Director of Software Engineering - Unified Ingress
About The Position
As a Director of Software Engineering at JPMorgan Chase within the Corporate & Investment Bank (CIB) Unified Ingress platform, you will lead delivery of a centralized ingress layer for authentication, authorization, traffic management, and observability across CIB digital channels. You will manage a team of 20+ engineers across gateway, control plane, identity integration, and platform operations, and own delivery through production adoption and legacy decommissioning. The platform consolidates external traffic through a standardized seven-layer stack—DNS steering, CDN/WAF, perimeter, gateway, authentication, authorization, and observability—managed through a single control plane. Platform development, the line-of-business migration program, and production hardening are running in parallel. JPMorgan Chase offers a competitive total rewards package, with base salary determined by role, experience, skill set, and location. Eligible roles may receive commission-based pay and/or discretionary incentive compensation in cash and/or forfeitable equity. Benefits and programs are based on eligibility and include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, and financial coaching. Further compensation and benefit details are provided during the hiring process.
Requirements
- 12+ years of industry experience, including 4+ years leading engineering teams.
- Track record managing teams of 15+ engineers across concurrent workstreams, including line management, performance management, hiring, and mentoring.
- Strong hands-on technical grounding in ingress and gateway technology: Envoy Proxy (xDS/ADS, ext_authz, HTTP/2, gRPC) and/or Kong API Gateway, sufficient to lead design reviews and challenge implementation decisions.
- Working depth in OAuth 2.0, OpenID Connect (OIDC), PKCE flows, DPoP sender-constrained tokens, mutual TLS (mTLS), and session management patterns.
- Production Kubernetes experience with Amazon EKS and/or on-premises clusters, and GitOps delivery models such as ArgoCD and Helm.
- Go development background sufficient to review control-plane code, set engineering standards, and participate in design discussions.
- Experience partnering with enterprise Architecture functions, representing designs in architecture review forums, aligning to reference architectures, and negotiating exceptions.
- Experience partnering with Infrastructure, Network, and Cybersecurity teams on shared dependencies such as DNS, CDN/WAF, certificate lifecycle, firewall policy, and perimeter change management.
Nice To Haves
- Financial services or other regulated-industry experience, including regulatory and audit engagement.
- Experience running a migration program that decommissions legacy infrastructure while traffic is live.
- Familiarity with Open Policy Agent (OPA) and policy-as-code authorization models.
- Familiarity with OpenTelemetry, Dynatrace, and Splunk SIEM toolchains.
- Background in identity platforms, including ForgeRock, SAML federation, and token exchange patterns.
Responsibilities
- Own the platform’s end-to-end delivery plan, including milestones, dependencies, critical path, and committed dates across workstreams.
- Set and enforce engineering standards for code review, testing, documentation, observability-first design, and production readiness.
- Chair technical design reviews for gateway, control plane, and session management components, and make architectural decisions when needed.
- Partner with enterprise Architecture groups to align the platform with reference architectures, secure design approvals, and represent the platform in architecture forums.
- Partner with Infrastructure, Network, Cybersecurity, and Identity (AuthE / Sentry) teams to sequence and unblock shared dependencies, including DNS, CDN/WAF, certificates, perimeter policy, and identity provider integration.
- Drive the line-of-business migration program, including onboarding sequence, cutover planning, rollback readiness, and decommissioning legacy authentication Web Agents and Apache proxies.
- Run delivery cadence, including sprint planning, backlog grooming, dependency tracking, risk and issue management, and capacity planning against roadmap commitments.
- Manage a team of 20+ engineers across gateway, control plane, identity integration, and platform operations.
Benefits
- Competitive total rewards package, including base salary determined by role, experience, skill set, and location.
- Commission-based pay and/or discretionary incentive compensation in cash and/or forfeitable equity may be available to eligible roles.
- Comprehensive health care coverage.
- On-site health and wellness centers.
- Retirement savings plan.
- Backup childcare.
- Tuition reimbursement.
- Mental health support.
- Financial coaching.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Director
Education Level
No Education Listed
