Sr. Lead Software Engineer — Trust and Security

Job Description

Join a team where your expertise in secure identity design will directly shape how millions of customers authenticate across web and mobile platforms. At JPMorganChase, we invest in our engineers — offering the tools, visibility, and cross-functional scope to grow your career while solving some of the most complex security challenges in financial services.

As a Sr. Lead Software Engineer within Trust and Security at JPMorganChase, you will serve as a senior design authority for Customer Identity and Access Management solutions across web and mobile platforms. You will combine deep technical design expertise with hands-on engineering capability to deliver trusted, market-leading authentication products that are secure, stable, and built to scale. Your work will directly influence engineering direction across teams and contribute to the firm's broader technology strategy.

Job responsibilities

• Lead end-to-end solution design for Customer Authentication and identity and access management initiatives, including identity flows, access management patterns, and security controls across web and mobile platforms
• Develop and maintain design blueprints, technical standards, and best practices for Customer Authentication, ensuring alignment with business goals and firmwide technology strategy
• Design cloud-native solutions on AWS — including workloads using container orchestration, API Gateway, serverless functions, identity and access policies, and key management — ensuring production-grade reliability, scalability, and security
• Evaluate and recommend tools, technologies, and design patterns for identity and access management, with a focus on OAuth 2.0, OpenID Connect, SAML, and related industry standards
• Provide technical guidance and design direction to engineering teams, contractors, and vendors across complex, multi-technology authentication initiatives
• Develop secure, high-quality production code and conduct rigorous design and code reviews across the team
• Conduct security design assessments to identify vulnerabilities and drive corrective measures prior to implementation
• Drive adoption and governance of AI-assisted engineering practices to improve design quality, delivery speed, and operational outcomes
• Serve as a subject matter expert in Customer Authentication, providing mentorship and technical leadership to engineers across the team
• Engage with stakeholders to gather requirements, define scope, and deliver solutions that meet both business and security needs
  

Required qualifications, capabilities, and skills

• Formal training or certification on software engineering concepts and 5+ years applied experience
• Proven hands-on experience as a design authority on large-scale, distributed systems — including authoring design blueprints, architecture decision records, and design documentation
• Practical cloud-native experience delivering production workloads at scale, with strong hands-on AWS design experience using container orchestration, API Gateway, serverless functions, identity and access management, and key management services
• Advanced proficiency in one or more programming languages with demonstrable design authority alongside engineering delivery
• Strong understanding of security principles, cryptography fundamentals (signing, encryption, key management), data protection regulations, and privacy standards
• Experience coaching and mentoring senior engineers on design standards, design patterns, and responsible use of AI within the software development lifecycle
• Ability to independently drive design and functionality decisions across complex, multi-team initiatives with minimal oversight
• Strong communication skills with the ability to articulate design decisions and trade-offs clearly to both technical and non-technical stakeholders
  

Preferred qualifications, capabilities, and skills

• In-depth knowledge of identity and access management protocols and standards — OAuth 2.0, OpenID Connect, SAML, FIDO2/WebAuthn, and session management patterns
• Experience with enterprise identity and access management platforms such as ForgeRock, Okta, Auth0, or equivalent
• Experience with zero-trust design principles and their application in enterprise authentication environments
• Experience contributing to or leading firmwide engineering standards, design communities of practice, or governance forums
• Exposure to regulated industry environments with strong controls, audit requirements, and compliance-driven engineering practices
• AWS certifications (Solutions Architect Professional, Security Specialty) or identity and security certifications (such as CISSP or CISM)