Software Engineer III - DevSecOps - Kubernetes Security

JPMorgan Chase & Co.; Greater London; On-site; GBP 90,000 - 125,000; Full time

Job summary

JPMorgan Chase & Co. in London is seeking a Software Engineer III to strengthen Kubernetes security within the Cloud Platform Engineering tribe, focusing on guardrails, automation, and secure delivery across the UK cloud platform.

You will build tooling for continuous visibility of security posture, integrate security controls into pipelines, and contribute to software supply chain security in a fast-paced financial services environment.

Qualifications

• Hands-on experience securing Kubernetes and container orchestration in production.
• Experience with policy-as-code and infrastructure-as-code tooling.
• Familiarity with cloud security services: audit logging, threat detection, vulnerability scanning, compliance posture management.
• Hands-on exposure to AI-assisted development tools with secure, auditable outputs.
• Strong understanding of security controls and guardrails in cloud environments.

Responsibilities

• Help define and enforce Kubernetes security controls across our clusters - access controls, workload security standards, network policies and industry benchmarks
• Build and maintain automation to detect, enrich and report on security findings and compliance posture across our Kubernetes and cloud environments
• Help implement security guardrails and policy-as-code controls to enforce secure configuration at scale
• Assess and track vulnerability findings across Kubernetes clusters and workloads, providing context to help teams prioritise remediation
• Contribute to software supply chain security practices such as container image scanning, trusted registries, and dependency analysis
• Embed security guardrails into infrastructure-as-code and automated delivery pipelines so that policy is applied consistently and is easy to audit
• Use enterprise-authorised AI coding assist tools to improve code quality, delivery speed, and productivity, validating outputs through peer review, automated testing, and secure coding standards

Skills

Kubernetes security

Cloud security concepts

GitOps & CI/CD

AI-assisted development tools

Security posture assessment

Tools

Terraform

Sentinel

Kyverno

OPA

Argo CD

GitHub Actions

AWS EKS

Job description

Job Description

At JPMorganChase, we build the technology that powers one of the world's most trusted financial institutions and we're looking for engineers who want to make a real impact. You'll join a collaborative, people-first team where curiosity, continuous learning, and technical excellence are part of everyday work. If you're passionate about security in containerised, Kubernetes, and cloud-native environments, this is your opportunity to grow your career while solving challenges that matter at scale.

As a Software Engineer III at JPMorganChase within the International Consumer Bank, you serve as a hands‑on member of our Cloud Platform Engineering tribe in the Compliance Platform Engineering squad, which owns the security controls, compliance tooling, and guardrails underpinning the Chase UK cloud platform. Focused on Kubernetes security, you will build the tooling and automation that gives the business continuous visibility of its security posture, help design and enforce guardrails, and support teams in understanding and remediating their exposure.

Job responsibilities

• Help define and enforce Kubernetes security controls across our clusters - access controls, workload security standards, network policies and industry benchmarks


• Build and maintain automation to detect, enrich and report on security findings and compliance posture across our Kubernetes and cloud environments


• Help implement security guardrails and policy-as-code controls to enforce secure configuration at scale


• Assess and track vulnerability findings across Kubernetes clusters and workloads, providing context to help teams prioritise remediation


• Contribute to software supply chain security practices such as container image scanning, trusted registries, and dependency analysis


• Embed security guardrails into infrastructure-as-code and automated delivery pipelines so that policy is applied consistently and is easy to audit


• Use enterprise-authorised AI coding assist tools to improve code quality, delivery speed, and productivity, validating outputs through peer review, automated testing, and secure coding standards

Required qualifications, capabilities and skills

• Formal training or certification on software engineering concepts and proficient applied experience


• Working knowledge of a major cloud provider (AWS, GCP or Azure) and its core security services, such as audit logging, threat detection, vulnerability scanning and compliance posture management


• Hands-on experience securing Kubernetes and container orchestration in production, including access control, secrets management, workload security, network policies and hardening against benchmarks such as the CIS Kubernetes Benchmark


• Hands-on experience with a managed Kubernetes service - we run on AWS EKS, and equivalent experience with Google GKE or Azure AKS is equally welcome


• Exposure to infrastructure-as-code and/or policy-as-code practices using tools such as Terraform, Sentinel, Kyverno or OPA


• Hands-on experience building automation or tooling with the Go programming language (experience with other languages such as Python is also valuable)


• Experience with GitOps and CI/CD delivery tooling such as Argo CD and GitHub Actions for declarative, auditable deployments


• An ability to critically evaluate and validate the output of enterprise-authorised AI-assisted development tools, with an understanding of responsible AI use including data sensitivity and secure handling of inputs and outputs

Preferred qualifications, capabilities, and skills

• Certified Kubernetes Security Specialist (CKS), a recognised cloud security certification, or equivalent demonstrable knowledge of Kubernetes and cloud security across cluster and system hardening, workload security, and runtime security


• Exposure to platform engineering tools such as Crossplane for managing cloud infrastructure through Kubernetes


• Knowledge of software supply chain security concepts including software bill of materials (SBOM) and dependency governance


• Awareness of multi-region cloud architectures and their implications for consistent guardrails, compliance, and data residency


• Familiarity with the UK regulatory environment including Financial Conduct Authority and Prudential Regulation Authority requirements

#ICBCareer