Director of Software Engineering - Unified Ingress

JPMorganChase

Jersey City (NJ)

On-site

USD 180,000 - 240,000

Full time

2 days ago
Be an early applicant

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Job summary

JPMorganChase is seeking a Director of Software Engineering to lead the unified Ingress platform across CIB digital channels. You will manage 20+ engineers across gateway, control plane, identity integration, and platform operations, owning the delivery plan end-to-end.

You will set engineering standards, drive architectural reviews, and partner with Architecture, Infra, Network, and Cybersecurity teams to align with reference architectures and secure approvals.

Qualifications

  • 12+ years of industry experience, including 4+ years leading engineering teams.
  • Proven track record managing teams of 15+ engineers across multiple workstreams.
  • Strong hands-on technical grounding in ingress and gateway technology - Envoy Proxy or Kong.
  • Working depth in OAuth 2.0 / OpenID Connect (OIDC) / PKCE, DPoP, mTLS.
  • Production Kubernetes experience (EKS) and GitOps delivery models (ArgoCD, Helm).
  • Go development background sufficient to review control-plane code and participate in design discussions.
  • Experience partnering with enterprise Architecture functions and security teams.

Responsibilities

  • Own the end-to-end delivery plan for the platform - milestones, dependencies, critical path, and committed dates across all workstreams
  • Set and enforce engineering standards - code review, testing, documentation, observability-first design, and production readiness criteria
  • Chair technical design reviews for gateway, control plane, and session management components and make architectural decisions
  • Partner with enterprise Architecture groups to align the platform to reference architectures and secure design approvals
  • Collaborate with Infrastructure, Network, Cybersecurity, and Identity teams to sequence and unblock shared dependencies
  • Drive the migration program - onboarding sequencing, cutover planning, rollback readiness, and decommissioning legacy auth components
  • Run an efficient delivery cadence - sprint planning, backlog grooming, dependency tracking, risk/issue management, capacity planning

Skills

Team leadership
Delivery management
Architecture reviews
OAuth / OIDC
Kubernetes
Go development

Education

Bachelor's degree in CS/Engineering

Tools

Envoy Proxy
Kong API Gateway
EKS
ArgoCD
Helm

Job description

Job Description

If you are a software engineering leader ready to take the reins and drive impact, we've got an opportunity just for you.

As a Director of Software Engineering at JPMorgan Chase within the Corporate & Investment Bank (CIB) Unified Ingress platform, you will be accountable for delivering the centralized ingress layer that handles authentication, authorization, traffic management, and observability for all Corporate & Investment Bank digital channels. You will manage a team of 20+ engineers across gateway, control plane, identity integration, and platform operations, and owns the delivery plan through to full production adoption and legacy decommissioning. you will consolidate all external traffic through a standardized seven-layer stack (Domain Name System (DNS) steering, Content Delivery Network / Web Application Firewall (CDN/WAF), perimeter, gateway, authentication, authorization, observability) managed via a single control plane. The platform build, the LOB migration program, and production hardening now run in parallel across a team of 20+ engineers spanning gateway, control plane, identity, and platform operations workstreams.

Job Responsibilities
  • Own the end-to-end delivery plan for the platform - milestones, dependencies, critical path, and committed dates across all workstreams
  • Set and enforce engineering standards - code review, testing, documentation, observability-first design, and production readiness criteria
  • Chair technical design reviews for the gateway, control plane, and session management components, and make architectural decisions where the team needs a call
  • Partner with enterprise Architecture groups to align the platform to reference architectures, secure design approvals, and represent the platform in architecture forums
  • Partner with Infrastructure, Network, Cybersecurity, and Identity (AuthE / Sentry) teams to sequence and unblock shared dependencies including DNS, CDN/WAF, certificates, perimeter policy, and identity provider integration
  • Drive the LOB migration program - onboarding sequencing, cutover planning, rollback readiness, and decommissioning of legacy authentication Web Agents and Apache proxies
  • Run an efficient delivery cadence - sprint planning, backlog grooming, dependency tracking, risk and issue management, and capacity planning against roadmap commitments
Required Qualifications, Capabilities, And Skills
  • 12+ years of industry experience, including 4+ years leading engineering teams
  • Proven track record managing teams of 15+ engineers across multiple concurrent workstreams, including line management, performance management, hiring, and mentoring
  • Strong hands-on technical grounding in ingress and gateway technology - Envoy Proxy (xDS/ADS, ext_authz, HTTP/2, gRPC) and/or Kong API Gateway - sufficient to lead design reviews and challenge implementation decisions credibly
  • Working depth in OAuth 2.0 / OpenID Connect (OIDC) / Proof Key for Code Exchange (PKCE) flows, Demonstrating Proof of Possession (DPoP) sender-constrained tokens, mutual Transport Layer Security (mTLS), and session management patterns
  • Production Kubernetes experience (Amazon Elastic Kubernetes Service (EKS) and/or on-prem clusters) and GitOps delivery models (ArgoCD, Helm)
  • Go development background sufficient to review control-plane code, set engineering standards, and participate in design discussions
  • Experience partnering with enterprise Architecture functions - representing designs in architecture review forums, aligning to reference architectures, and negotiating exceptions
  • Experience partnering with Infrastructure, Network, and Cybersecurity teams on shared dependencies such as DNS, CDN/WAF, certificate lifecycle, firewall policy, and perimeter change management
Preferred Qualifications, Capabilities, And Skills
  • Financial services or other regulated-industry experience, including regulatory and audit engagement
  • Experience running a migration program that decommissions legacy infrastructure while traffic is live
  • Familiarity with Open Policy Agent (OPA) and policy-as-code authorization models
  • Familiarity with OpenTelemetry, Dynatrace, and Splunk Security Information and Event Management (SIEM) toolchains
  • Background in identity platforms (ForgeRock, Security Assertion Markup Language (SAML) federation, token exchange patterns)
About Us

JPMorganChase, one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world's most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management.

We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process.

We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.

JPMorgan Chase & Co. is an Equal Opportunity Employer, including Disability/Veterans

About The Team

J.P. Morgan's Commercial & Investment Bank is a global leader across banking, markets, securities services and payments. Corporations, governments and institutions throughout the world entrust us with their business in more than 100 countries. The Commercial & Investment Bank provides strategic advice, raises capital, manages risk and extends liquidity in markets around the world.

Get your free, confidential resume review.

or drag and drop your file here.

Similar jobs

Similar jobs worth comparing

Sr. Lead Software Engineer-Full Stack/Java/AWS
Sr. Lead Software Engineer-Full Stack/Java/AWS

JPMorganChase • Jersey City (NJ)

On-site
USD 140,000 - 190,000
Sr Manager of Software Engineering - Sanctions Technology
Sr Manager of Software Engineering - Sanctions Technology

JPMorganChase • Tampa (FL)

On-site
USD 180,000 - 240,000
Lead Software Engineer - Fullstack Java and React with Cloud
Lead Software Engineer - Fullstack Java and React with Cloud

JPMorganChase • Jersey City (NJ)

On-site
USD 140,000 - 210,000
Sr. Lead Software Engineer-Full Stack/Java/AWS
Sr. Lead Software Engineer-Full Stack/Java/AWS

JPMorgan Chase • Jersey City (NJ)

On-site
USD 180,000 - 230,000
Java Lead Software Engineer
Java Lead Software Engineer

JPMorgan Chase • Chicago (IL)

On-site
USD 140,000 - 210,000
Comprehensive health care coverage
Retirement savings plan
Tuition reimbursement
+2
Java Lead Software Engineer
Java Lead Software Engineer

JPMorganChase • Chicago (IL)

On-site
USD 130,000 - 190,000
Health care
Retirement plan
On-site health center
+1
Lead Software Engineer - Java, React, AWS
Lead Software Engineer - Java, React, AWS

Aumni • Jersey City (NJ)

On-site
USD 180,000 - 230,000
Software Engineer III - Java Fullstack / AWS
Software Engineer III - Java Fullstack / AWS

JPMorganChase • Austin (TX)

On-site
USD 120,000 - 180,000
Lead Infrastructure Engineer - Powering Identity & Access Management at Scale
Lead Infrastructure Engineer - Powering Identity & Access Management at Scale

JPMorganChase • Columbus (OH)

On-site
USD 110,000 - 150,000
Competitive total rewards package
Comprehensive health care coverage
Lead Software Engineer - Full Stack
Lead Software Engineer - Full Stack

JPMorganChase • San Francisco (CA)

On-site
USD 170,000 - 230,000