Lead Software Engineer- Java Full Stack / IAM

JPMorgan Chase & Co.; Plano (TX); On-site; USD 190,000 - 260,000; Full time

Job summary

JPMorgan Chase & Co. is seeking a Lead Software Engineer for the Identity and Access Management team. You will lead a team of technologists to deliver next-generation authentication and authorization solutions, guiding strategic direction and solving complex challenges.

You will collaborate with global teams, drive secure production code, and modernize platforms using PingFederate, Transmit Security, and ForgeRock while ensuring robust security and scalable design across services.

Qualifications

• 5+ years of software engineering experience with formal training or certification.
• Hands-on experience with PingFederate, Transmit Security, and ForgeRock for IAM.
• Ability to lead a small team to deliver innovative solutions.
• Experience with OAuth2/OpenID Connect, SAML, and modern authentication.
• Proficiency in Java and Spring Boot; web UI with React.

Responsibilities

• Lead and mentor a team to deliver IAM solutions.
• Modernize authentication platforms across channels using PingFederate, Transmit Security, and ForgeRock.
• Evaluate and prototype authentication solutions from internal and vendor options.
• Integrate anti-fraud and biometric authentication into customer applications.
• Develop secure production code and review peers' code.
• Drive AI-assisted engineering practices for code quality and delivery speed.
• Design data schemas, connections, and failover for authentication storage.

Skills

Java

Spring Boot

React

OAuth2

OpenID Connect

SAML

REST APIs

AWS

Kubernetes

Microservices

PingFederate

Transmit Security

ForgeRock

AI-assisted development

Secure coding

Code review

Tools

PingFederate

Transmit Security

ForgeRock

AWS

Kubernetes

Spring Boot

React

Job description

As a Lead Software Engineer in our Identity and Access Management team, you will drive a team of innovators and technologists to deliver next-generation authentication and authorization solutions. You will set strategic direction, solve complex challenges, and inspire your team to embrace leading-edge technologies and methodologies. Your leadership will help us deliver secure, high-quality outcomes that support our business and clients. You'll collaborate with global teams and harness the talents of technologists from around the world. Your work will have a direct impact on our technology and the clients we serve.

Job Responsibilities

- Lead and mentor a team to deliver high-quality, innovative identity and access management solutions.
- Modernize authentication and authorization platforms across multiple channels and domains, leveraging **PingFederate, Transmit Security, and ForgeRock**.
- Evaluate and prototype internal and vendor solutions for user authentication.
- Integrate anti-fraud and biometric authentication solutions into customer-facing applications.
- Utilize APIs and SDKs for both niche solutions and open standards.
- Execute creative software solutions, design, development, and technical troubleshooting with the ability to think beyond routine or conventional approaches to build solutions or break down technical problems.
- Develop secure and high-quality production code, and review and debug code written by others.
- Drive team adoption of enterprise-authorized AI-assisted engineering practices within the work environment to improve code quality, delivery speed, and operational outcomes (e.g., AI-assisted code review/refactoring, test strategy acceleration, incident/root-cause analysis support), while establishing consistent validation standards (secure coding, peer review, automated testing) and promoting reuse of effective patterns across the team.
- Apply knowledge of tools within the Software Development Life Cycle toolchain, including enterprise-authorized AI-assisted development and automation capabilities, to improve the value realized by automation.
- Identify opportunities to eliminate or automate remediation of recurring issues to improve overall operational stability of software applications and systems.
- Build and maintain IAM web and UI components that invoke platform authentication flows.
- Design supporting data schemas, connection pooling, and failover for authentication and token storage.

## Required Qualifications, Capabilities, and Skills

- Formal training or certification on software engineering concepts and 5+ years applied experience.
- Hands-on experience with **PingFederate, Transmit Security, and ForgeRock** platforms for authentication and authorization.
- Ability to lead and guide a small team to deliver innovative solutions.
- Understanding of application and data architecture disciplines.
- Experience with authentication and modern authentication practices and solutions (such as OAuth2/OpenID Connect, SAML, Facebook Login, Google Sign-In).
- Proficiency in one or more general-purpose programming languages; Java strongly preferred.
- Hands-on practical experience delivering system design, application development, testing, and operational stability.
- Proficiency in Java, Spring Boot, React.
- Knowledge of RESTful API design and development, including secure token-based authentication and authorization.
- Knowledge of AWS, Kubernetes; advanced in one or more programming language(s).
- Hands-on experience developing and supporting Java (Spring Boot) microservices in an enterprise environment.
- Cloud-native experience (AWS, Azure, or GCP).
- Experience designing and developing custom solution adapters and authentication logic on these platforms, including integration with external data sources and endpoints.
- Experience developing against vendor SDKs and Admin APIs to extend authentication platforms where native configuration is insufficient.
- Experience developing and consuming secure REST APIs and backend services supporting IAM platforms, including token validation and service-to-service integration.
- Proficiency in Java, including building applications that integrate with identity providers.
- Demonstrated experience leading effective use of approved AI-assisted software development tools (e.g., for coding, code review, test acceleration, troubleshooting) with the ability to set team expectations for validating AI outputs for correctness, performance, and security.
- Strong understanding of responsible AI use in engineering workflows, including data sensitivity considerations, secure handling of inputs/outputs, and adherence to resiliency and security expectations; experience coaching engineers on safe, compliant adoption within delivery practices.
Preferred Qualifications, Capabilities, and Skills

- Experience integrating anti-fraud and biometric authentication solutions.
- Familiarity with open standards and security protocols.
- Strong analytical and problem-solving skills.
- Excellent communication and interpersonal abilities.
- Experience in the financial services industry is a plus.