Senior Lead Security Engineer, Cryptography & PKI Architect

JPMorgan Chase; Plano (TX); On-site; USD 150,000 - 190,000; Full time

Job summary

JPMorgan Chase is seeking a Senior Lead Security Engineer to shape cryptography strategy and manage key lifecycles across platforms, driving secure-by-default patterns. You will partner with engineering to embed cryptography safely, lead post-quantum readiness, and guide risk-informed decisions during vulnerability periods.

The role requires deep cryptography expertise, Java proficiency, and a track record of building secure enterprise services with strong monitoring, audits, and disaster

Qualifications

• Formal training or certification in security engineering with 5+ years applied experience.
• Hands-on cryptography and key management experience.
• Proven ability to translate security requirements into engineering deliverables.

Responsibilities

• Own cryptography and key management strategy across platforms and apps.
• Lead design of key management, HSM integrations, envelope encryption, and rotation.
• Design and deliver cryptography for data-at-rest, in-transit, and in-use use cases.
• Operate cryptographic lifecycle controls including generation, storage, rotation, and audit logging.
• Embed cryptography safely via libraries, SDKs, and migration plans from legacy algorithms.
• Oversee certificate and identity cryptography, PKI, and TLS guidance.
• Drive post-quantum readiness and staged migrations.
• Advise stakeholders during vulnerability periods with risk-based tradeoffs.
• Integrate shift-left security in SDLC with threat modeling and security reviews.
• Lead security testing and assurance for cryptographic systems and remediation ownership.
• Mentor team on secure coding, reviews, and runbooks.

Skills

Security engineering

Cryptography

Java

Threat modeling

Vulnerability assessments

Cross-functional leadership

Education

Security engineering certification or degree

Tools

HSM platforms

PKI

Job description

JPMorgan Chase is seeking a Senior Lead Security Engineer to shape cryptography strategy and manage key lifecycles across platforms, driving secure-by-default patterns. You will partner with engineering to embed cryptography safely, lead post-quantum readiness, and guide risk-informed decisions during vulnerability periods.

The role requires deep cryptography expertise, Java proficiency, and a track record of building secure enterprise services with strong monitoring, audits, and disaster