Senior Infrastructure Engineer End User Compute

Job Summary

Wells Fargo is seeking a...

In this role, you will:

• Lead or participate in high level technical concepts spanning technology and business
• Develop specifications for complex infrastructure systems, design and test solutions
• Contribute to the testing of business, application and technical infrastructure requirements
• Drive solutions to reduce recovery
• Review and analyze solutions for cloud security, secrets management and key rotations
• Design, code, test, debug and document programs using Agile development practices
• Design complex system upgrades
• Resolve troublesome trends as they develop
• Develop a long range plan designed to resolve problems and prevent them from recurring
• Direct the daily risk and control flow of operations, focusing on policies, procedures and work standards to ensure success
• Collaborate and consult with peers, colleagues and managers to resolve issues and achieve goals

Required Qualifications

• 4+ years of Technology Infrastructure Engineering and Solutions experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

Desired Qualifications

• 5+ years in infrastructure engineering with strong focus on Windows OS engineering in enterprise environments.
• Deep understanding of Windows internals (services, kernel components, memory, policies, drivers, certificates, update service).
• Strong hands-on experience with modern endpoint management technologies:
• Azure AD / Entra ID
• Zero Trust
• Certificate services
• Advanced PowerShell engineering skills, including:
• Modular script design
• Strong logging telemetry
• Error handling retry logic
• Idempotent execution patterns
• Secure credential handling
• Use of Microsoft Graph REST APIs
• Experience managing OS lifecycle at scalefeature update flights, ring management, controlled rollout, and rollback plans.
• Strong troubleshooting skills across OS, identity, networking, secure boot/UEFI/TPM, and endpoint security control interactions.
• Familiarity with CI/CD concepts:
• Git/Git branching strategies
• Automated validation pipelines
• Shift left testing
• Artifact versioning
• Infrastructure-as-code or configuration-as-code patterns (where applicable)
• Knowledge of observability for endpoints:
• Log Analytics
• KQL
• Performance troubleshooting
• Experience with driver, firmware, and BIOS/UEFI configuration across OEM hardware.
• Understanding security frameworks such as CIS Benchmarks, Microsoft Security Baselines, Zero Trust principles.
• Strong collaboration and team-player mindset, with ability to lead design sessions and mentor junior engineers.
• Awareness of Agile ways of working, sprint planning, backlog refinement, and continuous improvement.
• Handson experience with Aternity, ControlUp, Microsoft Endpoint Analytics or similar platform
• Awareness of leveraging AI for daytoday engineering tasks, including using AI tools for automation, analysis, and building intelligent agents to improve operational efficiency.

Job Expectations

• Participate in high level technical concepts spanning technology and business
• Define and maintain the enterprise OS roadmap (feature updates, end-of-support planning, version cadence).
• Create and maintain hardware driver strategy and compatibility matrices across OEM models
• Own OS-level configuration standards (services, startup, performance tuning, reliability settings).
• Ensure consistent OS experience across device types
• Design, implement, and optimize Windows Autopilot and modern provisioning flows (user-driven, pre-provisioning/white glove).
• Manage and version OS build artifacts (language packs, Features on Demand, optional components, OEM customizations).
• Integrate provisioning with identity, compliance, and access controls (Entra ID / hybrid)
• Improve end-user experience through automation and reduction of provisioning time.
• Engineer monthly patching and feature update strategy aligned to business risk and change windows.
• Manage update rings, rollout waves, deferrals, validation gates, and rollback plans.
• Implement and maintain OS security baselines aligned to security posture (e.g., Microsoft Security Baselines/CIS where applicable).
• Engineer and support standard OS builds (base images / reference images / provisioning packages).
• Build and maintain automation using PowerShell, scripting, and endpoint management APIs (Microsoft Graph preferred).
• Reduce manual operational work by designing self-service and self-healing solutions.