Security Infrastructure Engineer - HSM Management

JPMorgan Chase & Co. • Plano, TX

3d

About The Position

Join JPMorgan Chase’s Cybersecurity & Technology Controls team as a Security Engineer, designing, implementing, and maintaining secure, scalable, and resilient infrastructure for critical payment and cryptographic operations. The role focuses on Hardware Security Module (HSM) management and infrastructure architecture to protect sensitive systems and data. You will collaborate with cross-functional teams to establish standards, drive innovation, support business continuity, and contribute to cryptographic security in complex, high-stakes environments.

The position includes using enterprise-authorized AI capabilities to support threat modeling, vulnerability analysis, security documentation, security testing, and control validation. AI-generated outputs must be validated, handled with appropriate sensitivity, and meet security, resiliency, traceability, and auditability expectations.

JPMorgan Chase offers a competitive total rewards package, with base salary determined by role, experience, skill set, and location. Eligible roles may include commission-based pay or discretionary incentive compensation. Benefits and programs are provided based on eligibility, with further details shared during the hiring process.

Requirements

• Formal training or certification in security engineering concepts and at least 3 years of applied experience.
• Hands-on HSM engineering experience, including architecture and system design for highly available infrastructure, disaster recovery, and business continuity.
• Experience with network security, firewalls, secure room operations, and key ceremonies.
• Strong technical troubleshooting skills and enterprise Linux and Unix administration experience.
• Proficiency in designing and documenting infrastructure architectures using industry-standard tools and methodologies.
• Experience with infrastructure automation tools such as Terraform.
• Hands-on experience with OpenSSL and certificate-based authentication mechanisms.
• Demonstrated experience using enterprise-authorized AI capabilities in security engineering workflows, with strong validation habits and awareness of data sensitivity.
• Ability to review and validate AI-assisted code and security recommendations before adoption, escalate uncertainty, and ensure outcomes meet security, resiliency, and auditability expectations.

Nice To Haves

• Hands-on experience with Splunk or equivalent infrastructure monitoring and troubleshooting platforms.
• Strong domain knowledge of payment processes and business resiliency applied to infrastructure design.
• Relevant HSM platform certifications, such as Thales or FutureX credentials.
• Strong understanding of cryptographic principles, key management, confidential computing, and secure hardware operations.

Responsibilities

• Design and document complex HSM and cryptographic infrastructure architectures aligned with business, resiliency, and security requirements.
• Design and implement HSM solutions, including deployment, configuration, integration, and lifecycle management across Thales and FutureX platforms.
• Maintain architectural diagrams, system documentation, and operational runbooks.
• Collaborate with cross-functional teams to define infrastructure standards, best practices, and security controls aligned with firm-wide policies and industry regulations.
• Oversee HSM infrastructure migrations, upgrades, and consolidations while minimizing disruption and maintaining security.
• Provide guidance on cryptographic key management, secure storage, confidential computing, and compliance with PCI DSS and FIPS.
• Troubleshoot infrastructure and HSM-related issues, perform root cause analysis, and implement corrective actions using monitoring tools.
• Participate in risk assessments, audits, and incident response activities related to infrastructure and HSM environments.
• Apply knowledge of payment processes and business resiliency to infrastructure design and operational decisions.
• Use enterprise-authorized AI capabilities for threat modeling, vulnerability analysis synthesis, and security documentation, validating outputs and protecting sensitive data.
• Apply reuse-first, AI-assisted practices in SDLC and toolchain routines to strengthen security testing and control validation while maintaining traceability, auditability, resiliency, and security.

Benefits

• Comprehensive health care coverage
• On-site health and wellness centers
• Retirement savings plan
• Backup childcare
• Tuition reimbursement
• Mental health support
• Financial coaching
• Eligible roles may receive commission-based pay and/or discretionary incentive compensation in cash and/or forfeitable equity

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed