Lead Software Engineer - Cloud / GCP Engineer

JPMorganChase; Plano (TX); On-site; USD 150,000 - 210,000; Full time

Job summary

JPMorganChase is seeking a Lead Software Engineer to shape and deliver secure, scalable GCP-based platform capabilities for the Corporate Sector Infrastructure team. You will design, implement, and monitor core services, automation, and guardrails while guiding cross-functional teams.

You will own identity federation, security components, and the adoption of AI-assisted engineering practices to improve code quality and delivery speed.

Qualifications

• : Formal training or certification on software engineering concepts and 5+ years applied experience.
• : Strong experience with GCP IAM and identity (role/permission modeling, service accounts, federation patterns, access governance).
• : Hands-on expertise with key GCP services such as Cloud Run/Cloud Functions, Pub/Sub, and GKE.
• : Proficiency in Terraform and programming/scripting in Python or Go (automation, tooling, CI/CD integration).
• : Experience implementing guardrails at scale (IAM Conditions/deny policies, policy-as-code, centralized logging/audit, key management patterns).
• : Demonstrated ability to deliver secure, compliant solutions and influence technical decisions across cross-functional teams.

Responsibilities

• Executes creative software solutions, design, development, and technical troubleshooting with ability to think beyond routine or conventional approaches to build solutions or breakdown technical problems.
• Leads the architecture and hands-on delivery of GCP foundational platform capabilities (landing zones, org/folder/project hierarchy, networking, shared services).
• Builds and maintain reusable automation and paved roads (Terraform modules, reference architectures, CI/CD enablement) that accelerate secure onboarding.
• Owns GCP security guardrails: IAM/role engineering, service account patterns, IAM Conditions, org policies, and deny policies.
• Designs and implements identity federation (OIDC/SAML, Workforce Identity Federation, Workload Identity Federation) and enable IAM governance/audit readiness through automation and evidence patterns.
• Drives team adoption of enterprise-authorized AI-assisted engineering practices within the work environment to improve code quality, delivery speed, and operational outcomes (e.g., AI-assisted code review/refactoring, test strategy acceleration, incident/root-cause analysis support), while establishing consistent validation standards (secure coding, peer review, automated testing) and promoting reuse of effective patterns across the team.

Skills

GCP IAM

GCP services

Terraform

Python/Go

Security guardrails

AI-assisted development

OIDC/SAML

OAuth2

AWS/Azure

Docker

Kubernetes

Tools

Terraform

Docker

Kubernetes

Job description

Job Description

We have an opportunity to impact your career and provide an adventure where you can push the limits of what's possible.

As a Lead Software Engineer at JPMorganChase within the Corporate Sector - Infrastructure platform, you are an integral part of an agile team that works to enhance, build, and deliver trusted market-leading technology products in a secure, stable, and scalable way. As a core technical contributor, you are responsible for conducting critical technology solutions across multiple technical areas within various business functions in support of the firm's business objectives.

Job Responsibilities

• Executes creative software solutions, design, development, and technical troubleshooting with ability to think beyond routine or conventional approaches to build solutions or breakdown technical problems
• Leads the architecture and hands-on delivery of GCP foundational platform capabilities (landing zones, org/folder/project hierarchy, networking, shared services).
• Builds and maintain reusable automation and paved roads (Terraform modules, reference architectures, CI/CD enablement) that accelerate secure onboarding.
• Owns GCP security guardrails: IAM/role engineering, service account patterns, IAM Conditions, org policies, and deny policies.
• Designs and implements identity federation (OIDC/SAML, Workforce Identity Federation, Workload Identity Federation) and enable IAM governance/audit readiness through automation and evidence patterns.
• Drives team adoption of enterprise-authorized AI-assisted engineering practices within the work environment to improve code quality, delivery speed, and operational outcomes (e.g., AI-assisted code review/refactoring, test strategy acceleration, incident/root-cause analysis support), while establishing consistent validation standards (secure coding, peer review, automated testing) and promoting reuse of effective patterns across the team.
• Leads evaluation sessions with external vendors, startups, and internal teams to drive outcomes-oriented probing of architectural designs, technical credentials, and applicability for use within existing systems and information architecture

Required Qualifications, Capabilities, And Skills

• Formal training or certification on software engineering concepts and 5+ years applied experience
• Strong experience with GCP IAM and identity (role/permission modeling, service accounts, federation patterns, access governance).
• Hands-on expertise with key GCP services such as Cloud Run/Cloud Functions, Pub/Sub, and GKE.
• Proficiency in Terraform and programming/scripting in Python or Go (automation, tooling, CI/CD integration).
• Experience implementing guardrails at scale (IAM Conditions/deny policies, policy-as-code, centralized logging/audit, key management patterns).
• Demonstrated ability to deliver secure, compliant solutions and influence technical decisions across cross-functional teams.
• Demonstrated experience leading effective use of approved AI-assisted software development tools (e.g., for coding, code review, test acceleration, troubleshooting) with the ability to set team expectations for validating AI outputs for correctness, performance, and security.
• Strong understanding of responsible AI use in engineering workflows, including data sensitivity considerations, secure handling of inputs/outputs, and adherence to resiliency and security expectations; experience coaching engineers on safe, compliant adoption within delivery practices

Preferred qualifications, capabilities, and skills

• Experience with AWS and/or Azure (multi-cloud operating models and patterns).
• Strong containerization/orchestration experience (Docker, Kubernetes), including production-grade GKE operations.
• Solid understanding of OAuth2, OIDC, and SAML; secure service-to-service identity patterns.
• Good understanding of LLM and other AI/ML frameworks which can be used in AIOPS
• Relevant certifications (e.g., Google Professional Cloud Architect and/or Professional Cloud Security Engineer).

About Us

JPMorganChase, one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world's most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management.

We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process.

We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs. Visit [...]

JPMorgan Chase & Co. is an Equal Opportunity Employer, including Disability/Veterans

About The Team

Our Global Technology Infrastructure group is a team of innovators who love technology as much as you do. Together, you'll use a disciplined, innovative and a business focused approach to develop a wide variety of high-quality products and solutions. You'll work in a stable, resilient and secure operating environment where you—and the products you deliver—will thrive.

High Risk Roles (HRR) are sensitive roles within the technology organization that require high assurance of the integrity of staff by virtue of 1) sensitive cybersecurity and technology functions they perform within systems or 2) information they receive regarding sensitive cybersecurity or technology matters. Users in these roles are subject to enhanced pre-hire screening which includes both criminal and credit background checks (as allowed by law). The enhanced screening will need to be successfully completed prior to commencing employment or assignment.