This listing doesn't post a salary. Most similar roles pay
$155,000–$214,550.
Based on 240 similar postings.
Employer
About JPMorgan Chase
JPMorgan Chase & Co. is a global financial services firm and one of the largest banks in the world, offering investment banking, commercial banking, asset management, and consumer financial services.
JPMorgan Chase currently has
1117 open roles
on FindRole.
Listed pay typically runs
$186,160–$215,000
across 7 roles with salary data.
As a Cybersecurity Architect/Engineer, you will join the team to design, develop, and troubleshoot creative security solutions while building scalable, reusable cybersecurity frameworks for cloud and on-premises environments. You will be responsible for managing IAM protocols like RBAC, OAuth2.0, SCIM, WebAuthN, OPA, and PBAC, while implementing encryption and data security measures. The role involves creating AI-enabled cybersecurity solutions, conducting threat modeling using methodologies like STRIDE or MITRE ATT&CK, and performing security assessments for cloud-native applications. You will work with technologies including Java, Python, C/C++, Node, Golang, Kubernetes, Lambda, S3, Aurora, API Gateway, Kafka, RabbitMQ, and Terraform. Your daily work involves translating complex technical issues to leadership, mentoring engineering teams on SDLC best practices, and ensuring infrastructure aligns with CIS baselines and various security frameworks like NIST or ISO 27001.
Design, develop, and troubleshoot high-quality production code for scalable cybersecurity frameworks in cloud and on-premises environments.
Implement and manage identity and access management (IAM) protocols including RBAC, OAuth2.0, SCIM, WebAuthN, OPA, and PBAC.
Develop and lead the integration of AI-enabled cybersecurity solutions and reusable security frameworks.
Assess current security controls to identify gaps and implement improvements aligned with industry standards and regulations.
Conduct threat modeling and security assessments for cloud-native applications, including API security and service mesh architectures.
Translate complex technical risks into actionable insights for leadership to inform strategic architectural decisions.
Integrate AI-assisted security validation tools into the SDLC to improve control testing and remediation quality.
Provide technical guidance as a subject matter expert to stakeholders, business leaders, and engineering teams.
What we're looking for
Formal training or certification in software engineering/architecture with experience in system design, application development, and operational stability.
Advanced proficiency in one or more languages including Java, Python, C/C++, Node, or Golang.
Experience designing enterprise-level security solutions using SDLC and agile methodologies like CI/CD and Application Resiliency.
Practical cybersecurity experience in areas such as AI/ML, Cloud, Infrastructure, Mobile, Offensive Security, or Vulnerability Management.
Extensive cloud-native experience with AWS, Azure, or GCP including Kubernetes, Lambda, ECS, S3, Aurora, API Gateway, and DevOps practices.
Expertise in IAM principles (RBAC, OAuth2.0, SCIM, WebAuthn, OPA, PBAC) and advanced security concepts like encryption and risk management.
Experience building scalable microservices, enterprise-grade APIs, high-availability database architectures, and knowledge of streaming technologies like Kafka or RabbitMQ.
Experience with threat modeling (STRIDE, MITRE ATT&CK), Infrastructure as Code (Terraform), and professional certifications such as CISSP, CISM, CCSP, or various AWS/Offensive Security certs (preferred).