Senior Lead Cryptography & PKI Security Engineer

JP Morgan Chase; Plano (TX); Presencial; USD 180.000 - 280.000; Jornada completa

Descripción de la vacante

JPMorgan Chase is seeking a Senior Lead Security Engineer to drive cryptography strategy and key management across platforms. You will lead design and integration of HSMs, envelope encryption, PKI, and TLS, while advancing post-quantum readiness and secure-by-default practices.

You will mentor teams, shape threat modeling, and coordinate remediation across cross-functional groups to reduce risk and improve resilience in a fast-paced, high-stakes environment.

Formación

• Formal training or certification on security engineering concepts and 5+ years applied experience.
• Strong foundation in system design and applied cryptography, with demonstrated experience building secure systems.
• Hands‑on experience with key management concepts and implementations, including envelope encryption, key hierarchies, rotation, least‑privilege access, segregation of duties, audit logging, and break‑glass controls.
• Proven ability to translate security and control requirements into engineering deliverables that are testable, observable, and auditable.
• Advanced, hands‑on Java experience with strong testing discipline and secure coding practices.
• Experience designing and operating enterprise‑grade services with reliability practices including service‑level objectives, monitoring and alerting, capacity planning, and disaster recovery considerations.
• Extensive experience with threat modeling, vulnerability discovery, and coordinating results from penetration testing and security assessments, with the ability to drive remediations to closure.
• Demonstrated ability to lead cross‑functional initiatives, drive adoption across multiple teams, and communicate risk‑and‑tradeoffs clearly to senior stakeholders.
• Ability to review and validate AI‑assisted security recommendations before adoption, escalation, and ensure outcomes align with security, resiliency, and auditability expectations

Responsabilidades

• Own the cryptography and key management strategy and roadmap across platforms and applications, including standards, reference architectures, and secure-by-default patterns covering encryption, signing, and key lifecycle
• Lead the design and development of key management and data protection capabilities, including hardware security module and key management service integrations, envelope encryption patterns, key hierarchies, rotation, revocation, backup/restore, and access controls
• Design and deliver applied cryptography solutions for data-at-rest, in-transit, and in-use use cases, balancing security, reliability, latency, and cost
• Establish and operate cryptographic key lifecycle controls encompassing key generation, storage, distribution, usage restrictions, rotation schedules, decommissioning/destruction, and audit logging/monitoring
• Partner with engineering teams to embed cryptography safely via reusable libraries and software development kits, secure configuration baselines, and migration plans away from legacy algorithms or unsafe implementations
• Own certificate and identity-related cryptography, including public key infrastructure and transport layer security guidance, certificate issuance/rotation automation, and mutual transport layer security patterns, while driving reductions in certificate and key operational risk
• Drive algorithm agility and post-quantum readiness by maintaining an inventory of cryptographic usage, defining upgrade paths, running proof-of-concepts, and planning staged migrations
• Advise stakeholders and senior business leaders during vulnerability periods, including risk assessment, compensating controls, prioritization, and clear decision options and tradeoffs
• Build shift-left security into the software development lifecycle and toolchain through threat modeling, secure design reviews, static and dynamic analysis, secret scanning, cryptographic misuse checks, and policy-as-code where applicable
• Lead security testing and assurance for cryptographic and key systems, including design reviews, attack simulations, penetration test coordination, validation of controls, and remediation ownership
• Improve engineering practices across the team through mentoring, code review standards, documentation and runbooks, operational readiness reviews, and incident learning

Conocimientos

Security engineering

Cryptography

Key management

Java

Threat modeling

Cross-functional leadership

Security testing

Descripción del empleo

JPMorgan Chase is seeking a Senior Lead Security Engineer to drive cryptography strategy and key management across platforms. You will lead design and integration of HSMs, envelope encryption, PKI, and TLS, while advancing post-quantum readiness and secure-by-default practices.

You will mentor teams, shape threat modeling, and coordinate remediation across cross-functional groups to reduce risk and improve resilience in a fast-paced, high-stakes environment.