GenAI Security Principal Architect

About this role:

Wells Fargo is seeking a GenAI Security Principal Architect in Cybersecurity to join Engineering & Architecture and contribute to technology advancement. Learn more about career areas and business divisions at wellsfargojobs.com.

The GenAI Security Principal Architect will establish scalable, secure-by-design frameworks that enable safe and compliant adoption of Generative AI across the enterprise. This role is critical to managing emerging threats, aligning with regulatory expectations, and accelerating innovation through consistent architecture patterns and strategic oversight of AI initiatives.

In this role, you will:

• Lead enterprise-wide transformations by shaping GenAI security strategy, aligning AI systems with business goals, regulatory standards, and technical resilience
• Navigate a fast-evolving AI landscape, balancing innovation with risk, and converting abstract threats into scalable security strategies
• Define and execute the GenAI security roadmap, embedding secure-by-design principles, leading tech initiatives, ensuring regulatory compliance, mentoring talent, developing training, setting KPIs, reporting to leadership, and contributing to thought leadership
• Ensure GenAI systems are secure, reliable, and trustworthy by embedding robust controls into models, data pipelines, and deployment environments
• Address emerging threats like prompt injection and model inversion, requiring deep expertise in LLMs, multimodal models, and MLOps
• Design end-to-end security architectures, develops reusable patterns for threat detection and anomaly monitoring, and integrates these into enterprise platforms
• Contribute to internal standards, supports regulatory alignment, and drives innovation through patents, publications, and enterprise-wide consultation.
• Manage technical and operational dependencies, adapts to evolving requirements, and coordinates across teams
• Plan, track, and deliver initiatives, providing technical oversight, resolving blockers, and ensuring quality
• The role also involves drafting solution briefs, managing workstreams, and aligning implementations with strategic objectives.

• 7+ years of architecture experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
• 7+ years of experience in Implementing cloud-native security across Azure (OpenAI, ML Workspace, Key Vault, Defender for Cloud) and GCP (Vertex AI, IAM, VPC Service Controls, Confidential Computing)

• Deep expertise in securing GenAI systems, including LLMs, diffusion models, multimodal architectures, and agentic AI orchestration
• Skilled in mitigating threats such as prompt injection, model inversion, data poisoning, adversarial examples, and synthetic data risks
• Designs secure GenAI pipelines for training, fine-tuning, and inference, applying zero-trust principles, role-based access controls, and audit logging
• Threat modeling and red-teaming experience using frameworks like STRIDE, DREAD, MITRE ATLAS, and integrates tools like LangChain Guardrails, OpenAI Moderation API, LLM Firewall, and Microsoft Purview
• Experienced in microservices, event-driven architectures, API-first integration, containerization (Docker, Kubernetes), and scalable deployment of GenAI solutions
• Familiar with governance frameworks including NIST AI RMF, EU AI Act, ISO/IEC 27001, SOC 2, and responsible AI principles such as fairness, transparency, and accountability
• Experience with third-party GenAI services using platforms like Securiti.ai, and contributes to internal standards and reference architectures
• Experience collaborating across cybersecurity domains including IAM, DLP, SaaS, cloud, and data center security, ensuring alignment with enterprise risk and compliance goals
• Ability to lead cross-functional teams of ML engineers, data scientists, and security analysts, and communicates technical risks and mitigation strategies to executive leadership

• Ability to travel up to 10% of the time

• 3075 Loyalty Cir. - Columbus OH 43219
• 401 Las Colinas Blvd W Bldg. A - Irving, TX 75039
• 2600 S Price Rd. - Chandler, Arizona 85286
• 300 S Brevard St, Charlotte, NC 28202
• 1525 W WT Harris Blvd. Charlotte, North Carolina 28262
• 550 S 4th St, Minneapolis, Minnesota 55415
• 800 S Jordan Creek Pkwy, West Des Moines, Iowa 50266
• 4101 Wiseman Blvd Bldg. 110 - San Antonio, TX 78251
• 194 S Wood Ave, Iselin, New Jersey 08830
• 1751 Pinnacle Dr. McLean, VA 22102

• Job posting may come down early due to volume of applicants.
• Required location(s) listed above. Relocation assistance is not available for this position
• Salary range is determined by location of the job. May be considered for a discretionary bonus, Restricted Share Rights, or other long - term incentive awards.
• This position is not eligible for visa sponsorship

• Health benefits
• 401(k) Plan
• Paid time off
• Disability benefits
• Life insurance, critical illness insurance, and accident insurance
• Parental leave
• Critical caregiving leave
• Discounts and savings
• Commuter benefits
• Tuition reimbursement
• Scholarships for dependent children
• Adoption reimbursement