Lead Security Engineer - Infrastructure, HSM

Take on a crucial role where you'll be a key part of a high-performing team delivering secure software solutions. Make a real impact as you help shape the future of software security at one of the world's largest and most influential companies.

As a Lead Security Engineer at JPMorganChase within the Cybersecurity & Technology Controls team , you are an integral part of team that works to deliver software solutions that satisfy pre-defined functional and user requirements with the added dimension of preventing misuse, circumvention, and malicious behavior. As a core technical contributor, you are responsible for carrying out critical technology solutions with tamper-proof, audit defensible methods across multiple technical areas within various business functions.

Job responsibilities
- Lead the architecture, design, and documentation of complex Hardware Security Module and cryptographic infrastructure, ensuring alignment with business, resiliency, and security requirements
- Design and implement Hardware Security Module solutions, including deployment, configuration, integration, and full lifecycle management across Thales and FutureX platforms
- Develop and maintain architectural diagrams, system documentation, and operational runbooks to support operational excellence and knowledge continuity
- Collaborate with cross-functional teams to define infrastructure standards, best practices, and security controls that align with firm-wide policies and industry regulations
- Oversee migration, upgrade, and consolidation of Hardware Security Module infrastructure, ensuring minimal disruption and maximum security throughout transitions
- Provide guidance on cryptographic key management, secure storage, confidential computing, and compliance with industry standards including Payment Card Industry Data Security Standard and Federal Information Processing Standards
- Troubleshoot and resolve infrastructure and Hardware Security Module-related issues, performing root cause analysis and implementing corrective actions using monitoring tools
- Participate in risk assessments, audits, and incident response activities related to infrastructure and Hardware Security Module environments
- Apply domain knowledge of payment processes and business resiliency to infrastructure design and operational decision-making
- Uses enterprise-authorized AI capabilities within the work environment to accelerate security analysis and vulnerability assessment documentation, validating outputs and ensuring sensitive data is handled appropriately.
- Applies reuse-first, AI-assisted practices within SDLC/toolchain routines to strengthen security testing and control validation, ensuring traceability/auditability and alignment to resiliency and security expectations.

Required qualifications, capabilities and skills

- Formal training or certification on security engineering concepts and 5+ years applied experience
- Hands-on engineering experience with Hardware Security Modules, including expertise in architecture and system design of highly available infrastructure, disaster recovery, and business continuity strategies
- Experience with network security, firewalls, and secure room operations and key ceremonies
- Proficient technical troubleshooting skills with strong Linux and Unix administration experience in enterprise environments
- Proficiency in designing and documenting infrastructure architectures using industry-standard tools and methodologies
- Experience with infrastructure automation tools such as Terraform for managing and scaling secure environments
- Hands-on experience with OpenSSL and certificate-based authentication mechanisms
- Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support security engineering workflows with strong validation habits and awareness of data sensitivity.
- Ability to review and validate AI-assisted code/security recommendations before use, escalating when uncertain and following security and data handling requirements.

Preferred qualifications, capabilities and skills

- Hands-on experience with Splunk or equivalent platforms for infrastructure monitoring and troubleshooting
- Strong domain knowledge of payment processes and business resiliency applied to infrastructure design
- Relevant Hardware Security Module platform certifications such as Thales or FutureX credentials
- Strong understanding of cryptographic principles, key management, confidential computing, and secure hardware operations