Director of Software Engineering - Unified Ingress

JPMorganChase • Jersey City, NJ

12d

About The Position

As a Director of Software Engineering at JPMorgan Chase within the Corporate & Investment Bank (CIB) Unified Ingress platform, you will lead delivery of a centralized ingress layer for CIB digital channels. The platform handles authentication, authorization, traffic management, and observability, consolidating external traffic through a standardized seven-layer stack: DNS steering, CDN/WAF, perimeter, gateway, authentication, authorization, and observability. The stack is managed through a single control plane.

You will manage a team of 20+ engineers across gateway, control plane, identity integration, and platform operations. Platform development, the line-of-business migration program, and production hardening are running in parallel. You will own the delivery plan through full production adoption and decommissioning of legacy infrastructure.

Requirements

• 12+ years of industry experience, including 4+ years leading engineering teams.
• Proven experience managing teams of 15+ engineers across multiple concurrent workstreams, including line management, performance management, hiring, and mentoring.
• Hands-on technical grounding in ingress and gateway technology, specifically Envoy Proxy (xDS/ADS, ext_authz, HTTP/2, gRPC) and/or Kong API Gateway, sufficient to lead design reviews and challenge implementation decisions.
• Working depth in OAuth 2.0, OpenID Connect (OIDC), Proof Key for Code Exchange (PKCE), Demonstrating Proof of Possession (DPoP) sender-constrained tokens, mutual TLS (mTLS), and session management patterns.
• Production Kubernetes experience with Amazon EKS and/or on-premises clusters, and GitOps delivery models such as ArgoCD and Helm.
• Go development background sufficient to review control-plane code, set engineering standards, and participate in design discussions.
• Experience partnering with enterprise Architecture functions, representing designs in review forums, aligning with reference architectures, and negotiating exceptions.
• Experience partnering with Infrastructure, Network, and Cybersecurity teams on shared dependencies such as DNS, CDN/WAF, certificate lifecycle, firewall policy, and perimeter change management.

Nice To Haves

• Financial services or other regulated-industry experience, including regulatory and audit engagement.
• Experience running a migration program that decommissions legacy infrastructure while traffic is live.
• Familiarity with Open Policy Agent (OPA) and policy-as-code authorization models.
• Familiarity with OpenTelemetry, Dynatrace, and Splunk SIEM toolchains.
• Background in identity platforms such as ForgeRock, SAML federation, and token exchange patterns.

Responsibilities

• Own the end-to-end platform delivery plan, including milestones, dependencies, critical path, and committed dates across workstreams.
• Set and enforce engineering standards for code review, testing, documentation, observability-first design, and production readiness.
• Chair technical design reviews for gateway, control plane, and session management components, and make architectural decisions when needed.
• Partner with enterprise Architecture groups to align the platform with reference architectures, secure design approvals, and represent the platform in architecture forums.
• Partner with Infrastructure, Network, Cybersecurity, and Identity (AuthE / Sentry) teams to sequence and unblock shared dependencies, including DNS, CDN/WAF, certificates, perimeter policy, and identity provider integration.
• Drive the line-of-business migration program, including onboarding sequencing, cutover planning, rollback readiness, and decommissioning legacy authentication Web Agents and Apache proxies.
• Run delivery processes including sprint planning, backlog grooming, dependency tracking, risk and issue management, and capacity planning against roadmap commitments.

What This Job Offers

• Job Type: Full-time
• Career Level: Director
• Education Level: No Education Listed