Security Engineer III - HSM Management

JPMorganChase; Plano (TX); Presencial; USD 140.000 - 190.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Comprehensive health care coverage

On-site health and wellness centers

Retirement savings plan

Backup childcare

Tuition reimbursement

Mental health support

Financial coaching

And more

Descripción de la vacante

JPMorganChase is seeking a cybersecurity architect to lead architecture, design, and documentation of Hardware Security Module and cryptographic infrastructure. You will drive secure deployments across Thales and FutureX platforms, develop runbooks, and collaborate to enforce security controls aligned with firm policies.

You will guide cryptographic key management, perform root-cause analysis, and participate in audits and risk assessments while applying AI-assisted methods to threat modeling

Formación

• Formal training or certification on security engineering concepts and years applied experience.
• Hands-on engineering experience with Hardware Security Modules, including architecture and system design of highly available infrastructure, disaster recovery, and business continuity strategies.
• Experience with network security, firewalls, and secure room operations and key ceremonies.
• Proficient technical troubleshooting skills with strong Linux and Unix administration experience in enterprise environments.
• Proficiency in designing and documenting infrastructure architectures using industry-standard tools and methodologies.
• Experience with infrastructure automation tools such as Terraform for managing and scaling secure environments.
• Hands-on experience with OpenSSL and certificate-based authentication mechanisms.
• Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support security engineering workflows with strong validation habits and awareness of data sensitivity.
• Ability to review and validate AI-assisted code/security recommendations before adoption, escalating uncertainty and ensuring outcomes align to security, resiliency, and auditability expectations.

Responsabilidades

• Lead the architecture, design, and documentation of complex Hardware Security Module and cryptographic infrastructure.
• Design and implement Hardware Security Module solutions across Thales and FutureX platforms.
• Develop and maintain architectural diagrams, system documentation, and runbooks.
• Collaborate with cross-functional teams to define infrastructure standards and security controls.
• Oversee migration, upgrade, and consolidation of HSM infrastructure with minimal disruption.
• Provide guidance on cryptographic key management, secure storage, and confidential computing.
• Troubleshoot infrastructure and HSM issues, performing root cause analysis and corrective actions.
• Participate in risk assessments, audits, and incident response activities.
• Apply domain knowledge of payment processes and business resiliency to design decisions.
• Utilize AI capabilities to accelerate threat modeling, vulnerability analysis, and security documentation; ensure data handling is appropriate.

Conocimientos

Security engineering concepts

Hardware Security Modules

Linux/Unix administration

Terraform / infrastructure automation

OpenSSL / certificate-based auth

AI in security workflows

Herramientas

Terraform

OpenSSL

Splunk

Descripción del empleo

Job Description

Join a world-class cybersecurity team and make a lasting impact by safeguarding critical payment and cryptographic operations. Advance your career by collaborating with experts and driving innovation in secure infrastructure.

Job Responsibilities

• Lead the architecture, design, and documentation of complex Hardware Security Module and cryptographic infrastructure, ensuring alignment with business, resiliency, and security requirements
• Design and implement Hardware Security Module solutions, including deployment, configuration, integration, and full lifecycle management across Thales and FutureX platforms
• Develop and maintain architectural diagrams, system documentation, and operational runbooks to support operational excellence and knowledge continuity
• Collaborate with cross-functional teams to define infrastructure standards, best practices, and security controls that align with firm-wide policies and industry regulations
• Oversee migration, upgrade, and consolidation of Hardware Security Module infrastructure, ensuring minimal disruption and maximum security throughout transitions
• Provide guidance on cryptographic key management, secure storage, confidential computing, and compliance with industry standards including Payment Card Industry Data Security Standard and Federal Information Processing Standards
• Troubleshoot and resolve infrastructure and Hardware Security Module-related issues, performing root cause analysis and implementing corrective actions using monitoring tools
• Participate in risk assessments, audits, and incident response activities related to infrastructure and Hardware Security Module environments
• Apply domain knowledge of payment processes and business resiliency to infrastructure design and operational decision-making
• Uses enterprise-authorized AI capabilities within the work environment to accelerate threat modeling, vulnerability analysis synthesis, and security documentation, validating outputs and ensuring sensitive data is handled appropriately.
• Applies reuse-first, AI-assisted practices within SDLC/toolchain routines to strengthen security testing and control validation, ensuring traceability/auditability and alignment to resiliency and security expectations.

Required Qualifications, Capabilities And Skills

• Formal training or certification on security engineering concepts and years applied experience
• Hands-on engineering experience with Hardware Security Modules, including expertise in architecture and system design of highly available infrastructure, disaster recovery, and business continuity strategies
• Experience with network security, firewalls, and secure room operations and key ceremonies
• Proficient technical troubleshooting skills with strong Linux and Unix administration experience in enterprise environments
• Proficiency in designing and documenting infrastructure architectures using industry-standard tools and methodologies
• Experience with infrastructure automation tools such as Terraform for managing and scaling secure environments
• Hands-on experience with OpenSSL and certificate-based authentication mechanisms
• Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support security engineering workflows with strong validation habits and awareness of data sensitivity.
• Ability to review and validate AI-assisted code/security recommendations before adoption, escalating uncertainty and ensuring outcomes align to security, resiliency, and auditability expectations.

Preferred Qualifications, Capabilities And Skills

• Hands-on experience with Splunk or equivalent platforms for infrastructure monitoring and troubleshooting
• Strong domain knowledge of payment processes and business resiliency applied to infrastructure design
• Relevant Hardware Security Module platform certifications such as Thales or FutureX credentials
• Strong understanding of cryptographic principles, key management, confidential computing, and secure hardware operations

About Us

JPMorganChase, one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world's most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management.

We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility.

• comprehensive health care coverage
• on-site health and wellness centers
• a retirement savings plan
• backup childcare
• tuition reimbursement
• mental health support
• financial coaching
• and more

We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success.

We are an equal opportunity employer and place a high value on diversity and inclusion at our company.

We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law.

We also make reasonable accommodations for applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.

JPMorgan Chase & Co. is an Equal Opportunity Employer, including Disability/Veterans

About The Team

Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we're setting our businesses, clients, customers and employees up for success.