Security Engineer III: HSM & Crypto Infrastructure Lead

JPMorgan Chase & Co.; Plano (TX); On-site; USD 140,000 - 200,000; Full time

Job summary

JPMorgan Chase & Co. is seeking a Security Engineer to design, implement, and maintain secure, scalable infrastructure for critical payment and cryptographic operations in in-house environments.

You will lead HSM architectures, ensure resilience, and drive standards across teams. Responsibilities include architecting and deploying HSM solutions across Thales and FutureX platforms, creating runbooks and diagrams, and collaborating with cross-functional teams to align with firm policies and

Qualifications

• Formal training or certification on security engineering concepts
• Hands-on experience with Hardware Security Modules, including architecture and design of highly available infrastructure
• Experience with network security, firewalls, and secure room operations and key ceremonies
• Proficient Linux/Unix administration experience in enterprise environments
• Proficiency in documenting infrastructure architectures using industry-standard tools
• Experience with infrastructure automation tools such as Terraform
• Hands-on experience with OpenSSL and certificate-based authentication mechanisms
• Demonstrated experience using AI capabilities within security workflows with validation and data sensitivity awareness
• Ability to review and validate AI-assisted code/security recommendations before adoption

Responsibilities

• Lead the architecture, design, and documentation of complex Hardware Security Module and cryptographic infrastructure, ensuring alignment with business, resiliency, and security requirements
• Design and implement Hardware Security Module solutions, including deployment, configuration, integration, and full lifecycle management across Thales and FutureX platforms
• Develop and maintain architectural diagrams, system documentation, and operational runbooks to support operational excellence and knowledge continuity
• Collaborate with cross-functional teams to define infrastructure standards, best practices, and security controls that align with firm-wide policies and industry regulations
• Oversee migration, upgrade, and consolidation of Hardware Security Module infrastructure, ensuring minimal disruption and maximum security throughout transitions
• Provide guidance on cryptographic key management, secure storage, confidential computing, and compliance with industry standards including PCI DSS and FIS
• Troubleshoot and resolve infrastructure and Hardware Security Module-related issues, performing root cause analysis and implementing corrective actions using monitoring tools
• Participate in risk assessments, audits, and incident response activities related to infrastructure and Hardware Security Module environments
• Apply domain knowledge of payment processes and business resiliency to infrastructure design and operational decision-making
• Uses enterprise-authorized AI capabilities within the work environment to accelerate threat modeling, vulnerability analysis synthesis, and security documentation, validating outputs and ensuring sensitive data is handled appropriately.
• Applies reuse-first, AI-assisted practices within SDLC/toolchain routines to strengthen security testing and control validation, ensuring traceability/auditability and alignment to resiliency and security expectations

Skills

HSM expertise

Security architecture

Linux administration

Network security

Terraform automation

OpenSSL & certs

AI-assisted security

Code review & validation

Education

Security engineering certification

Tools

Thales HSM

FutureX HSM

OpenSSL

Terraform

Job description

JPMorgan Chase & Co. is seeking a Security Engineer to design, implement, and maintain secure, scalable infrastructure for critical payment and cryptographic operations in in-house environments.

You will lead HSM architectures, ensure resilience, and drive standards across teams. Responsibilities include architecting and deploying HSM solutions across Thales and FutureX platforms, creating runbooks and diagrams, and collaborating with cross-functional teams to align with firm policies and