Lead Software Engineer - GCP Infrastructure

JPMorgan Chase & Co.; Plano (TX); On-site; USD 61,000 - 101,000; Full time

Benefits offered by this job

Health care coverage

Retirement savings

Tuition reimbursement

Mental health support

Job summary

JPMorgan Chase & Co. in Plano, Texas, is seeking a Lead Software Engineer to architect and deliver GCP foundation services, including landing zones, IAM, and guardrails, while building reusable automation and CI/CD pipelines modernizing the security posture.

You will drive secure identities, federation, and policy-as-code across cross-functional teams, and advocate responsible AI use within engineering workflows.

Qualifications

• Formal training or certification in software engineering concepts with 5+ years of applied experience.
• Strong experience with GCP IAM and identity, including role and permission modeling, service accounts, federation patterns, and access governance.
• Hands-on expertise with GCP services such as Cloud Run, Cloud Functions, Pub/Sub, and GKE.
• Proficiency in Terraform and Python or Go for automation, tooling, and CI/CD integration.
• Experience implementing large-scale guardrails, including IAM Conditions and deny policies, policy-as-code, centralized logging and auditing, and key management patterns.
• Ability to deliver secure, compliant solutions and influence technical decisions across cross-functional teams.
• Experience leading the effective use of approved AI-assisted software development tools, with the ability to set expectations for validating AI outputs for correctness, performance, and security.
• Understanding of responsible AI use in engineering workflows, including data sensitivity, secure handling of inputs and outputs, and security and resiliency expectations; experience coaching engineers on safe, compliant adoption.
• Preferred: Experience with AWS and/or Azure and multi-cloud operating models.
• Preferred: Strong containerization and orchestration experience with Docker and Kubernetes, including production-grade GKE operations.
• Preferred: Understanding of OAuth2, OIDC, SAML, and secure service-to-service identity patterns.
• Preferred: Understanding of LLM and other AI/ML frameworks used in AIOps.
• Preferred: Relevant certifications, such as Google Professional Cloud Architect or Professional Cloud Security Engineer.
• This is a High Risk Role requiring enhanced pre-hire screening, including criminal and credit background checks where permitted by law; screening must be successfully completed before employment or assignment begins.

Responsibilities

• Develop creative software solutions, design and build systems, and troubleshoot technical issues, applying approaches beyond routine solutions.
• Lead the architecture and hands-on delivery of GCP foundational platform capabilities, including landing zones, organization, folder and project hierarchy, networking, and shared services.
• Build and maintain reusable automation and paved roads, including Terraform modules, reference architectures, and CI/CD enablement, to support secure onboarding.
• Own GCP security guardrails, including IAM and role engineering, service account patterns, IAM Conditions, organization policies, and deny policies.
• Design and implement identity federation using OIDC, SAML, Workforce Identity Federation, and Workload Identity Federation; automate IAM governance and audit-readiness evidence patterns.
• Encourage enterprise-approved AI-assisted engineering practices to improve code quality, delivery speed, and operational outcomes; establish validation standards for secure coding, peer review, and automated testing, and promote effective patterns across the team.
• Lead evaluation sessions with external vendors, startups, and internal teams to assess architectural designs, technical credentials, and suitability for existing systems and information architecture.
• Contribute as a core technical member of an agile team delivering technology solutions in support of the firms business objectives

Skills

GCP IAM

Terraform

Python/Go

Security governance

AI/ML frameworks

Vendor evaluation

OAuth/OIDC/SAML

Education

Formal training or certification in software engineering concepts

Tools

Cloud Run

Cloud Functions

Pub/Sub

GKE

Docker

Kubernetes

CI/CD tooling

Python

Go

Job description

Salary: $61,000 - 101,000 per year

Requirements:

• Formal training or certification in software engineering concepts, with 5+ years of applied experience
• Strong experience with GCP IAM and identity, including role and permission modeling, service accounts, federation patterns, and access governance
• Hands-on expertise with GCP services such as Cloud Run, Cloud Functions, Pub/Sub, and GKE
• Proficiency in Terraform and Python or Go for automation, tooling, and CI/CD integration
• Experience implementing large-scale guardrails, including IAM Conditions and deny policies, policy-as-code, centralized logging and auditing, and key management patterns
• Ability to deliver secure, compliant solutions and influence technical decisions across cross-functional teams
• Experience leading the effective use of approved AI-assisted software development tools, with the ability to set expectations for validating AI outputs for correctness, performance, and security
• Understanding of responsible AI use in engineering workflows, including data sensitivity, secure handling of inputs and outputs, and security and resiliency expectations; experience coaching engineers on safe, compliant adoption
• Preferred: Experience with AWS and/or Azure and multi-cloud operating models
• Preferred: Strong containerization and orchestration experience with Docker and Kubernetes, including production-grade GKE operations
• Preferred: Understanding of OAuth2, OIDC, SAML, and secure service-to-service identity patterns
• Preferred: Understanding of LLM and other AI/ML frameworks used in AIOps
• Preferred: Relevant certifications, such as Google Professional Cloud Architect or Professional Cloud Security Engineer
• This is a High Risk Role requiring enhanced pre-hire screening, including criminal and credit background checks where permitted by law; screening must be successfully completed before employment or assignment begins

Responsibilities:

• Develop creative software solutions, design and build systems, and troubleshoot technical issues, applying approaches beyond routine solutions
• Lead the architecture and hands-on delivery of GCP foundational platform capabilities, including landing zones, organization, folder and project hierarchy, networking, and shared services
• Build and maintain reusable automation and paved roads, including Terraform modules, reference architectures, and CI/CD enablement, to support secure onboarding
• Own GCP security guardrails, including IAM and role engineering, service account patterns, IAM Conditions, organization policies, and deny policies
• Design and implement identity federation using OIDC, SAML, Workforce Identity Federation, and Workload Identity Federation; automate IAM governance and audit-readiness evidence patterns
• Encourage enterprise-approved AI-assisted engineering practices to improve code quality, delivery speed, and operational outcomes; establish validation standards for secure coding, peer review, and automated testing, and promote effective patterns across the team
• Lead evaluation sessions with external vendors, startups, and internal teams to assess architectural designs, technical credentials, and suitability for existing systems and information architecture
• Contribute as a core technical member of an agile team delivering technology solutions in support of the firms business objectives

Technologies:

• AI
• AWS
• Architect
• Azure
• CI/CD
• Cloud
• Docker
• GCP
• IAM
• Support
• Kubernetes
• LLM
• Python
• SAML
• Security
• Terraform
• DevOps

More:

We offer a Lead Software Engineer opportunity within JPMorganChases Corporate Sector Infrastructure platform. Our Global Technology Infrastructure group brings together technology innovators to develop high-quality products and solutions through a disciplined, innovative, and business-focused approach, within a stable, resilient, and secure operating environment. We are a global financial institution serving consumers, small businesses, and corporate, institutional, and government clients, with a history spanning more than 200 years. Our total rewards package may include competitive base pay, eligible incentive compensation, health care coverage, wellness centers, retirement savings, backup childcare, tuition reimbursement, mental health support, and financial coaching, subject to role and eligibility. We value diversity and inclusion, provide equal employment opportunities, and offer reasonable accommodations for religious practices and beliefs, as well as mental or physical disability needs.

last updated 41 week of 2026