Lead Security Engineer - Hardware Security Module Infrastructure

JP Morgan Services India Pvt Ltd; Bengaluru; On-site; INR 4,000,000 - 6,500,000; Full time

Job summary

JP Morgan Services India Pvt Ltd seeks a Senior Lead Security Engineer (Infrastructure) to architect and implement HSM cryptographic infrastructure. You will drive deployment, lifecycle management, and security controls, interfacing with cross-functional teams to ensure resiliency and regulatory compliance.

The role emphasizes high-availability hardware security, key management, and secure coding practices, with opportunities to influence security across multiple platforms and payments-related

Qualifications

• 5+ years of applied security engineering experience.
• Hands-on with Hardware Security Modules, architecture and high-availability infra, DR and BCP.
• Experience with network security, firewalls, and secure room operations.
• Proficient troubleshooting in Linux/Unix, enterprise environments.
• Experience documenting architectures using standard tools.
• Terraform for managing and scaling secure environments.
• OpenSSL and certificate-based authentication.
• AI capabilities usage in security workflows with validation.
• Reviewing AI-assisted code/security recommendations.

Responsibilities

• Lead architecture, design, and documentation of HSM and cryptographic infrastructure.
• Design and implement HSM solutions across platforms; deployment, integration, lifecycle management.
• Develop architectural diagrams, runbooks, and system docs for ops continuity.
• Collaborate to define infra standards, security controls, and regulatory alignment.
• Oversee migrations and upgrades of HSM infra with minimal disruption and strong security.
• Guide cryptographic key management, secure storage, and compliant practices.
• Troubleshoot infra/HSM issues; perform root cause analysis with monitoring tools.
• Participate in risk assessments, audits, and incident response related to infra/HSM.
• Apply payment processes knowledge and resiliency in infra design.
• Leverage enterprise AI capabilities to accelerate security analysis and validation.

Skills

Security engineering

Linux/Unix administration

Infrastructure design

AI-assisted security workflows

Tools

Terraform

OpenSSL

Splunk

Job description

Lead Security Engineer - Infrastructure, HSM Take on a crucial role where you'll be a key part of a high-performing team delivering secure software solutions. Make a real impact as you help shape the future of software security at one of the world's largest and most influential companies. As a Lead Security Engineer at JPMorganChase within the Cybersecurity & Technology Controls team , you are an integral part of team that works to deliver software solutions that satisfy pre-defined functional and user requirements with the added dimension of preventing misuse, circumvention, and malicious behavior. As a core technical contributor, you are responsible for carrying out critical technology solutions with tamper-proof, audit defensible methods across multiple technical areas within various business functions.

Job responsibilities

Lead the architecture, design, and documentation of complex Hardware Security Module and cryptographic infrastructure, ensuring alignment with business, resiliency, and security requirements

Design and implement Hardware Security Module solutions, including deployment, configuration, integration, and full lifecycle management across Thales and FutureX platforms

Develop and maintain architectural diagrams, system documentation, and operational runbooks to support operational excellence and knowledge continuity

Collaborate with cross-functional teams to define infrastructure standards, best practices, and security controls that align with firm-wide policies and industry regulations

Oversee migration, upgrade, and consolidation of Hardware Security Module infrastructure, ensuring minimal disruption and maximum security throughout transitions

Provide guidance on cryptographic key management, secure storage, confidential computing, and compliance with industry standards including Payment Card Industry Data Security Standard and Federal Information Processing Standards

Troubleshoot and resolve infrastructure and Hardware Security Module-related issues, performing root cause analysis and implementing corrective actions using monitoring tools

Participate in risk assessments, audits, and incident response activities related to infrastructure and Hardware Security Module environments

Apply domain knowledge of payment processes and business resiliency to infrastructure design and operational decision-making

Uses enterprise-authorized AI capabilities within the work environment to accelerate security analysis and vulnerability assessment documentation, validating outputs and ensuring sensitive data is handled appropriately.

Applies reuse-first, AI-assisted practices within SDLC/toolchain routines to strengthen security testing and control validation, ensuring traceability/auditability and alignment to resiliency and security expectations.

Required qualifications, capabilities and skills

Formal training or certification on security engineering concepts and 5+ years applied experience

Hands-on engineering experience with Hardware Security Modules, including expertise in architecture and system design of highly available infrastructure, disaster recovery, and business continuity strategies

Experience with network security, firewalls, and secure room operations and key ceremonies

Proficient technical troubleshooting skills with strong Linux and Unix administration experience in enterprise environments

Proficiency in designing and documenting infrastructure architectures using industry-standard tools and methodologies

Experience with infrastructure automation tools such as Terraform for managing and scaling secure environments

Hands-on experience with OpenSSL and certificate-based authentication mechanisms

Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support security engineering workflows with strong validation habits and awareness of data sensitivity.

Ability to review and validate AI-assisted code/security recommendations before use, escalating when uncertain and following security and data handling requirements.

Preferred qualifications, capabilities and skills

Hands-on experience with Splunk or equivalent platforms for infrastructure monitoring and troubleshooting

Strong domain knowledge of payment processes and business resiliency applied to infrastructure design

Relevant Hardware Security Module platform certifications such as Thales or FutureX credentials

Strong understanding of cryptographic principles, key management, confidential computing, and secure hardware operations

Experience Level Senior Level