Senior Infrastructure Engineer - OS Engineering

About this role:

Wells Fargo is seeking a Senior Infrastructure Engineer -OS engineering/Azure Cloud.

In this role, you will:

• Lead or participate in high level technical concepts spanning technology and business

• Develop specifications for complex infrastructure systems, design and test solutions

• Contribute to the testing of business, application and technical infrastructure requirements

• Drive solutions to reduce recovery

• Review and analyze solutions for cloud security, secrets management and key rotations

• Design, code, test, debug and document programs using Agile development practices

• Design complex system upgrades

• Resolve troublesome trends as they develop

• Develop a long range plan designed to resolve problems and prevent them from recurring

• Direct the daily risk and control flow of operations, focusing on policies, procedures and work standards to ensure success

• Collaborate and consult with peers, colleagues and managers to resolve issues and achieve goals

Required Qualifications:

• 4+ years of Technology Infrastructure Engineering and Solutions experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

Desired Qualifications:

• 4+ years in infrastructure engineering with strong focus on Windows OS engineering in large enterprise environments.

• Deep understanding of Windows internals (services, kernel components, memory, policies, drivers, certificates, update service).

• Strong hands-on experience with modern endpoint management technologies:

• Azure AD / Entra ID

• Zero Trust

• Certificate services

• Advanced PowerShell engineering skills, including:

• Modular script design

• Strong logging & telemetry

• Error handling & retry logic

• Idempotent execution patterns

• Secure credential handling

• Use of Microsoft Graph & REST APIs

• Experience managing OS lifecycle at scale—feature update flights, ring management, controlled rollout, and rollback plans.

• Strong troubleshooting skills across OS, identity, networking, secure boot/UEFI/TPM, and endpoint security control interactions.

• Familiarity with CI/CD concepts:

• Git/Git branching strategies

• Automated validation pipelines

• Shift left testing

• Artifact versioning

• Infrastructure-as-code or configuration-as-code patterns (where applicable)

• Knowledge of observability for endpoints:

• Log Analytics

• KQL

• Performance troubleshooting

• Experience with driver, firmware, and BIOS/UEFI configuration across OEM hardware.

• Understanding security frameworks such as CIS Benchmarks, Microsoft Security Baselines, Zero Trust principles.

• Strong collaboration and team-player mindset, with ability to lead design sessions and mentor junior engineers.

• Awareness of Agile ways of working, sprint planning, backlog refinement, and continuous improvement.

• Hands‑on experience with DEX/XLA tools such as Nexthink, Lakeside SysTrack, Aternity, ControlUp, Microsoft Endpoint Analytics or similar platform

• Awareness of leveraging AI for day‑to‑day engineering tasks, including using AI tools for automation, analysis, and building intelligent agents to improve operational efficiency.

Job Expectations:

• Participate in high level technical concepts spanning technology and business

• Define and maintain the enterprise OS roadmap (feature updates, end-of-support planning, version cadence).

• Create and maintain hardware driver strategy and compatibility matrices across OEM models

• Own OS-level configuration standards (services, startup, performance tuning, reliability settings).

• Ensure consistent OS experience across device types

• Design, implement, and optimize Windows Autopilot and modern provisioning flows (user-driven, pre-provisioning/white glove).

• Manage and version OS build artifacts (language packs, Features on Demand, optional components, OEM customizations).

• Integrate provisioning with identity, compliance, and access controls (Entra ID / hybrid)  

• Improve end-user experience through automation and reduction of provisioning time.

• Engineer monthly patching and feature update strategy aligned to business risk and change windows.

• Manage update rings, rollout waves, deferrals, validation gates, and rollback plans.

• Implement and maintain OS security baselines aligned to security posture (e.g., Microsoft Security Baselines/CIS where applicable).

• Build and maintain automation using advanced PowerShell, scripting, and endpoint management APIs (Microsoft Graph preferred).

• Engineer and support standard OS builds (base images / reference images / provisioning packages).

• Coach and mentor team members, promoting engineering best practices and knowledge sharing.

• Contribute to CI/CD workflows, version control practices, and automation pipelines for OS engineering (e.g., Git, Azure DevOps, GitHub Enterprise).

• Collaborate closely as a strong team player across engineering, security, and operations teams.

• Skilled in Proactive Remediation using Analytics with custom

• Strong understanding of XLA (Experience Level Agreements) and improving digital experience through data‑driven insights and proactive remediation and self‑healing scripts.