Lead Security Engineer- Cloud Devops Engineer

JPMorgan Chase & Co.; Plano (TX); On-site; USD 170,000 - 230,000; Full time

Job summary

JPMorgan Chase & Co. is seeking a Lead Security Engineer to design and deliver cloud-native forensic platforms across AWS, Azure, GCP, and on-prem environments. You will own secure platform deployment, automation, and threat modeling to strengthen incident response at a global scale.

Role emphasizes automation, CI/CD pipelines, and collaboration with security operations, cloud teams, and engineering. Enterprise-scale resilience is a primary objective.

Qualifications

• Formal training or certification in security engineering (5+ years applied experience).
• Hands-on with AWS, Azure, and GCP; multi-cloud deployments.
• Terraform and IaC for secure cloud provisioning; auditable environments.
• CI/CD pipelines for infra and platform releases; automation focus.
• Scripting in Python/PowerShell/Bash for ops and deployment tasks.
• Linux and Windows server admin in enterprise settings.
• Cloud security principles: IAM, RBAC, encryption, compliance.
• Git-based source control with branching and code review practices.
• Ability to review AI-assisted code for security and resiliency.

Responsibilities

• Design, deploy, and maintain forensic platforms across multi-cloud and on-prem environments.
• Develop and manage IaC using Terraform for secure, repeatable deployments.
• Build and maintain CI/CD pipelines for infra and platform releases.
• Automate deployment, configuration, monitoring, and operational processes.
• Perform production readiness, validation, and failover testing.
• Implement cloud networking, storage, IAM, encryption, and security controls.
• Collaborate across teams to improve platform reliability and incident response capabilities.
• Apply AI-assisted practices to strengthen security testing and threat modeling.
• Create architecture diagrams, runbooks, and governance documentation.

Skills

Cloud security

Terraform

CI/CD pipelines

Python scripting

Linux/Windows admin

IAM & access control

Threat modeling

AI-assisted security

Security architecture

Incident response

Tools

Terraform

Git

Job description

Take on a pivotal role where your expertise in cloud security and platform engineering will directly protect one of the world's largest financial institutions. As a Lead Security Engineer on the Digital Forensics Platform Engineering team, you will design and deliver the next generation of enterprise forensic investigation platforms — driving innovation, automation, and resilience at global scale.

As a Lead Security Engineer at JPMorganChase within the Digital Forensics Platform Engineering team, you will own the design, deployment, and automation of secure, cloud-native forensic investigation platforms across multi-cloud environments. You will work alongside engineering, cybersecurity operations, and cloud infrastructure teams to deliver scalable, resilient platforms that power global incident response and digital investigations. Your work will directly strengthen the firm's ability to detect, investigate, and respond to cybersecurity threats — making a measurable impact on the security of millions of customers and employees worldwide.

Job responsibilities

• Design, deploy, and maintain enterprise digital forensics platforms across AWS, Azure, GCP, and on-premises environments, ensuring security, scalability, and high availability
• Develop and manage Infrastructure-as-Code using Terraform to provision secure, repeatable, and auditable cloud environments
• Build and maintain continuous integration and delivery pipelines supporting infrastructure and platform releases across multi-cloud environments
• Implement automation for platform deployment, configuration management, monitoring, and operational processes to drive efficiency and reliability
• Perform functional, validation, failover, and production readiness testing to ensure platform integrity and operational resilience
• Implement cloud networking, storage, identity and access management, encryption, and security controls aligned to compliance and regulatory standards
• Collaborate with cybersecurity operations, engineering, and cloud service teams to enhance platform reliability, scalability, and incident response capabilities
• Apply AI-assisted practices within the software development lifecycle to strengthen security testing, control validation, and threat modeling, ensuring traceability and alignment to resiliency expectations
• Create and maintain technical documentation, architecture diagrams, runbooks, and operational procedures to support platform governance and knowledge sharing

Required qualifications, capabilities, and skills

• Formal training or certification on security engineering concepts and 5+ years applied experience
• Hands-on experience with AWS services including compute, networking, storage, identity management, and audit logging, with additional experience in Azure and/or Google Cloud Platform
• Demonstrated experience with Terraform and Infrastructure-as-Code methodologies for provisioning and managing secure cloud environments
• Experience building and maintaining continuous integration and delivery pipelines for infrastructure and platform releases
• Proficiency in automation and scripting using Python, PowerShell, Bash, or similar languages to support platform operations and deployment workflows
• Experience with Linux and Windows server administration in enterprise environments
• Knowledge of cloud security principles including identity and access management, role-based access control, encryption, and compliance controls
• Experience with source control management using Git, including branching strategies and code review practices
• Demonstrated ability to review and validate AI-assisted code and security recommendations, ensuring outcomes align to security, resiliency, and auditability expectations

Preferred qualifications, capabilities, and skills

• Experience with digital forensics platforms and cloud-based investigative solutions supporting incident response workflows
• Familiarity with VMware virtualization environments including virtual machine lifecycle management and virtual desktop infrastructure
• Experience with container-based architectures and cloud-native application development patterns
• Knowledge of threat modeling, vulnerability assessment, and penetration testing methodologies
• Experience supporting disaster recovery, high availability, and resiliency initiatives across distributed cloud platforms