Sr. Lead Software Engineer — Trust and Security

Job Description

Join a team where your expertise in secure identity design will directly shape how millions of customers authenticate across web and mobile platforms. At JPMorganChase, we invest in our engineers — offering the tools, visibility, and cross-functional scope to grow your career while solving some of the most complex security challenges in financial services.

As a Sr. Lead Software Engineer within Trust and Security at JPMorganChase, you will serve as a senior design authority for Customer Identity and Access Management solutions across web and mobile platforms. You will combine deep technical design expertise with hands-on engineering capability to deliver trusted, market-leading authentication products that are secure, stable, and built to scale. Your work will directly influence engineering direction across teams and contribute to the firm's broader technology strategy.

Job responsibilities

- Lead end-to-end solution design for Customer Authentication and identity and access management initiatives, including identity flows, access management patterns, and security controls across web and mobile platforms

- Develop and maintain design blueprints, technical standards, and best practices for Customer Authentication, ensuring alignment with business goals and firmwide technology strategy

- Design cloud-native solutions on AWS — including workloads using container orchestration, API Gateway, serverless functions, identity and access policies, and key management — ensuring production-grade reliability, scalability, and security

- Evaluate and recommend tools, technologies, and design patterns for identity and access management, with a focus on OAuth 2.0, OpenID Connect, SAML, and related industry standards

- Provide technical guidance and design direction to engineering teams, contractors, and vendors across complex, multi-technology authentication initiatives

- Develop secure, high-quality production code and conduct rigorous design and code reviews across the team

- Conduct security design assessments to identify vulnerabilities and drive corrective measures prior to implementation

- Drive adoption and governance of AI-assisted engineering practices to improve design quality, delivery speed, and operational outcomes

- Serve as a subject matter expert in Customer Authentication, providing mentorship and technical leadership to engineers across the team

- Engage with stakeholders to gather requirements, define scope, and deliver solutions that meet both business and security needs

Required qualifications, capabilities, and skills

- Formal training or certification on software engineering concepts and 5+ years applied experience

- Proven hands-on experience as a design authority on large-scale, distributed systems — including authoring design blueprints, architecture decision records, and design documentation

- Practical cloud-native experience delivering production workloads at scale, with strong hands-on AWS design experience using container orchestration, API Gateway, serverless functions, identity and access management, and key management services

- Advanced proficiency in one or more programming languages with demonstrable design authority alongside engineering delivery

- Strong understanding of security principles, cryptography fundamentals (signing, encryption, key management), data protection regulations, and privacy standards

- Experience coaching and mentoring senior engineers on design standards, design patterns, and responsible use of AI within the software development lifecycle

- Ability to independently drive design and functionality decisions across complex, multi-team initiatives with minimal oversight

- Strong communication skills with the ability to articulate design decisions and trade-offs clearly to both technical and non-technical stakeholders

Preferred qualifications, capabilities, and skills

- In-depth knowledge of identity and access management protocols and standards — OAuth 2.0, OpenID Connect, SAML, FIDO2/WebAuthn, and session management patterns

- Experience with enterprise identity and access management platforms such as ForgeRock, Okta, Auth0, or equivalent

- Experience with zero-trust design principles and their application in enterprise authentication environments

- Experience contributing to or leading firmwide engineering standards, design communities of practice, or governance forums

- Exposure to regulated industry environments with strong controls, audit requirements, and compliance-driven engineering practices

- AWS certifications (Solutions Architect Professional, Security Specialty) or identity and security certifications (such as CISSP or CISM)