Security Engineer III - HSM Management

JPMorgan Chase & Co. • Plano, TX

11d

About The Position

As a Security Engineer at JPMorgan Chase within the Cybersecurity & Technology Controls team, you will design, implement, and maintain secure, scalable, and resilient infrastructure solutions supporting critical payment and cryptographic operations. You will leverage expertise in Hardware Security Module (HSM) management and infrastructure architecture to protect sensitive systems and data. You will collaborate with cross-functional teams to define standards, drive innovation, and ensure business continuity in complex, high-stakes environments.

The role leads the architecture and lifecycle management of HSM and cryptographic infrastructure, including solutions across Thales and FutureX platforms. It also supports infrastructure migrations, upgrades, troubleshooting, compliance, risk assessments, audits, incident response, and operational documentation. The position uses enterprise-authorized AI capabilities in security engineering workflows, with a focus on validating outputs, protecting sensitive data, and maintaining traceability, auditability, resiliency, and security.

Requirements

• Formal training or certification in security engineering concepts and applied experience; a specific number of years is not stated.
• Hands-on HSM engineering experience, including architecture and design of highly available infrastructure, disaster recovery, and business continuity strategies.
• Experience with network security, firewalls, secure room operations, and key ceremonies.
• Strong technical troubleshooting skills and enterprise Linux and Unix administration experience.
• Proficiency in designing and documenting infrastructure architectures using industry-standard tools and methodologies.
• Experience with infrastructure automation tools such as Terraform for managing and scaling secure environments.
• Hands-on experience with OpenSSL and certificate-based authentication mechanisms.
• Demonstrated experience using enterprise-authorized AI capabilities in security engineering workflows, with strong validation habits and awareness of data sensitivity.
• Ability to review and validate AI-assisted code and security recommendations before adoption, escalate uncertainty, and ensure alignment with security, resiliency, and auditability expectations.

Nice To Haves

• Hands-on experience with Splunk or equivalent infrastructure monitoring and troubleshooting platforms.
• Strong domain knowledge of payment processes and business resiliency applied to infrastructure design.
• Relevant HSM platform certifications, such as Thales or FutureX credentials.
• Strong understanding of cryptographic principles, key management, confidential computing, and secure hardware operations.

Responsibilities

• Lead the architecture, design, and documentation of complex HSM and cryptographic infrastructure aligned with business, resiliency, and security requirements.
• Design and implement HSM solutions, including deployment, configuration, integration, and full lifecycle management across Thales and FutureX platforms.
• Develop and maintain architectural diagrams, system documentation, and operational runbooks.
• Collaborate with cross-functional teams to define infrastructure standards, best practices, and security controls aligned with firm-wide policies and industry regulations.
• Oversee HSM infrastructure migration, upgrades, and consolidation while minimizing disruption and maintaining security.
• Provide guidance on cryptographic key management, secure storage, confidential computing, and compliance with PCI DSS and FIPS standards.
• Troubleshoot and resolve infrastructure and HSM issues, perform root cause analysis, and implement corrective actions using monitoring tools.
• Participate in risk assessments, audits, and incident response activities related to infrastructure and HSM environments.
• Apply knowledge of payment processes and business resiliency to infrastructure design and operational decisions.
• Use enterprise-authorized AI capabilities to support threat modeling, vulnerability analysis synthesis, and security documentation, validating results and handling sensitive data appropriately.
• Apply reuse-first, AI-assisted practices in SDLC and toolchain routines to strengthen security testing and control validation while ensuring traceability, auditability, resiliency, and security alignment.

Benefits

• Competitive total rewards package, including base salary determined by role, experience, skill set, and location.
• Eligible roles may receive commission-based pay and/or discretionary incentive compensation in cash and/or forfeitable equity.
• Comprehensive health care coverage.
• On-site health and wellness centers.
• Retirement savings plan.
• Backup childcare.
• Tuition reimbursement.
• Mental health support.
• Financial coaching.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed