דרושים Principal Security Engineer ב-גיי פי מורגן ב-United States, Washington

Job responsibilities

• Executes creative software solutions, design, development, and technical troubleshooting with ability to think beyond routine or conventional approaches to build solutions or break down technical problems
• Develops secure high-quality production code, and reviews and debugs code written by others
• Identifies opportunities to eliminate or automate remediation of recurring issues to improve overall operational stability of software applications and systems
• Leads evaluation sessions with external vendors, startups, and internal teams to drive outcomes-oriented probing of architectural designs, technical credentials, and applicability for use within existing systems and information architecture
• Leads communities of practice across Software Engineering to drive awareness and use of new and leading-edge technologies
• Adds to team culture of diversity, opportunity, inclusion, and respect
• Deliver AI/ML based solutions to improve Kubernetes platforms for JPMC
• Regularly provides technical guidance and direction to support the business and its technical teams

Required qualifications, capabilities, and skills

• Formal training or certification on software engineering concepts and 5+ years applied experience
• Hands-on practical experience delivering system design, application development, testing, and operational stability
• Advanced in one or more programming language(s)
• Proficiency in automation and continuous delivery methods
• Proficient in all aspects of the Software Development Life Cycle
• Advanced understanding of agile methodologies such as CI/CD, Application Resiliency, and Security
• Demonstrated proficiency in software applications and technical processes within a technical discipline (e.g., cloud, artificial intelligence, machine learning, mobile, etc.)
• In-depth knowledge of the financial services industry and their IT systems
• Practical cloud native experience
• Experience applying data engineering and machine learning techniques
• Experience in Generative AI, LLMs and AI Agents

• Experience working with modern private & public cloud infrastructure platforms - Kubernetes, AWS EKS Terraform, Ansible and other automation tools.
• Experience in multiple Cloud platforms like GCP GKE is a plus
• Knowledge of deep learning and ML Ops workflows
• Experience in Time Series analysis, including forecasting, anomaly detection, and trend analysis

As a Technology Auditor - Associate within the Asset & Wealth Management (AWM) Technology Audit Team, you will execute the annual audit plan, participate in audit engagements by performing audit testing, and participate in various continuous monitoring efforts. This position is ideal for someone with knowledge of various technologies, operating systems, databases and data analytical skills, as well as the audit and risk skills to be able to effectively execute global technology audits.

Job responsibilities

• Participate on technology audit engagements, from planning to reporting, and produce quality deliverables to both department and professional standards, while ensuring audits are completed timely and within budget.
• Work closely with global Audit colleagues in the early identification of emerging control issues, and report them in a timely manner to Audit management and business stakeholders
• Partner with stakeholders, business management, other control groups (i.e. risk management, compliance, fraud prevention), establishing strong working relationships while maintaining independence
• Finalize audit findings and use judgment to provide an overall opinion on the control environment by developing recommendations to strengthen internal controls
• Communicate audit findings to management, and identify opportunities for improvement in the design and effectiveness of key controls
• Stay up-to-date with evolving industry/regulatory changes impacting the business and participate in appropriate control forums
• Find ways to drive efficiency with existing technical infrastructure through automation while embracing the innovative opportunities offered by new technologies
• Recognize the confidential nature of Internal Audit communications and access to information; exercise discipline in protecting the confidentiality and security of information in accordance with firm policy.

Required qualifications, skills and capabilities

• Knowledge and experience in various Technology and Cyber domains, for e.g., Software Lifecycle Development (SDLC), Vulnerability Management, Change Management, etc.
• Understanding of internal control concepts, with proven ability to evaluate and determine the adequacy of controls by considering business and technology risks in an integrated manner.
• Strong data analytical skills with extensive experience and ease of use with industry-leading data analytics tools such as Alteryx and Tableau.
• Strong analytical skills, particularly with regards to assessing the probability and impact of an internal control weakness.
• Excellent written, verbal, and presentation skills; adept at presenting complex and sensitive issues to senior management and strong interpersonal and influencing skills, with the ability to establish credibility and build partnerships with senior business and control partners.
• Enthusiastic and self-motivated, with a keen interest in learning; effective under pressure and willing to take personal responsibility/accountability as well as flexible to changing business priorities and ability to multitask in a constantly changing environment.

Preferred qualifications, skills and capabilities

• Experience with internal audit methodology and applying concepts in audit delivery and execution preferred.
• Certified in CISA, CISM or other technology audit certifications.
• Bachelor's degree in Technology or related field
• Preferred internal or external technology auditing experience, or relevant technology risk and control management experience.

Job Responsibilities:

• Provide architecture and support for the adoption and management of Access Management, Directory & Federation Services, Single Sign-On (SSO), Multi-factor Authentication (MFA), and similar secure authentication services.
• Lead the development and maintenance of the Identity Management Controls, ensuring alignment with industry best practices.
• Develop, build, and maintain technology design and architecture to enable continuous contextual authentication and authorization, fostering innovation and continuous improvement.
• Mentor junior team members and lead cross-functional teams to drive cybersecurity initiatives and projects.
• Engage with stakeholders across various technical and business functions to develop and maintain the roadmap for enterprise IAM solutions, ensuring alignment with strategic goals.
• Conduct risk assessments and manage cybersecurity risks, implementing effective mitigation strategies.
• Maintain up-to-date knowledge of identity and access management best practices and encourage continuous learning and professional development within the team.

Required Qualifications, Capabilities, and Skills:

• Formal training or certification on Cybersecurity Architecture concepts and 5+ years applied experience
• Demonstrated design and development experience in large-scale, complex environments with heavy regulatory needs.
• Expertise in Authentication and Authorization protocols, including Active Directory Services, EntraID, ADFS, OAuth, OIDC, SAML, Encryptions, and PKI.
• Hands-on experience delivering Directory services security, Large scale migrations.
• Expertise in Digital Certificate Management (DCM) and rolling out PKI services across enterprise services
• Advanced proficiency in one or more programming languages and object-oriented programming (e.g., Python, Go).
• Proficiency in automation, continuous delivery methods (CI/CD), and Infrastructure as Code (IaC).
• Strong understanding of agile methodologies, application resiliency, and security.
• In-depth knowledge of the financial services industry and their IT systems.
• Experience in directory services and identity data management.

Preferred Qualifications, Capabilities, and Skills:

• Strong skills in cybersecurity, architecture, and process engineering.
• Excellent collaboration, communication, and stakeholder management skills.
• Experience with third-party tools and technologies, including ADFS, Active Directory, Microsoft Entra ID, ForgeRock, Ping Identity/Access, API Gateways, Active Directory, CyberArk, Delinea, and Hashi Corp Vault.

Job Responsibilities:

• Gain a comprehensive understanding of a wide range of internal and external products across compute, storage, network, database, and middleware to identify bottlenecks in architecture, design, and code.
• Monitor and collect performance statistics, analyzing product performance and scalability across diverse hardware, software, and configurations.
• Proactively anticipate and identify issues that could negatively impact performance, working to eliminate or mitigate them.
• Plan and develop methodologies for standard performance benchmarks and comparisons.
• Design, develop, and implement tools to automate performance measurement and analysis.
• Develop processes to track ROI and application TCO.
• Profile application performance and recommend suitable hardware solutions for various application profiles.
• Utilize a variety of tools and programs to test and analyze code, demonstrating expertise in designing, running, and interpreting test results.
• Serve as performance advisors within teams to ensure performance considerations are integrated into development practices, optimizing infrastructure scalability.
• Influence leaders and senior stakeholders across business, product, and technology teams.

Required Qualifications, Capabilities, and Skills:

• Formal training or certification in software engineering concepts with 5+ years of applied experience.
• Hands-on experience in delivering system design, application development, testing, and operational stability concepts, with a proven track record of leading technologists to manage, anticipate, and solve complex technical challenges within your domain and across the organization.
• Experience with modern private and public cloud infrastructure platforms.
• Proficiency in performance troubleshooting skills.
• Ability to optimize software solutions for execution speed, memory efficiency, and communication latency.
• Experience with both Linux and Windows operating systems, a broad variety of databases, and infrastructure across compute, network, and storage.
• Ability to benchmark performance metrics for any given business case.
• Strong communication skills with the ability to present and effectively communicate with Senior Leaders and Executives, and experience in influencing engineers and leaders.
• Experience in creating, tracking, measuring, and interpreting Key Performance Indicators to develop performance recommendations and roadmaps.
• Background in Computer Science, Computer Engineering, Mathematics, or a related technical field.

Preferred Qualifications, Capabilities, and Skills:

• Experience in Infrastructure Architecture designs.
• Direct experience in Performance Engineering.
• Experience working in consultancy, proposal development, and engagement delivery.
• Knowledge of industry-wide technology trends and best practices.
• Published research papers, industry articles, and product performance technical papers.