Principal Architect, Identity, Data Modeling, and Platform APIs

J.P. Morgan; Greater London; On-site; GBP 80,000 - 120,000; Full time

Job summary

A global financial services firm is seeking a Principal Architect to drive the development of cloud-based technologies. This role involves designing data and API foundations, ensuring compliance with regulatory standards, and collaborating with engineering teams. Candidates should have extensive experience in identity management within financial environments and a solid background in API design. Strong communication skills and a collaborative mindset are essential for fostering a productive work culture.

Qualifications

• Formal training or certification on software Infrastructure Architecture concepts.
• Extensive experience architecting in complex financial services environments.
• Expertise in enterprise identity management and directory services.

Responsibilities

• Define and own canonical data models capturing identity and permissions.
• Design APIs for workload onboarding to IaaS and hypervisor platforms.
• Architect identity-aware provisioning flows and integrate with identity systems.

Skills

Experience with identity management systems

Strong data modeling skills

Excellent communication skills

Education

Formal training or certification in software architecture

Tools

Kerberos

Active Directory

Kubernetes

Job description

Step into the role of a Principal Architect at JPMorganChase and become a driving force behind the development and adoption of cutting‑edge, cloud‑based technologies.

As a Principal Architect at JPMorganChase within the Core Infrastructure Platforms Architecture team youprovide expertise Warehouse (??). You will design the data and API foundations that connect identity, authority, ownership, and permission to workload deployment on IaaS platforms and hypervisors. This is a senior individual‑contributor role focused on rigorous data modeling, software and API design, and identity architectures in a large, regulated financial environment. You will define canonical models and service contracts, ensure designs meet regulatory and control requirements, and partner closely with platform, engineering, and development teams.

Job responsibilities

• Defines and owns canonical data models capturing identity, authority, ownership, and permissions across compute, storage, and network resources; model relationships among people, services, applications, and infrastructure assets.
• Designs and evolves APIs and service contracts for entitlements and workload onboarding to IaaS and hypervisor platforms; establish versioning, compatibility, lifecycle, and governance for these interfaces.
• Architects identity‑aware provisioning flows and guardrails: integrate with directory and identity systems (e.g., Kerberos, Active Directory), enforce RBAC/ABAC, separation of duties, least privilege, and auditable change.
• Establishes and maintains data structures used for technology governance (e.g., product catalogs, inventories/CMDB, configuration attributes, organizational hierarchies) with clear sources of truth, lineage, and stewardship.
• Embeds compliance and controls into designs: evidence and traceability for regulatory obligations on identity, access management, and operational risk; align with firm ], policies and applicable regulations.
• Partners with platform teams (hypervisors, IaaS, Kubernetes) and application developers to ensure secure, operable, and scalable workload deployment patterns; produce reference architectures,ósitos, and reusable templates.
• Defines policies and policy‑as‑code approaches for identity, authorization, configuration, and change; integrate controls into CI/CD and provisioning pipelines.
• Drives data quality and observability for governance datasets: schemas, validations, metadata, golden records, reconciliation, and reporting.
• Conducts architecture/design reviews; document decisions, risks, exceptions/waivers, and remediation plans; present in governance forums.
• Promotes effective ways of working: help organize team backlogs and ceremonies, ensure Jira/Kanban hygiene, run Cone es, and track delivery metrics to keep the team productive.

• Mentors engineers and architects; foster a collaborative, low‑ego, outcome‑focused culture.

Required qualifications, capabilities, and skills

• Formal training or certification on software Infrastructure verilen Architecture concepts and expert applied experience
• Extensive experience architecting in large, complex, regulated financial services environments, including identity‑centric designs and production delivery.
• Deep expertise in enterprise identity management and directory services, including:
• Kerberos and Active Directory (forests/domains, trusts, group nesting, SPNs, constrained delegation, service accounts, PKI).
• Authorization models and controls (RBAC, ABAC, policy evaluation, least privilege, privileged access, break‑glass, JIT access).
• Strong data modeling skills (relational, hierarchical, graph) and schema design for governance datasets (product catalogs, CMDB/inventory, configuration attributes, organizational structures).
• Professional software and API design experience: REST/gRPC API design, versioningEMENT strategies, service contracts, error models, pagination, performance, and security.
• Hands‑on understanding of IaaS and hypervisor platforms and how identity/authorization integrates with provisioning, lifecycle, and operations.
• Demonstrated ability to embed regulatory, risk, and control requirements into architecture and provide audit‑ready evidence and traceability.

• Excellent communication and stakeholder management; able to collaborate deeply with developers and platform engineers to deliver pragmatic solutions.

Preferred qualifications, capabilities, and skills

• Experience with policy‑as‑code and controls (e.g., OPA, Conftest, Sentinel) and mapping to control frameworks.
• Familiarity with Kubernetes platform identity (workload identity, service accounts), service meshes, and identity‑aware networking.
• Experience with data governance practices: stewardship models, MDM, reference data, lineage, and reconciliation.
• Background in secrets management, mTLS/PKI, and certificate lifecycle for services.
• Track record improving team productivity via agile ways of working, backlog management, and delivery metrics.
• Relevant certifications (e.g., identity/directory, security, architecture).
তেই>