as-code or configuration-as-code patterns (where applicable)
• Knowledge of observability for endpoints:
• Log Analytics
• KQL
• Performance troubleshooting
• Experience with driver, firmware, and BIOS/UEFI configuration across OEM hardware.
• Understanding security frameworks such as CIS Benchmarks, Microsoft Security Baselines, Zero Trust principles.
• Strong collaboration and team-player mindset, with ability to lead design sessions and mentor junior engineers.
• Awareness of Agile ways of working, sprint planning, backlog refinement, and continuous improvement.
• Handson experience with DEX/XLA tools such as Nexthink, Lakeside SysTrack, Aternity, ControlUp, Microsoft Endpoint Analytics or similar platform
• Awareness of leveraging AI for daytoday engineering tasks, including using AI tools for automation, analysis, and building intelligent agents to improve operational efficiency.

Job Expectations:

• Participate in high level technical concepts spanning technology and business
• Define and maintain the enterprise OS roadmap (feature updates, end-of-support planning, version cadence).
• Create and maintain hardware driver strategy and compatibility matrices across OEM models
• Own OS-level configuration standards (services, startup, performance tuning, reliability settings).
• Ensure consistent OS experience across device types
• Design, implement, and optimize Windows Autopilot and modern provisioning flows (user-driven, pre-provisioning/white glove).
• Manage and version OS build artifacts (language packs, Features on Demand, optional components, OEM customizations).
• Integrate provisioning with identity, compliance, and access controls (Entra ID / hybrid)
• Improve end-user experience through automation and reduction of provisioning time.
• Engineer monthly patching and feature update strategy aligned to business risk and change windows.
• Manage update rings, rollout waves, deferrals, validation gates, and rollback plans.
• Implement and maintain OS security baselines aligned to security posture (e.g., Microsoft Security Baselines/CIS where applicable).
• Build and maintain automation using advanced PowerShell, scripting, and endpoint management APIs (Microsoft Graph preferred).
• Engineer and support standard OS builds (base images / reference images / provisioning packages).
• Coach and mentor team members, promoting engineering best practices and knowledge sharing.
• Contribute to CI/CD workflows, version control practices, and automation pipelines for OS engineering (e.g., Git, Azure DevOps, GitHub Enterprise).
• Collaborate closely as a strong team player across engineering, security, and operations teams.
• Skilled in Proactive Remediation using Analytics with custom
• Strong understanding of XLA (Experience Level Agreements) and improving digital experience through datadriven insights and proactive remediation and selfhealing scripts.