Lead Security Engineer — Blockchain

JPMorgan Chase & Co.•Plano, TX

About The Position

As a Lead Security Engineer at JPMorgan Chase within the CTC Emerging Technologies Security group, you will design, build, and operate an enterprise-grade Digital Asset Custody and Wallet Orchestration Platform. In this role, you will be at the forefront of institutional blockchain infrastructure, responsible for building secure, scalable, and compliant wallet services that power our digital asset operations across multiple blockchain networks. You will work at the intersection of distributed systems engineering, cryptographic security, and financial services technology — building the foundational infrastructure that enables secure key management, programmable transaction policies, and seamless multi-chain wallet capabilities. This is a hands-on engineering role requiring knowledge of blockchain protocols, cloud-native development, and enterprise security practices.

Requirements

Bachelor's degree in Computer Science, Software Engineering, or a related field, with 7+ years of software development experience, including at least 2 years working with blockchain technologies or digital asset platforms
Strong proficiency in Java/J2EE and/or Python, with hands-on experience building production microservices using frameworks such as Spring Boot, Flask, or FastAPI
Solid understanding of blockchain fundamentals, including transaction models, consensus mechanisms, smart contract interaction (EVM-based and non-EVM), gas and fee management, and block finality across major networks
Working knowledge of cryptographic primitives and protocols relevant to digital asset custody, including Multi-Party Computation (MPC), threshold signatures (TSS), distributed key generation (DKG), elliptic curve cryptography (ECDSA, EdDSA), and HD wallet derivation paths (BIP-32/BIP-44)
Experience designing and implementing policy engines or rule-based authorization frameworks for financial transaction workflows, including multi-signature schemes, approval chains, and configurable spending controls
Proficiency with cloud infrastructure on AWS, including EC2, EKS, Lambda, S3, RDS, IAM, SQS, SNS, API Gateway, and KMS, with experience using Terraform or CloudFormation for infrastructure-as-code
Strong experience with containerization and orchestration using Docker and Kubernetes, including deployment pipelines, and auto-scaling configurations
Experience designing and consuming RESTful APIs, with deep understanding of OAuth 2.0, JWT, TLS/mTLS, certificate management, and API security best practices
Familiarity with event-driven architectures, webhook processing, and asynchronous messaging patterns for handling real-time blockchain state changes and notifications
Experience with relational (Oracle, PostgreSQL) and NoSQL (DynamoDB, MongoDB, Redis) databases, including schema design, query optimization, and data consistency patterns for financial systems
Proficiency with observability and monitoring tools such as Datadog, Dynatrace, Splunk, Grafana, or Prometheus for distributed tracing, log aggregation, and performance monitoring
Solid understanding of agile development methodologies, CI/CD pipelines (Jenkins, GitHub Actions, Spinnaker), and DevOps practices in a large enterprise environment

Nice To Haves

Experience building or operating digital asset custody solutions in a regulated financial institution
Experience using AI-assisted development tools (e.g., GitHub Copilot, Claude Code ) to accelerate development and test generation

Responsibilities

Design, architect, and develop a production-grade digital asset custody & wallet orchestration platform by integrating with wallet infra platforms leveraging their APIs and SDKs for wallet provisioning, key management, and transaction orchestration
Implement secure key management workflows using Multi-Party Computation (MPC) and distributed key generation, ensuring no single point of failure
Build and configure programmable transaction policy engines, including multi-approval workflows, spending thresholds, velocity limits and role-based access controls
Develop multi-chain wallet capabilities supporting blockchain networks such as Ethereum, Bitcoin, Solana, and Polygon through unified API abstractions
Manage the full blockchain transaction lifecycle, including transaction construction, fee estimation, payload signing, broadcast, confirmation tracking, and idempotent retry logic for failed or stuck transactions
Design event-driven and webhook-based architectures to process real-time blockchain notifications such as transaction confirmations, smart contract events
Build secure RESTful APIs and microservices that expose wallet functionality to internal consumers, applying OAuth 2.0, JWT-based authentication, API gateway patterns
Develop and maintain integrations with compliance and risk systems, including transaction monitoring and comprehensive audit trail generation
Implement robust observability across the wallet service stack, including distributed tracing, structured logging, alerting, and dashboarding using tools such as Datadog, Dynatrace, and Splunk
Architect the wallet service for high availability, disaster recovery, and horizontal scalability using container orchestration on AWS (EKS/ECS), infrastructure-as-code (Terraform), and cloud-native resilience patterns
Collaborate with product managers, security teams, and business stakeholders to translate regulatory and business requirements into technical designs and delivery milestones
Add to team culture of diversity, opportunity, inclusion, and respect