Security Infrastructure Engineer - HSM Management

JPMorganChase•Plano, TX

About The Position

As a Security Engineer on JPMorgan Chase’s Cybersecurity & Technology Controls team, you will design, implement, and maintain secure, scalable, and resilient infrastructure supporting critical payment and cryptographic operations. You will use expertise in Hardware Security Module (HSM) management and infrastructure architecture to protect sensitive systems and data, collaborate with cross-functional teams to define standards, and contribute to business continuity in complex, high-stakes environments. The role focuses on the architecture and full lifecycle management of HSM and cryptographic infrastructure, including Thales and FutureX platforms. It also involves supporting secure key management, confidential computing, compliance, infrastructure operations, and transitions such as migrations and upgrades. You will use enterprise-authorized AI capabilities in security workflows, validating outputs and maintaining appropriate handling of sensitive data, traceability, auditability, and alignment with security and resiliency expectations.

Requirements

Formal training or certification in security engineering concepts and at least 3 years of applied experience.
Hands-on HSM engineering experience, including architecture and system design for highly available infrastructure, disaster recovery, and business continuity.
Experience with network security, firewalls, secure room operations, and key ceremonies.
Strong Linux and Unix administration experience in enterprise environments and proficient technical troubleshooting skills.
Ability to design and document infrastructure architectures using industry-standard tools and methodologies.
Experience with infrastructure automation tools such as Terraform.
Hands-on experience with OpenSSL and certificate-based authentication mechanisms.
Demonstrated experience using enterprise-authorized AI capabilities in security engineering workflows, with strong validation habits and awareness of data sensitivity.
Ability to validate AI-assisted code and security recommendations before adoption, escalate uncertainty, and ensure alignment with security, resiliency, and auditability expectations.

Nice To Haves

Hands-on experience with Splunk or equivalent platforms for infrastructure monitoring and troubleshooting.
Strong knowledge of payment processes and business resiliency applied to infrastructure design.
Relevant HSM platform certifications, such as Thales or FutureX credentials.
Strong understanding of cryptographic principles, key management, confidential computing, and secure hardware operations.

Responsibilities

Design and document complex HSM and cryptographic infrastructure architectures aligned with business, resiliency, and security requirements.
Design, deploy, configure, integrate, and manage HSM solutions across Thales and FutureX platforms throughout their lifecycle.
Maintain architectural diagrams, system documentation, and operational runbooks.
Collaborate with cross-functional teams to define infrastructure standards, best practices, and security controls aligned with firm-wide policies and industry regulations.
Oversee HSM infrastructure migrations, upgrades, and consolidations while minimizing disruption and maintaining security.
Provide guidance on cryptographic key management, secure storage, confidential computing, and compliance with PCI DSS and FIPS.
Troubleshoot infrastructure and HSM issues, perform root cause analysis, and implement corrective actions using monitoring tools.
Participate in risk assessments, audits, and incident response activities related to infrastructure and HSM environments.
Apply knowledge of payment processes and business resiliency to infrastructure design and operational decisions.
Use enterprise-authorized AI capabilities for threat modeling, vulnerability analysis synthesis, and security documentation, validating outputs and handling sensitive data appropriately.
Apply reuse-first, AI-assisted practices in SDLC and toolchain routines to strengthen security testing and control validation while maintaining traceability, auditability, and alignment with security and resiliency expectations.
Review and validate AI-assisted code and security recommendations before adoption, escalating uncertainty and ensuring outcomes meet security, resiliency, and auditability expectations.