Principal Architect- Identity, Data Modeling & Platform API

Fairygodboss; Jersey City (NJ); On-site; USD 180,000 - 240,000; Full time

Job summary

JPMorganChase is seeking a Principal Architect to lead the design and adoption of cloud-based architectures within the Core Infrastructure Platforms Architecture team. You will drive canonical data models and API contracts that connect identity, authority, ownership, and permissions to workload deployment on IaaS and hypervisors in a large, regulated financial environment.

You will collaborate with platform, engineering, and development teams to define canonical models, service contracts, and

Qualifications

• Formal training or certification on software Infrastructure Architecture concepts and expert applied experience.

Responsibilities

• Defines and owns canonical data models capturing identity, authority, ownership, and permissions across compute, storage, and network resources.
• Designs and evolves APIs and service contracts for entitlements and workload onboarding to IaaS and hypervisor platforms.
• Architects identity-aware provisioning flows and guardrails with RBAC/ABAC and least privilege.
• Maintains data structures for governance with sources of truth, lineage, and stewardship.
• Embeds regulatory and control requirements into architecture with audit-ready evidence and traceability.
• Partners with platform teams to produce reference architectures, patterns, and reusable templates.
• Defines policy-as-code approaches for identity and authorization; integrates controls into CI/CD pipelines.
• Drives data quality and observability for governance datasets and metadata.
• Conducts architecture reviews; documents decisions, risks, and remediation plans; presents in governance forums.
• Promotes effective ways of working with Jira/Kanban hygiene; mentors engineers and architects.

Skills

Identity-centric design

Data modeling

REST API design

RBAC/ABAC

Cloud architectures

Stakeholder management

Mentoring

Tools

Kerberos

Active Directory

Job description

Step into the role of a Principal Architect at JPMorganChase and become a driving force behind the development and adoption of cutting-edge, cloud-based technologies.

As a Principal Architect at JPMorganChase within the Core Infrastructure Platforms Architecture team you provide expertise to enhance and develop architecture platforms based on modern cloud-based technologies, as well as support the adoption of strategic global solutions. Leverage your advanced architecture capabilities and collaborate with colleagues across the organization to drive best-in-class outcomes. You will design the data and API foundations that connect identity, authority, ownership, and permission to workload deployment on IaaS platforms and hypervisors. This is a senior individual contributor role, focused on rigorous data modeling, software and API design, and identity architectures in a large, regulated financial environment. You will define canonical models and service contracts, ensure designs meet regulatory and control requirements, and partner closely with platform, engineering, and development teams.

Job responsibilities

• Defines and owns canonical data models capturing identity, authority, ownership, and permissions across compute, storage, and network resources; model relationships among people, services, applications, and infrastructure assets.
• Designs and evolves APIs and service contracts for entitlements and workload onboarding to IaaS and hypervisor platforms; establish versioning, compatibility, lifecycle, and governance for these interfaces.
• Architects identity-aware provisioning flows and guardrails: integrate with directory and identity systems (e.g., Kerberos, Active Directory), enforce RBAC/ABAC, separation of duties, least privilege, and auditable change.
• Establishes and maintains data structures used for technology governance (e.g., product catalogs, inventories/CMDB, configuration attributes, organizational hierarchies) with clear sources of truth, lineage, and stewardship.
• Embeds compliance and controls into designs: evidence and traceability for regulatory obligations on identity, access management, and operational risk; align with firm policies and applicable regulations.
• Partners with platform teams (hypervisors, IaaS, Kubernetes) and application developers to ensure secure, operable, and scalable workload deployment patterns; produce reference architectures, patterns, and reusable templates.
• Defines policies and policy-as-code approaches for identity, authorization, configuration, and change; integrate controls into CI/CD and provisioning pipelines.
• Drives data quality and observability for governance datasets: schemas, validations, metadata, golden records, reconciliation, and reporting.
• Conducts architecture/design reviews; document decisions, risks, exceptions/waivers, and remediation plans; present in governance forums.
• Promotes effective ways of working: help organize team backlogs and ceremonies, ensure Jira/Kanban hygiene, run stand-ups, and track delivery metrics to keep the team productive.
• Mentors engineers and architects; foster a collaborative, low-ego, outcome-focused culture.

Required qualifications, capabilities, and skills

• Formal training or certification on software Infrastructure Architecture concepts and expert applied experience
• Extensive experience architecting in large, complex, regulated financial services environments, including identity-centric designs and production delivery.
• Deep expertise in enterprise identity management and directory services, including:
• Kerberos and Active Directory (forests/domains, trusts, group nesting, SPNs, constrained delegation, service accounts, PKI).
• Authorization models and controls (RBAC, ABAC, policy evaluation, least privilege, privileged access, break-glass, JIT access).
• Strong data modeling skills (relational, hierarchical, graph) and schema design for governance datasets (product catalogs, CMDB/inventory, configuration attributes, organizational structures).
• Professional software and API design experience: REST/gRPC API design, versioning and compatibility strategies, service contracts, error models, pagination, performance, and security.
• Hands-on understanding of IaaS and hypervisor platforms and how identity/authorization integrates with provisioning, lifecycle, and operations.
• Demonstrated ability to embed regulatory, risk, and control requirements into architecture and provide audit-ready evidence and traceability.
• Excellent communication and stakeholder management; able to collaborate deeply with developers and platform engineers to deliver pragmatic solutions.

Preferred qualifications, capabilities, and skills

• Experience with policy-as-code and controls (e.g., OPA, Conftest, Sentinel) and mapping to control frameworks.
• Familiarity with Kubernetes platform identity (workload identity, service accounts), service meshes, and identity-aware networking.
• Experience with data governance practices: stewardship models, MDM, reference data, lineage, and reconciliation.
• Background in secrets management, mTLS/PKI, and certificate lifecycle for services.
• Track record improving team productivity via agile ways of working, backlog management, and delivery metrics.
• Relevant certifications (e.g., identity/directory, security, architecture).

ABOUT US

JPMorganChase, one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world's most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management.

We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. Additional details about total compensation and benefits will be provided during the hiring process.

These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more.

• comprehensive health care coverage
• on-site health and wellness centers
• a retirement savings plan
• backup childcare
• tuition reimbursement
• mental health support
• financial coaching
• more

We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success.

We are an equal opportunity employer and place a high value on diversity and inclusion at our company.

We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law.

We also make reasonable accommodations for applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs.

Visit our FAQs for more information about requesting an accommodation.

JPMorgan Chase & Co. is an Equal Opportunity Employer, including Disability/Veterans

ABOUT THE TEAM

Our Global Technology Infrastructure group is a team of innovators who love technology as much as you do. Together, you'll use a disciplined, innovative and a business focused approach to develop a wide variety of high-quality products and solutions. You'll work in a stable, resilient and secure operating environment where you and the products you deliver will thrive.

High Risk Roles (HRR) are sensitive roles within the technology organization that require high assurance of the integrity of staff by virtue of 1) sensitive cybersecurity and technology functions they perform within systems or 2) information they receive regarding sensitive cybersecurity or technology matters. Users in these roles are subject to enhanced pre-hire screening which includes both criminal and credit background checks (as allowed by law). The enhanced screening will need to be successfully completed prior to commencing employment or assignment.