Lead IAM Engineer — Modern Identity & Access Platform

JPMorgan Chase & Co.; Plano (TX); On-site; USD 150,000 - 210,000; Full time

Job summary

JPMorgan Chase & Co. in Plano, TX seeks a Lead Software Engineer for Identity and Access Management to drive a team delivering next-generation authentication and authorization solutions.

You will modernize platforms across channels using PingFederate, Transmit Security, ForgeRock, and cloud-native technologies, focusing on secure coding, AI-assisted development practices, and scalable architectures.

Qualifications

• Formal training or certification on software engineering concepts and 5+ years applied experience.
• Hands-on experience with PingFederate, Transmit Security, and ForgeRock platforms for authentication and authorization.
• Ability to lead and guide a small team to deliver innovative solutions.
• Understanding of application and data architecture disciplines.
• Experience with authentication and modern authentication practices and solutions (OAuth2/OpenID Connect, SAML, Facebook Login, Google Sign-In).
• Proficiency in one or more general-purpose programming languages; Java strongly preferred.
• Hands-on practical experience delivering system design, application development, testing, and operational stability.
• Proficiency in Java, Spring Boot, React.
• Knowledge of RESTful API design and development, including secure token-based authentication and authorization.
• Knowledge of AWS, Kubernetes; advanced in one or more programming language(s).
• Hands-on experience developing and supporting Java (Spring Boot) microservices in an enterprise environment.
• Cloud-native experience (AWS, Azure, or GCP).
• Experience designing and developing custom solution adapters and authentication logic on these platforms, including integration with external data sources and endpoints.
• Experience developing against vendor SDKs and Admin APIs to extend authentication platforms where native configuration is insufficient.
• Experience developing and consuming secure REST APIs and backend services supporting IAM platforms, including token validation and service-to-service integration.
• Proficiency in Java, including building applications that integrate with identity providers.
• Demonstrated experience leading effective use of approved AI-assisted software development tools with the ability to set team expectations for validating AI outputs for correctness, performance, and security.
• Strong understanding of responsible AI use in engineering workflows, including data sensitivity considerations, secure handling of inputs/outputs, and adherence to resiliency and security expectations.

Responsibilities

• Modernize authentication and authorization platforms across multiple channels and domains, leveraging PingFederate, Transmit Security, and ForgeRock.
• Evaluate and prototype internal and vendor solutions for user authentication.
• Integrate anti-fraud and biometric authentication solutions into customer-facing applications.
• Utilize APIs and SDKs for both niche solutions and open standards.
• Execute creative software solutions, design, development, and technical troubleshooting with the ability to think beyond routine or conventional approaches to build solutions or break down technical problems.
• Develop secure and high-quality production code, and review and debug code written by others.
• Drive team adoption of enterprise-authorized AI-assisted engineering practices within the work environment to improve code quality, delivery speed, and operational outcomes, while establishing consistent validation standards.
• Apply knowledge of tools within the Software Development Life Cycle toolchain, including enterprise-authorized AI-assisted development and automation capabilities, to improve the value realized by automation.
• Identify opportunities to eliminate or automate remediation of recurring issues to improve overall operational stability of software applications and systems.
• Build and maintain IAM web and UI components that invoke platform authentication flows.
• Design supporting data schemas, connection pooling, and failover for authentication and token storage.

Skills

PingFederate

Transmit Security

ForgeRock

Java

Spring Boot

React

RESTful API

OAuth2/OpenID Connect

SAML

AWS

Kubernetes

Java microservices

Open standards

AI-assisted development

AI-assisted code review

Job description

JPMorgan Chase & Co. in Plano, TX seeks a Lead Software Engineer for Identity and Access Management to drive a team delivering next-generation authentication and authorization solutions.

You will modernize platforms across channels using PingFederate, Transmit Security, ForgeRock, and cloud-native technologies, focusing on secure coding, AI-assisted development practices, and scalable architectures.