Blockchain - Sr Lead Security Engineer

JPMorgan Chase & Co.; Plano (TX); On-site; USD 150,000 - 210,000; Full time

Job summary

JPMorgan Chase & Co. is seeking a Lead Security Engineer to design, build, and operate an enterprise-grade digital asset custody and wallet orchestration platform.

You will work on secure key management, multi-chain wallet capabilities, and policy-driven security in a cloud-native environment. The role combines distributed systems engineering, cryptographic security, and financial services technology to deliver robust wallet services across multiple networks.

Qualifications

• Bachelor's degree in Computer Science, Software Engineering, or a related field; 7+ years of software development with blockchain/digital asset platforms preferred.
• Strong proficiency in Java/J2EE and/or Python; hands-on microservices development with Spring Boot, Flask, or FastAPI.
• Solid understanding of blockchain fundamentals, including EVM/non-EVM, gas/fee management, and multi-chain interactions.

Responsibilities

• Design, architect, and develop a production-grade digital asset custody & wallet orchestration platform.
• Implement secure key management workflows using MPC and distributed key generation.
• Build policy engines for multi-signature, approvals, and spending controls.
• Develop multi-chain wallet capabilities across Ethereum, Bitcoin, Solana, Polygon.
• Manage full blockchain lifecycle: construction, fees, signing, broadcast, and retries.
• Create event-driven architectures and webhooks for real-time blockchain notifications.
• Develop secure RESTful APIs and microservices with OAuth 2.0/JWT security.
• Integrate with compliance/risk systems and audit trails.
• Implement observability with Datadog, Dynatrace, Splunk; ensure HA/DR in AWS.

Skills

Java/J2EE

Python

Spring Boot

Flask

FastAPI

Blockchain

Cryptography

MPC

TSS

DKG

ECDSA/EdDSA

BIP-32/BIP-44

Policy engines

OAuth 2.0

JWT

AWS

Terraform

CloudFormation

Docker

Kubernetes

RESTful APIs

API security

Event-driven

Databases

Oracle

PostgreSQL

DynamoDB

MongoDB

Redis

Datadog

Dynatrace

Splunk

Grafana

Prometheus

CI/CD

Jenkins

GitHub Actions

Spinnaker

Education

Bachelor's degree in Computer Science, Software Engineering, or related field

Tools

Docker

Kubernetes

Terraform

CloudFormation

API Gateway

Job description

Take on a crucial role where you'll be a key part of a high-performing team delivering secure software solutions. Make a real impact as you help shape the future of software security at one of the world's largest and most influential companies.

As a Lead Security Engineer at JPMorgan Chase within the CTC Emerging Technologies Security group, you will design, build, and operate an enterprise-grade Digital Asset Custody and Wallet Orchestration Platform. In this role, you will be at the forefront of institutional blockchain infrastructure, responsible for building secure, scalable, and compliant wallet services that power our digital asset operations across multiple blockchain networks. You will work at the intersection of distributed systems engineering, cryptographic security, and financial services technology — building the foundational infrastructure that enables secure key management, programmable transaction policies, and seamless multi-chain wallet capabilities. This is a hands-on engineering role requiring knowledge of blockchain protocols, cloud-native development, and enterprise security practices.

Job Responsibilities

• Design, architect, and develop a production-grade digital asset custody & wallet orchestration platform by integrating with wallet infra platforms leveraging their APIs and SDKs for wallet provisioning, key management, and transaction orchestration
• Implement secure key management workflows using Multi-Party Computation (MPC) and distributed key generation, ensuring no single point of failure
• Build and configure programmable transaction policy engines, including multi-approval workflows, spending thresholds, velocity limits and role-based access controls
• Develop multi-chain wallet capabilities supporting blockchain networks such as Ethereum, Bitcoin, Solana, and Polygon through unified API abstractions
• Manage the full blockchain transaction lifecycle, including transaction construction, fee estimation, payload signing, broadcast, confirmation tracking, and idempotent retry logic for failed or stuck transactions
• Design event-driven and webhook-based architectures to process real-time blockchain notifications such as transaction confirmations, smart contract events
• Build secure RESTful APIs and microservices that expose wallet functionality to internal consumers, applying OAuth 2.0, JWT-based authentication, API gateway patterns
• Develop and maintain integrations with compliance and risk systems, including transaction monitoring and comprehensive audit trail generation
• Implement robust observability across the wallet service stack, including distributed tracing, structured logging, alerting, and dashboarding using tools such as Datadog, Dynatrace, and Splunk
• Architect the wallet service for high availability, disaster recovery, and horizontal scalability using container orchestration on AWS (EKS/ECS), infrastructure-as-code (Terraform), and cloud-native resilience patterns
• Collaborate with product managers, security teams, and business stakeholders to translate regulatory and business requirements into technical designs and delivery milestones
• Add to team culture of diversity, opportunity, inclusion, and respect

Required Qualifications, Capabilities, and Skills

• Bachelor's degree in Computer Science, Software Engineering, or a related field, with 7+ years of software development experience, including at least 2 years working with blockchain technologies or digital asset platforms
• Strong proficiency in Java/J2EE and/or Python, with hands-on experience building production microservices using frameworks such as Spring Boot, Flask, or FastAPI
• Solid understanding of blockchain fundamentals, including transaction models, consensus mechanisms, smart contract interaction (EVM-based and non-EVM), gas and fee management, and block finality across major networks
• Working knowledge of cryptographic primitives and protocols relevant to digital asset custody, including Multi-Party Computation (MPC), threshold signatures (TSS), distributed key generation (DKG), elliptic curve cryptography (ECDSA, EdDSA), and HD wallet derivation paths (BIP-32/BIP-44)
• Experience designing and implementing policy engines or rule-based authorization frameworks for financial transaction workflows, including multi-signature schemes, approval chains, and configurable spending controls
• Proficiency with cloud infrastructure on AWS, including EC2, EKS, Lambda, S3, RDS, IAM, SQS, SNS, API Gateway, and KMS, with experience using Terraform or CloudFormation for infrastructure-as-code
• Strong experience with containerization and orchestration using Docker and Kubernetes, including deployment pipelines, and auto-scaling configurations
• Experience designing and consuming RESTful APIs, with deep understanding of OAuth 2.0, JWT, TLS/mTLS, certificate management, and API security best practices
• Familiarity with event-driven architectures, webhook processing, and asynchronous messaging patterns for handling real-time blockchain state changes and notifications
• Experience with relational (Oracle, PostgreSQL) and NoSQL (DynamoDB, MongoDB, Redis) databases, including schema design, query optimization, and data consistency patterns for financial systems
• Proficiency with observability and monitoring tools such as Datadog, Dynatrace, Splunk, Grafana, or Prometheus for distributed tracing, log aggregation, and performance monitoring
• Solid understanding of agile development methodologies, CI/CD pipelines (Jenkins, GitHub Actions, Spinnaker), and DevOps practices in a large enterprise environment

Preferred Qualifications

• Experience building or operating digital asset custody solutions in a regulated financial institution
• Experience using AI-assisted development tools (e.g., GitHub Copilot, Claude Code ) to accelerate development and test generation