Security Engineer III - HSM Management

JPMorganChase•Plano, TX

10d

About The Position

As a Security Engineer within JPMorgan Chase’s Cybersecurity & Technology Controls team, you will design, implement, and maintain secure, scalable, and resilient infrastructure supporting critical payment and cryptographic operations. The role applies deep expertise in Hardware Security Module (HSM) management and infrastructure architecture to protect sensitive systems and data. You will work with cross-functional teams to define standards, drive innovation, and support business continuity in complex, high-stakes environments. The position leads the architecture and lifecycle management of HSM and cryptographic infrastructure across Thales and FutureX platforms. It also encompasses infrastructure documentation, migration and upgrades, troubleshooting, risk assessments, audits, and incident response. The role uses enterprise-authorized AI capabilities in security engineering workflows, with validation, appropriate handling of sensitive data, and attention to traceability, auditability, security, and resiliency.

Requirements

Formal training or certification in security engineering concepts, with applied experience.
Hands-on HSM engineering experience, including architecture and system design for highly available infrastructure, disaster recovery, and business continuity.
Experience with network security, firewalls, secure room operations, and key ceremonies.
Strong technical troubleshooting skills and Linux and Unix administration experience in enterprise environments.
Proficiency in designing and documenting infrastructure architectures using industry-standard tools and methodologies.
Experience with infrastructure automation tools such as Terraform for managing and scaling secure environments.
Hands-on experience with OpenSSL and certificate-based authentication mechanisms.
Demonstrated experience using enterprise-authorized AI capabilities in security engineering workflows, with strong validation habits and awareness of data sensitivity.
Ability to validate AI-assisted code and security recommendations, escalate uncertainty, and ensure security, resiliency, and auditability.

Nice To Haves

Hands-on experience with Splunk or equivalent platforms for infrastructure monitoring and troubleshooting.
Strong domain knowledge of payment processes and business resiliency applied to infrastructure design.
Relevant HSM platform certifications, such as Thales or FutureX credentials.
Strong understanding of cryptographic principles, key management, confidential computing, and secure hardware operations.

Responsibilities

Lead architecture, design, and documentation of complex HSM and cryptographic infrastructure in line with business, resiliency, and security requirements.
Design and implement HSM solutions, including deployment, configuration, integration, and lifecycle management across Thales and FutureX platforms.
Develop and maintain architectural diagrams, system documentation, and operational runbooks.
Collaborate with cross-functional teams to define infrastructure standards, best practices, and security controls aligned with firm-wide policies and industry regulations.
Oversee HSM infrastructure migrations, upgrades, and consolidations while minimizing disruption and maintaining security.
Provide guidance on cryptographic key management, secure storage, confidential computing, and compliance with PCI DSS and FIPS standards.
Troubleshoot infrastructure and HSM issues, perform root cause analysis, and implement corrective actions using monitoring tools.
Participate in risk assessments, audits, and incident response activities related to infrastructure and HSM environments.
Apply knowledge of payment processes and business resiliency to infrastructure design and operational decisions.
Use enterprise-authorized AI capabilities for threat modeling, vulnerability-analysis synthesis, and security documentation, validating outputs and handling sensitive data appropriately.
Apply reuse-first, AI-assisted practices in SDLC and toolchain routines to strengthen security testing and control validation, maintaining traceability and auditability.
Review and validate AI-assisted code and security recommendations before adoption, escalating uncertainty and ensuring outcomes meet security, resiliency, and auditability expectations.