Security Infrastructure Architect - HSM & Crypto

JPMorgan Chase & Co.; Plano (TX); On-site; USD 120,000 - 160,000; Full time

Job summary

JPMorgan Chase & Co. is seeking a Security Engineer to design, implement, and maintain secure, scalable infrastructure for critical payment and cryptographic operations.

You will lead HSM design and lifecycle management, work with Thales and FutureX platforms, and drive secure, resilient systems across the organization. Role emphasizes strong Linux/Unix administration, OpenSSL/cert-based auth, and AI-assisted security workflows, with a focus on risk, audits, and compliance.

Qualifications

• Formal training or certification on security engineering concepts.
• Hands-on engineering experience with Hardware Security Modules, including architecture/design of highly available infra.
• Experience with network security, firewalls, and secure room operations and key ceremonies.
• Proficient Linux/Unix admin in enterprise environments.
• Proficiency in designing and documenting infrastructure architectures using industry-standard tools.
• Experience with Terraform for managing and scaling secure environments.
• Hands-on experience with OpenSSL and certificate-based authentication mechanisms.
• Demonstrated experience using enterprise-authored AI capabilities to support security workflows with validation habits.
• Ability to review and validate AI-assisted code/security recommendations before adoption, ensuring alignment with security and auditability.

Responsibilities

• Engage in architecture design and documentation of HSM and cryptographic infrastructure, aligning with resiliency and security requirements.
• Design and implement HSM solutions, including deployment, configuration, integration, and lifecycle management across Thales and FutureX platforms.
• Develop and maintain architectural diagrams, system documentation, and runbooks for operational excellence and knowledge continuity.
• Collaborate with cross-functional teams to define infrastructure standards, best practices, and security controls per firm policies and regulations.
• Oversee migration, upgrade, and consolidation of HSM infrastructure with minimal disruption and max security.
• Provide guidance on cryptographic key management, secure storage, confidential computing, and compliance with PCI DSS and FIS.
• Troubleshoot infrastructure and HSM issues, perform root cause analysis and implement corrective actions using monitoring tools.
• Participate in risk assessments, audits, and incident response activities related to infrastructure and HSM environments.
• Apply domain knowledge of payment processes and resiliency to infrastructure design and decision-making.
• Utilize enterprise-authorized AI capabilities to accelerate threat modeling and security documentation with data sensitivity awareness.
• Apply reuse-first, AI-assisted practices to strengthen security testing and control validation with traceability.

Skills

Security concepts

Threat modeling

Vulnerability analysis

Education

Security engineering certification

Tools

Hardware Security Modules

Terraform

OpenSSL

Splunk

AI tooling for security

Job description

JPMorgan Chase & Co. is seeking a Security Engineer to design, implement, and maintain secure, scalable infrastructure for critical payment and cryptographic operations.

You will lead HSM design and lifecycle management, work with Thales and FutureX platforms, and drive secure, resilient systems across the organization. Role emphasizes strong Linux/Unix administration, OpenSSL/cert-based auth, and AI-assisted security workflows, with a focus on risk, audits, and compliance.