This listing doesn't post a salary. Most similar roles pay
$155,000–$214,550.
Based on 240 similar postings.
Employer
About JPMorgan Chase
JPMorgan Chase & Co. is a global financial services firm and one of the largest banks in the world, offering investment banking, commercial banking, asset management, and consumer financial services.
JPMorgan Chase currently has
1117 open roles
on FindRole.
Listed pay typically runs
$186,160–$215,000
across 7 roles with salary data.
As a Cybersecurity Architect/Engineer, you will join the team to design, develop, and troubleshoot creative security solutions while building scalable, reusable cybersecurity frameworks for cloud and on-premises environments. You will be responsible for implementing IAM protocols such as RBAC, OAuth2.0, SCIM, WebAuthN, OPA, and PBAC, while managing encryption, data security, and risk management. The role involves creating AI-enabled cybersecurity solutions, conducting threat modeling using methodologies like STRIDE or MITRE ATT&CK, and performing security assessments for cloud-native applications. You will work with technologies including Java, Python, C/C++, Node, Golang, Kubernetes, Lambda, S3, Aurora, API Gateway, Kafka, RabbitMQ, and Terraform. Your daily work involves translating complex technical issues to leadership, mentoring engineering teams on SDLC best practices, and ensuring infrastructure follows CIS Security baselines and NIST or ISO 27001 standards.
Design, develop, and troubleshoot secure production code and reusable cybersecurity frameworks for cloud and on-premises environments.
Implement and manage identity and access management (IAM) protocols including RBAC, OAuth2.0, SCIM, and WebAuthN.
Develop and lead the strategy for AI-enabled products and emerging technology proof-of-concept initiatives.
Assess current security controls to identify gaps and implement improvements aligned with industry standards and regulations.
Translate complex technical issues into actionable information for leadership to inform strategic architecture decisions.
Integrate AI-assisted security validation tools into SDLC toolchains to improve control testing and remediation quality.
Perform threat modeling and secure design for cloud-native applications, including API security and service mesh architectures.
Provide technical guidance as a subject matter expert to stakeholders, business leaders, and external vendors.
What we're looking for
Formal training or certification in software engineering/architecture with experience in system design and application development.
Advanced proficiency in one or more languages: Java, Python, C/C++, Node, or Golang.
Experience designing enterprise-level security solutions using SDLC and agile methodologies like CI/CD.
Practical cybersecurity experience in areas such as AI/ML, Cloud, Infrastructure, Mobile, Offensive Security, or Vulnerability Management.
Extensive cloud-native experience with AWS, Azure, or GCP including Kubernetes, Lambda, ECS, S3, Aurora, API Gateway, and DevOps practices.
Expertise in IAM principles (RBAC, OAuth2.0, SCIM, WebAuthN, OPA, PBAC) and advanced security principles like encryption and risk management.
Experience building scalable microservices, enterprise-grade APIs, and high-availability database architectures with knowledge of streaming technologies.
Professional certifications such as CISSP, CISM, CCSP, various AWS certifications, or Offensive Security certifications (preferred).