Lead Security Engineer - Infrastructure, HSM
JPMorgan Chase · Posted Oct 14
Global banking, investment, credit card, mortgage, and asset management services
Get a personal compatibility score
Add a resume for personal matches
About the role
The Cybersecurity & Technology Controls team at JPMorganChase delivers secure software solutions that meet functional and user requirements while preventing misuse, circumvention, and malicious behavior. As a core technical contributor, this role leads the architecture, design, and lifecycle management of Hardware Security Module and cryptographic infrastructure across Thales and FutureX platforms. The position works on key management, secure room operations, infrastructure automation, and compliance with standards such as PCI DSS and FIPS in support of payment and business resiliency requirements.
What you will do
- Lead the architecture, design, and documentation of complex Hardware Security Module and cryptographic infrastructure, ensuring alignment with business, resiliency, and security requirements
- Design and implement Hardware Security Module solutions, including deployment, configuration, integration, and full lifecycle management across Thales and FutureX platforms
- Develop and maintain architectural diagrams, system documentation, and operational runbooks to support operational excellence and knowledge continuity
- Collaborate with cross-functional teams to define infrastructure standards, best practices, and security controls that align with firm-wide policies and industry regulations
- Oversee migration, upgrade, and consolidation of Hardware Security Module infrastructure, ensuring minimal disruption and maximum security throughout transitions
- Provide guidance on cryptographic key management, secure storage, confidential computing, and compliance with industry standards including Payment Card Industry Data Security Standard and Federal Information Processing Standards
- Troubleshoot and resolve infrastructure and Hardware Security Module-related issues, performing root cause analysis and implementing corrective actions using monitoring tools
- Participate in risk assessments, audits, and incident response activities related to infrastructure and Hardware Security Module environments
- Apply domain knowledge of payment processes and business resiliency to infrastructure design and operational decision-making
- Uses enterprise-authorized AI capabilities within the work environment to accelerate security analysis and vulnerability assessment documentation, validating outputs and ensuring sensitive data is handled appropriately.
- Applies reuse-first, AI-assisted practices within SDLC/toolchain routines to strengthen security testing and control validation, ensuring traceability/auditability and alignment to resiliency and security expectations.
Skills used in this role
What the employer is looking for
- Formal training or certification on security engineering concepts and 5+ years applied experience
- Hands-on engineering experience with Hardware Security Modules, including expertise in architecture and system design of highly available infrastructure, disaster recovery, and business continuity strategies
- Experience with network security, firewalls, and secure room operations and key ceremonies
- Proficient technical troubleshooting skills with strong Linux and Unix administration experience in enterprise environments
- Proficiency in designing and documenting infrastructure architectures using industry-standard tools and methodologies
- Experience with infrastructure automation tools such as Terraform for managing and scaling secure environments
- Hands-on experience with OpenSSL and certificate-based authentication mechanisms
- Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support security engineering workflows with strong validation habits and awareness of data sensitivity.
- Ability to review and validate AI-assisted code/security recommendations before use, escalating when uncertain and following security and data handling requirements.
Preferred qualifications
- Hands-on experience with Splunk or equivalent platforms for infrastructure monitoring and troubleshooting
- Strong domain knowledge of payment processes and business resiliency applied to infrastructure design
- Relevant Hardware Security Module platform certifications such as Thales or FutureX credentials
- Strong understanding of cryptographic principles, key management, confidential computing, and secure hardware operations
Benefits and support
- Compensation and benefits are detailed in the job posting
About JPMorgan Chase
JPMorgan Chase & Co. is one of the oldest, largest, and most diversified financial services institutions in the world. Operating globally through the J.P. Morgan and Chase brands, the firm provides a comprehensive range of financial solutions including investment banking, consumer and commercial banking, transaction processing, and asset management. Serving millions of consumers and many of the world's most prominent corporate, institutional, and government clients, the company combines deep market expertise with extensive technological investments.
- Industry
- Banking
- Company size
- 320000+ employees
- Founded
- 1799
- Location
- New York, New York, USA
- Funding stage
- Public Company
Leadership
Chairman and Chief Executive Officer
Chief Financial Officer
Chief Operating Officer
Global Chief Information Officer
CEO, Asset & Wealth Management
Recent coverage
GuruFocus
JPMorgan Chase Reports Strong Q3 2026 Earnings with Focus on Dividend Sustainability2026-10-13
BigGo
JPMorgan Posts Record $15.3B Net Income as Equities Revenue Surges2026-10-13
JPMorgan Chase Newsroom
JPMorganChase Plans Dividend Increase and Has Authorized a New Common Share Repurchase Program2026-06-24
J.P. Morgan Press Release
JPMorganChase reports second-quarter 2026 net income of $21.2 billion2026-07-14