Sr. Lead Software Engineer — Trust and Security

Job Description Join a team where your expertise in secure identity design will directly shape how millions of customers authenticate across web and mobile platforms. At JPMorganChase, we invest in our engineers — offering the tools, visibility, and cross-functional scope to grow your career while solving some of the most complex security challenges in financial services. As a Sr. Lead Software Engineer within Trust and Security at JPMorganChase, you will serve as a senior design authority for Customer Identity and Access Management solutions across web and mobile platforms. You will combine deep technical design expertise with hands-on engineering capability to deliver trusted, market-leading authentication products that are secure, stable, and built to scale. Your work will directly influence engineering direction across teams and contribute to the firm's broader technology strategy. Job responsibilities • Lead end-to-end solution design for Customer Authentication and identity and access management initiatives, including identity flows, access management patterns, and security controls across web and mobile platforms • Develop and maintain design blueprints, technical standards, and best practices for Customer Authentication, ensuring alignment with business goals and firmwide technology strategy • Design cloud-native solutions on AWS — including workloads using container orchestration, API Gateway, serverless functions, identity and access policies, and key management — ensuring production-grade reliability, scalability, and security • Evaluate and recommend tools, technologies, and design patterns for identity and access management, with a focus on OAuth 2.0, OpenID Connect, SAML, and related industry standards • Provide technical guidance and design direction to engineering teams, contractors, and vendors across complex, multi-technology authentication initiatives • Develop secure, high-quality production code and conduct rigorous design and code reviews across the team • Conduct security design assessments to identify vulnerabilities and drive corrective measures prior to implementation • Drive adoption and governance of AI-assisted engineering practices to improve design quality, delivery speed, and operational outcomes • Serve as a subject matter expert in Customer Authentication, providing mentorship and technical leadership to engineers across the team • Engage with stakeholders to gather requirements, define scope, and deliver solutions that meet both business and security needs Required qualifications, capabilities, and skills • Formal training or certification on software engineering concepts and 5+ years applied experience • Proven hands-on experience as a design authority on large-scale, distributed systems — including authoring design blueprints, architecture decision records, and design documentation • Practical cloud-native experience delivering production workloads at scale, with strong hands-on AWS design experience using container orchestration, API Gateway, serverless functions, identity and access management, and key management services • Advanced proficiency in one or more programming languages with demonstrable design authority alongside engineering delivery • Strong understanding of security principles, cryptography fundamentals (signing, encryption, key management), data protection regulations, and privacy standards • Experience coaching and mentoring senior engineers on design standards, design patterns, and responsible use of AI within the software development lifecycle • Ability to independently drive design and functionality decisions across complex, multi-team initiatives with minimal oversight • Strong communication skills with the ability to articulate design decisions and trade-offs clearly to both technical and non-technical stakeholders Preferred qualifications, capabilities, and skills • In-depth knowledge of identity and access management protocols and standards — OAuth 2.0, OpenID Connect, SAML, FIDO2/WebAuthn, and session management patterns • Experience with enterprise identity and access management platforms such as ForgeRock, Okta, Auth0, or equivalent • Experience with zero-trust design principles and their application in enterprise authentication environments • Experience contributing to or leading firmwide engineering standards, design communities of practice, or governance forums • Exposure to regulated industry environments with strong controls, audit requirements, and compliance-driven engineering practices • AWS certifications (Solutions Architect Professional, Security Specialty) or identity and security certifications (such as CISSP or CISM)