Senior Lead Security Engineer - PKI, Cryptography
JPMorgan Chase9 hours ago
Responsibilities
- Own the enterprise cryptography and key management strategy, roadmap, standards, reference architectures, and secure-by-default patterns.
- Design and develop key management and data protection capabilities covering hardware security modules, key management services, encryption, key hierarchies, rotation, revocation, backup and restore, and access controls.
- Deliver applied cryptography solutions for data-at-rest, data-in-transit, and data-in-use use cases while balancing security, reliability, latency, and cost.
- Establish and operate controls for cryptographic key generation, storage, distribution, usage restrictions, rotation, decommissioning, destruction, audit logging, and monitoring.
- Partner with engineering teams to embed cryptography through reusable libraries, software development kits, secure configuration baselines, and migration plans.
- Own certificate and identity-related cryptography, including PKI, TLS, certificate issuance and rotation automation, and mutual TLS patterns.
- Drive algorithm agility and post-quantum readiness through cryptographic inventories, proof-of-concepts, upgrade paths, and staged migrations.
- Advise stakeholders and senior business leaders on vulnerability-period risk assessments, compensating controls, priorities, and tradeoffs.
- Build shift-left security into the software development lifecycle through threat modeling, secure design reviews, static and dynamic analysis, secret scanning, cryptographic misuse checks, and policy-as-code.
- Lead cryptographic and key-system security testing and assurance, including design reviews, attack simulations, penetration-test coordination, control validation, and remediation ownership.
- Improve engineering practices through mentoring, code review standards, documentation, runbooks, operational readiness reviews, and incident learning.
Requirements
- Formal training or certification in security engineering concepts and 5+ years of applied experience.
- Strong system design and applied cryptography foundation with demonstrated experience building secure systems.
- Hands-on experience with key management, envelope encryption, key hierarchies, rotation, least-privilege access, segregation of duties, audit logging, and break-glass controls.
- Ability to translate security and control requirements into testable, observable, and auditable engineering deliverables.
- Advanced hands-on Java experience with strong testing discipline and secure coding practices.
- Experience designing and operating enterprise-grade services with service-level objectives, monitoring and alerting, capacity planning, and disaster recovery considerations.
- Extensive experience with threat modeling, vulnerability discovery, penetration-testing and security-assessment results, and remediation management.
- Ability to lead cross-functional initiatives, drive adoption across teams, and communicate risks and tradeoffs to senior stakeholders.
- Ability to review and validate AI-assisted security recommendations against security, resiliency, and auditability expectations.
- Preferred experience with hardware security modules and key management service platforms, including quorum or M-of-N controls, partitioning, backup and restore, upgrades, and incident response.
- Preferred experience with PKI and TLS at scale, certificate automation, mutual TLS, cipher policy, rotation, and certificate revocation.
- Familiarity with secrets management, service-to-service authentication, post-quantum cryptography, algorithm agility, inventory management, and staged rollout planning.
- Demonstrated security-first and shift-left experience building guardrails and paved roads.
Benefits
- Competitive total rewards package with base salary determined by role, experience, skill set, and location, plus eligible incentive compensation.
- Comprehensive health care coverage and on-site health and wellness centers.
- Retirement savings plan and backup childcare.
- Tuition reimbursement, mental health support, and financial coaching.
- Equal opportunity employment, diversity and inclusion programs, and reasonable accommodation support.
About JPMorgan Chase
JPMorgan Chase provides consumer and commercial banking, payments, credit card, wealth management, and corporate and investment banking services to individuals, businesses, institutions, and governments. The public company (NYSE: JPM) earns revenue from interest, fees, trading, and asset management across operations in more than 100 markets. Headquartered in New York City with roots dating to 1799, it serves retail customers and prominent corporate and government clients through brands including Chase and J.P. Morgan.