Leads firewall automation, certification, testing, and secure NGFW architecture across enterprise data centers and cloud environments. Develops provisioning and policy-management automation using Python, Ansible, REST APIs, and related tools. Oversees upgrades, performance analysis, compliance, documentation, and Agile firewall projects while mentoring engineers and collaborating with network and cybersecurity teams.
We are seeking a Lead Firewall Automation and Certification Engineer to join our FirewallDEV team within the Application Hosting - Secure Network Services organization. This role is ideal for a technical leader passionate about network security and automation, with deep expertise in Next-Generation Firewall platforms.
You will play a pivotal role in designing, automating, and maintaining secure network infrastructure across our data centers, enabling secure connectivity to business partners, the public Internet, and cloud providers. This position is central to our transformation efforts-driving automation, improving transparency, and enhancing operational efficiency.
In this role, you will:
Required Qualifications:
Desired Qualifications:
Job Expectations:
Pay Range
Reflected is the base pay range offered for this position. Pay may vary depending on factors including but not limited to demonstrated examples of prior performance, skills, experience, or work location. Employees may also be eligible for incentive opportunities.
$119,000.00 - $187,000.00
Benefits
Wells Fargo provides eligible employees with a comprehensive set of benefits, many of which are listed below. Visit Benefits - Wells Fargo Jobs for an overview of the following benefit plans and programs offered to employees.
Posting End Date:
2 Nov 2026
* Job posting may come down early due to volume of applicants.
We Value Equal Opportunity
Wells Fargo is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic.
Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit's risk appetite and all risk and compliance program requirements.
Applicants with Disabilities
To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo .
Drug and Alcohol Policy
Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.
Wells Fargo Recruitment and Hiring Requirements:
a. Third-Party recordings are prohibited unless authorized by Wells Fargo.
b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.
You will play a pivotal role in designing, automating, and maintaining secure network infrastructure across our data centers, enabling secure connectivity to business partners, the public Internet, and cloud providers. This position is central to our transformation efforts-driving automation, improving transparency, and enhancing operational efficiency.
In this role, you will:
- Conduct rigorous testing and certification of next-generation firewalls (NGFWs) to validate performance, security efficacy, compliance with industry standards Labs), and interoperability across diverse network environments.
- Design and implement scalable, secure NGFW architectures across enterprise environments.
- Lead cross-functional teams in planning and delivering firewall-related projects using Agile methodologies.
- Develop automation solutions for firewall provisioning, policy management, and operational tasks using Python, Ansible, and other tools.
- Perform complex firewall certifications, upgrade testing, and developing templated configurations.
- Ensure compliance with security and regulatory requirements in all firewall implementations.
- Analyze performance trends and recommend improvements to firewall operations and automation.
- Collaborate with network and cyber partner teams to educate and collaborate for success.
- Mentor junior engineers and contribute to technical design documentation.
Required Qualifications:
- 5+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
- 3+ years of hands-on experience with NGFW platforms
- 3+ years of automation experience
- 3+ years' experience with firewall policy design, NAT, VPNs, threat prevention features, and templated installations
- 3+ plus years' experience with Python, Ansible, REST APIs, and automation frameworks
Desired Qualifications:
- Conduct rigorous testing and certification of next-generation firewalls (NGFWs) to validate performance, security efficacy, compliance with industry standards (e.g., ICSA Labs, NSS Labs), and interoperability across diverse network environments.
- Strong Networking Knowledge - Proficiency in TCP/IP, routing, switching, VPNs, and network protocols (e.g., HTTP, DNS, SSL/TLS).
- Experience with Testing Methodologies-Familiarity with performance, functional, interoperability, and security testing frameworks
- Certifications Relevant certifications such as:
- Certified Information Systems Security Professional (CISSP)
- Certified Ethical Hacker (CEH)
- GIAC Security Essentials (GSEC)
- Vendor-specific certs (e.g., Palo Alto Networks PCNSE, Fortinet NSE, Cisco CCNP Security)
- Knowledge of Industry Standards with Hands-on Experience with Test Tools Proficiency in tools like Ixia, Wireshark, Nmap, and vulnerability scanners.
- Familiarity with automation tools such as Ansible Tower, Terraform, OCP, and Git.
- Experience with Agile methodology and CI/CD pipelines (Jenkins, GitLab).
- Knowledge of network security best practices and compliance frameworks.
- Experience in large enterprise environments with complex firewall deployments.
- Excellent verbal, written, and interpersonal communication skills.
- Documentation and Reporting Skills-Ability to produce clear, detailed test plans, procedures, and certification reports
Job Expectations:
- This role is not eligible or visa sponsorship
Pay Range
Reflected is the base pay range offered for this position. Pay may vary depending on factors including but not limited to demonstrated examples of prior performance, skills, experience, or work location. Employees may also be eligible for incentive opportunities.
$119,000.00 - $187,000.00
Benefits
Wells Fargo provides eligible employees with a comprehensive set of benefits, many of which are listed below. Visit Benefits - Wells Fargo Jobs for an overview of the following benefit plans and programs offered to employees.
- Health benefits
- 401(k) Plan
- Paid time off
- Disability benefits
- Life insurance, critical illness insurance, and accident insurance
- Parental leave
- Critical caregiving leave
- Discounts and savings
- Commuter benefits
- Tuition reimbursement
- Scholarships for dependent children
- Adoption reimbursement
Posting End Date:
2 Nov 2026
* Job posting may come down early due to volume of applicants.
We Value Equal Opportunity
Wells Fargo is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic.
Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit's risk appetite and all risk and compliance program requirements.
Applicants with Disabilities
To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo .
Drug and Alcohol Policy
Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.
Wells Fargo Recruitment and Hiring Requirements:
a. Third-Party recordings are prohibited unless authorized by Wells Fargo.
b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.
Similar Jobs at Wells Fargo
Fintech • Financial Services
Leads inbound web application security engineering for a large enterprise. Provides security consulting, designs and maintains complex security solutions, reviews logs, identifies vulnerabilities, performs risk assessments, recommends remediation, supports audits and controls, and improves processes and documentation. The role focuses on web security technologies including WAF, API security, bot management, Layer 7 DDoS protection, CDN, DNS, and load balancing while collaborating with stakeholders and supporting change activities.
Top Skills:
AkamaiApi SecurityAuthenticationBot ManagementCloud SecurityCloudflareConfluenceContent Delivery Networks (Cdn)CryptographyDirectory ServicesDnsHttp/SJIRALayer 7 Ddos ProtectionLoad BalancingServicenowWeb Application Firewall (Waf)
Fintech • Financial Services
Designs and automates scalable application security processes, integrates SAST, DAST, SCA, secrets detection, and IaC controls into CI/CD workflows, and fine-tunes security tooling. Provides technical leadership, recommends risk mitigations, supports governance, audits, compliance, reporting, and enterprise tool upgrades. The role also applies AI-assisted development responsibly while considering security, privacy, compliance, and operational risks.
Top Skills:
AgileApi DevelopmentBlack DuckCheckmarxCi/CdCursorDastGitGithub Advanced Security (Ghas)Github CopilotHarnessInfrastructure As Code (Iac)InvictiJenkinsJIRALlm IntegrationsMitre CveMitre CweOwaspPrismaQualysSastScaSecrets ManagementServicenowSnykSocketSsdlcTrufflehog
Fintech • Financial Services
Leads systems operations and site reliability engineering for highly available enterprise platforms. Responsibilities include managing infrastructure, improving automation and operational efficiency, supporting large-scale Java and .NET applications, implementing observability, resolving incidents, conducting root cause analysis, and coordinating with vendors and technical teams. The role also supports resilient hybrid and public cloud environments, CI/CD tooling, infrastructure automation, self-healing systems, and AI/ML production workloads. Periodic evening or weekend on-call availability and at least three office days weekly are required.
Top Skills:
.NetAnsibleAppdynamicsArtifactoryAutomationAviBigpandaCi/CdElasticF5GrafanaHarnessHybrid CloudItilJavaJenkinsMicrosoft Application InsightsMicrosoft Sql ServerMongoDBNoSQLObservabilityOraclePublic CloudRdbmsSite Reliability EngineeringSplunkSystems EngineeringTerraform
What you need to know about the Los Angeles Tech Scene
Los Angeles is a global leader in entertainment, so it’s no surprise that many of the biggest players in streaming, digital media and game development call the city home. But the city boasts plenty of non-entertainment innovation as well, with tech companies spanning verticals like AI, fintech, e-commerce and biotech. With major universities like Caltech, UCLA, USC and the nearby UC Irvine, the city has a steady supply of top-flight tech and engineering talent — not counting the graduates flocking to Los Angeles from across the world to enjoy its beaches, culture and year-round temperate climate.
Key Facts About Los Angeles Tech
- Number of Tech Workers: 375,800; 5.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Snap, Netflix, SpaceX, Disney, Google
- Key Industries: Artificial intelligence, adtech, media, software, game development
- Funding Landscape: $11.6 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Strong Ventures, Fifth Wall, Upfront Ventures, Mucker Capital, Kittyhawk Ventures
- Research Centers and Universities: California Institute of Technology, UCLA, University of Southern California, UC Irvine, Pepperdine, California Institute for Immunology and Immunotherapy, Center for Quantum Science and Engineering

