GenAI Security Principal Architect
Wells Fargoabout 1 year ago
San Antonio, Texas, United States
On-site
Full-time
Junior Level (1-3 years)
Job Description
Position Overview
Wells Fargo is seeking a GenAI Security Principal Architect in Cybersecurity to join Engineering & Architecture and drive technology advancement. In this role, you will establish scalable, secure‑by‑design frameworks that enable the safe and compliant adoption of Generative AI across the enterprise, addressing emerging threats while aligning with regulatory expectations and accelerating innovation.
Key Responsibilities
- Lead enterprise‑wide transformations by shaping GenAI security strategy, aligning AI systems with business goals, regulatory standards, and technical resilience.
- Navigate a fast‑evolving AI landscape, balancing innovation with risk and converting abstract threats into scalable security strategies.
- Define and execute the GenAI security roadmap by embedding secure‑by‑design principles, providing technical oversight, mentoring talent, and setting KPIs.
- Ensure GenAI systems are secure, reliable, and trustworthy by integrating robust controls into models, data pipelines, and deployment environments.
- Address emerging threats such as prompt injection and model inversion with deep expertise in LLMs, multimodal models, and MLOps.
- Design end‑to‑end security architectures and develop reusable patterns for threat detection and anomaly monitoring across enterprise platforms.
- Contribute to internal standards, support regulatory alignment, and drive innovation through patents, publications, and consultation.
- Manage technical and operational dependencies, adapt to evolving requirements, and coordinate effectively across teams.
- Plan, track, and deliver initiatives by providing technical oversight, resolving blockers, and ensuring quality in implementation.
- Draft solution briefs and manage workstreams to align implementations with strategic objectives.
Required Qualifications
- 7+ years of architecture experience, or equivalent demonstrated experience through work, training, military service, or education.
- 7+ years of experience implementing cloud‑native security across Azure (OpenAI, ML Workspace, Key Vault, Defender for Cloud) and GCP (Vertex AI, IAM, VPC Service Controls, Confidential Computing).
Preferred Qualifications
- Deep expertise in securing GenAI systems, including LLMs, diffusion models, multimodal architectures, and agentic AI orchestration.
- Skilled in mitigating threats such as prompt injection, model inversion, data poisoning, adversarial examples, and synthetic data risks.
- Experienced in designing secure GenAI pipelines for training, fine‑tuning, and inference with zero‑trust principles, role‑based access, and audit logging.
- Proficient in threat modeling and red‑teaming using frameworks like STRIDE, DREAD, and MITRE ATLAS, and integrating tools such as LangChain Guardrails, OpenAI Moderation API, LLM Firewall, and Microsoft Purview.
- Experienced in microservices, event‑driven architectures, API‑first integration, containerization (Docker, Kubernetes), and scalable GenAI deployments.
- Familiar with governance frameworks including NIST AI RMF, EU AI Act, ISO/IEC 27001, SOC 2, and adherence to responsible AI principles.
- Experience with third‑party GenAI services and contributing to internal standards and reference architectures.
- Ability to lead cross‑functional teams of ML engineers, data scientists, and security analysts while effectively communicating technical risks to executive leadership.
Compensation
- Pay Range: $159,000.00 - $305,000.00
Benefits & Perks
- Health benefits
- 401(k) Plan
- Paid time off
- Disability benefits
- Life insurance, critical illness insurance, and accident insurance
- Parental leave
- Critical caregiving leave
- Discounts and savings
- Commuter benefits
- Tuition reimbursement
- Scholarships for dependent children
- Adoption reimbursement
Required Skills
Governance Frameworks (NIST, ISO/IEC 27001, SOC 2)
MLOps
Cybersecurity Strategy
API-first Integration
Risk Mitigation
Cloud Native Security (Azure & GCP)
Threat Modeling (STRIDE, DREAD, MITRE ATLAS)
Red Teaming
Regulatory Compliance
GenAI Security Architecture
LLM and Multimodal Model Security
Zero Trust Principles
Secure-by-Design Frameworks
Microservices Architecture
Containerization (Docker, Kubernetes)