Senior Endpoint Security & Platform Engineer

JPMorgan Chase & Co.; Columbus (OH); On-site; USD 130,000 - 180,000; Full time

Job summary

JPMorgan Chase & Co. seeks an experienced security-focused software engineer to design, build, and ship production-quality software across Mac, Windows, Linux, and virtual desktop environments.

The role leads a portfolio of endpoint security platforms, architects a managed binary allowlisting platform via infrastructure-as-code, and advances cross‑platform authentication tooling with containerized deployment in mind.

Qualifications

• Formal training or certification on security engineering concepts and 5+ years applied experience
• Advanced proficiency in one or more major programming languages such as Python, Java, JavaScript/TypeScript, Go, Rust, or C++, with a demonstrated ability to build and ship production software
• Hands-on enterprise experience managing at least two of the following endpoint platforms: Mac, Windows, virtual desktop infrastructure, or Linux
• Proven experience with containers (Docker, Kubernetes), public cloud platforms, and infrastructure-as-code tooling
• Proficiency across the full software development lifecycle, including CI/CD pipelines, GitOps workflows, and automated testing practices
• Working knowledge of secure development practices with the ability to design, build, and operate controls that are audit-defensible and tamper-resistant
• Demonstrated ability to decompose complex, ambiguous technical problems into clearly scoped, deliverable engineering work
• Experience serving as a technical lead — driving execution, setting technical direction, and mentoring engineers through code reviews — while remaining hands-on in the codebase

Responsibilities

• Design, build, and ship production-quality software across Mac, Windows, Linux, and virtual desktop environments, serving as the primary technical contributor for a portfolio of endpoint security platforms
• Architect and operate a managed binary allowlisting platform deployed via infrastructure-as-code in a private cloud environment, including automation that generates per-binary rules at application-packaging time
• Develop and maintain cross-platform endpoint authentication tooling — written in a compiled language — that enables applications to authenticate through enterprise proxy infrastructure, including upcoming support for containerized deployment
• Modernize system policy deployment across Windows and virtual desktop environments using GitOps principles, building automated pipelines that scan, grade, and deploy changes in a controlled, auditable manner
• Drive technical direction and day-to-day execution across the team's engineering portfolio, ensuring delivery against milestones while maintaining high standards for code quality, security, and resilience
• Conduct rigorous design and code reviews, mentoring associate engineers and elevating the technical capabilities of the team through hands-on guidance
• Identify manual, high-overhead processes and architect automation solutions that eliminate operational toil and scale across the firm's endpoint estate
• Collaborate cross-functionally with application teams, infrastructure, and security stakeholders to ensure platforms are consumable, audit-defensible, and aligned to enterprise standards
• Apply secure development practices throughout the full software development lifecycle, designing controls that are tamper-resistant and hold up to regulatory scrutiny

Skills

Python

Java

JavaScript/TypeScript

Go

Rust

C++

Security engineering

CI/CD

GitOps workflows

Docker

Kubernetes

Terraform

Tools

Docker

Kubernetes

Terraform

Job description

JPMorgan Chase & Co. seeks an experienced security-focused software engineer to design, build, and ship production-quality software across Mac, Windows, Linux, and virtual desktop environments.

The role leads a portfolio of endpoint security platforms, architects a managed binary allowlisting platform via infrastructure-as-code, and advances cross‑platform authentication tooling with containerized deployment in mind.