Sr. Lead Software Engineer — Trust and Security

Job Description Join a team where your expertise in secure identity design will directly shape how millions of customers authenticate across web and mobile platforms. At JPMorganChase, we invest in our engineers — offering the tools, visibility, and cross-functional scope to grow your career while solving some of the most complex security challenges in financial services. As a Sr. Lead Software Engineer within Trust and Security at JPMorganChase, you will serve as a senior design authority for Customer Identity and Access Management solutions across web and mobile platforms. You will combine deep technical design expertise with hands-on engineering capability to deliver trusted, market-leading authentication products that are secure, stable, and built to scale. Your work will directly influence engineering direction across teams and contribute to the firm's broader technology strategy. Job responsibilities Lead end-to-end solution design for Customer Authentication and identity and access management initiatives, including identity flows, access management patterns, and security controls across web and mobile platforms Develop and maintain design blueprints, technical standards, and best practices for Customer Authentication, ensuring alignment with business goals and firmwide technology strategy Design cloud-native solutions on AWS — including workloads using container orchestration, API Gateway, serverless functions, identity and access policies, and key management — ensuring production-grade reliability, scalability, and security Evaluate and recommend tools, technologies, and design patterns for identity and access management, with a focus on OAuth 2.0, OpenID Connect, SAML, and related industry standards Provide technical guidance and design direction to engineering teams, contractors, and vendors across complex, multi-technology authentication initiatives Develop secure, high-quality production code and conduct rigorous design and code reviews across the team Conduct security design assessments to identify vulnerabilities and drive corrective measures prior to implementation Drive adoption and governance of AI-assisted engineering practices to improve design quality, delivery speed, and operational outcomes Serve as a subject matter expert in Customer Authentication, providing mentorship and technical leadership to engineers across the team Engage with stakeholders to gather requirements, define scope, and deliver solutions that meet both business and security needs Required qualifications, capabilities, and skills Formal training or certification on software engineering concepts and 5+ years applied experience Proven hands-on experience as a design authority on large-scale, distributed systems — including authoring design blueprints, architecture decision records, and design documentation Practical cloud-native experience delivering production workloads at scale, with strong hands-on AWS design experience using container orchestration, API Gateway, serverless functions, identity and access management, and key management services Advanced proficiency in one or more programming languages with demonstrable design authority alongside engineering delivery Strong understanding of security principles, cryptography fundamentals (signing, encryption, key management), data protection regulations, and privacy standards Experience coaching and mentoring senior engineers on design standards, design patterns, and responsible use of AI within the software development lifecycle Ability to independently drive design and functionality decisions across complex, multi-team initiatives with minimal oversight Strong communication skills with the ability to articulate design decisions and trade-offs clearly to both technical and non-technical stakeholders Preferred qualifications, capabilities, and skills In-depth knowledge of identity and access management protocols and standards — OAuth 2.0, OpenID Connect, SAML, FIDO2/WebAuthn, and session management patterns Experience with enterprise identity and access management platforms such as ForgeRock, Okta, Auth0, or equivalent Experience with zero-trust design principles and their application in enterprise authentication environments Experience contributing to or leading firmwide engineering standards, design communities of practice, or governance forums Exposure to regulated industry environments with strong controls, audit requirements, and compliance-driven engineering practices AWS certifications (Solutions Architect Professional, Security Specialty) or identity and security certifications (such as CISSP or CISM)