Principal Architect: Identity, Data & Platform APIs

JPMorgan Chase & Co.; Jersey City (NJ); On-site; USD 180,000 - 240,000; Full time

Job summary

JPMorganChase seeks a Principal Architect to define canonical data models and service contracts for identity, authorization, and workload onboarding on IaaS and hypervisor platforms. You will design data and API foundations, enforce governance, and collaborate with platform and development teams to deliver secure, scalable architectures in a regulated financial environment.

The role requires advanced data modeling, REST/gRPC API design, and experience embedding regulatory controls into

Qualifications

• Formal training or certification on software Infrastructure Architecture concepts and expert applied experience.
• Extensive experience architecting in large, complex, regulated financial services environments, including identity-centric designs and production delivery.
• Deep expertise in enterprise identity management and directory services, including Kerberos and Active Directory.
• Authorization models and controls (RBAC, ABAC, policy evaluation, least privilege, privileged access).
• Strong data modeling skills and schema design for governance datasets.
• Professional software and API design experience: REST/gRPC API design, versioning and compatibility strategies.
• Hands-on understanding of IaaS and hypervisor platforms and how identity/authorization integrates with provisioning, lifecycle, and operations.
• Demonstrated ability to embed regulatory, risk, and control requirements into architecture and provide audit-ready evidence and traceability.
• Excellent communication and stakeholder management; able to collaborate deeply with developers and platform engineers to deliver pragmatic solutions.

Responsibilities

• Defines and owns canonical data models capturing identity, authority, ownership, and permissions across compute, storage, and network resources; model relationships among people, services, applications, and infrastructure assets.
• Designs and evolves APIs and service contracts for entitlements and workload onboarding to IaaS and hypervisor platforms; establish versioning, compatibility, lifecycle, and governance for these interfaces.
• Architects identity‑aware provisioning flows and guardrails: integrate with directory and identity systems (e.g., Kerberos, Active Directory), enforce RBAC/ABAC, separation of duties, least privilege, and auditable change.
• Establishes and maintains data structures used for technology governance (e.g., product catalogs, inventories/CMDB, configuration attributes, organizational hierarchies) with clear sources of truth, lineage, and stewardship.
• Embeds compliance and controls into designs: evidence and traceability for regulatory obligations on identity, access management, and operational risk; align with firm policies and applicable regulations.
• Partners with platform teams (hypervisors, IaaS, Kubernetes) and application developers to ensure secure, operable, and scalable workload deployment patterns; produce reference architectures, patterns, and reusable templates.
• Defines policies and policy‑as‑code approaches for identity, authorization, configuration, and change; integrate controls into CI/CD and provisioning pipelines.
• Drives data quality and observability for governance datasets: schemas, validations, metadata, golden records, reconciliation, and reporting.
• Conducts architecture/design reviews; document decisions, risks, exceptions/waivers, and remediation plans; present in governance forums.
• Promotes effective ways of working: help organize team backlogs and ceremonies, ensure Jira/Kanban hygiene, run stand‑ups, and track delivery metrics to keep the team productive.
• Mentors engineers and architects; foster a collaborative, low‑ego, outcome‑focused culture.

Skills

Identity management

Data modeling

API design

Regulatory compliance

Stakeholder management

Cloud/IaaS

Education

Architecture certification

Tools

REST/gRPC

Kubernetes identity

Job description

JPMorganChase seeks a Principal Architect to define canonical data models and service contracts for identity, authorization, and workload onboarding on IaaS and hypervisor platforms. You will design data and API foundations, enforce governance, and collaborate with platform and development teams to deliver secure, scalable architectures in a regulated financial environment.

The role requires advanced data modeling, REST/gRPC API design, and experience embedding regulatory controls into