What are the responsibilities and job description for the Senior Lead Architect: Trust and Security Architecture position at JPMorgan Chase?
Shape secure digital experiences and drive Customer Identity and Access Management strategy and customer security.
If you are excited about shaping the future of technology and driving significant business impact in financial services, we are looking for people just like you. Join our team and help us develop game-changing, high-quality solutions.
As a Senior Lead Architect at JPMorganChase within the Community and Consumer Banking Technology team you are an integral part of a team that works to develop high-quality architecture solutions for various software applications and platform products. You drive significant business impact and help shape the target state architecture through your capabilities in multiple architecture domains.
In this role, you will lead the strategy, design, and enablement of customer-facing authentication and security solutions across web, mobile, APIs, and assisted channels. You will ensure secure, seamless, and scalable digital experiences by architecting and optimizing CIAM platforms, collaborating with cross-functional teams, and staying ahead of industry trends.
Job responsibilities:
- Architects and designs solutions in Cyber, Authentication, Security, Scams & Fraud capability domains.
- Leads the technical strategy for CIAM platforms, aligning with business goals and regulatory requirements.
- Designs, implements, and optimizes Customer Identity and Access Management (CIAM) solutions for secure digital experiences.
- Develop and maintain technical roadmaps for CIAM platforms, focusing on scalability, resilience, and interoperability.
- Integrate CIAM systems with web, mobile, and third-party applications, supporting SSO, MFA, social login, and federated identity.
- Define and enforce security standards, privacy controls, and compliance requirements for customer data and access.
- Collaborates with product, engineering, and security teams to translate business requirements into technical specifications.
- Conduct threat modeling, risk assessments, and security reviews for CIAM systems.
Required qualifications, capabilities, and skills:
- Formal training or certification on software engineering concepts, Information Security, or related field and 5 years applied experience
- Deep knowledge of CIAM platforms, protocols (OAuth 2.0, OpenID Connect, SAML), and authentication mechanisms (MFA, biometrics, social login)
- Experience with cloud platforms (AWS, Azure, GCP) and microservices architectures
- Strong understanding of privacy, security, and regulatory requirements for customer data
- Hands-on experience with API security, consent management, and user experience optimization
- Experience with open standards such as OAuth, OIDC, FIDO, multi-factor authentication, and TLS; securing hybrid native and web apps on mobile platforms
- Familiarity with rooting or jail-breaking iOS and Android devices to discover mobile application vulnerabilities
Preferred qualifications, capabilities, and skills:
- Excellent communication, collaboration, and problem-solving skills
- Understanding of information security and risk management challenges, including mitigation and remediation
- Strong knowledge of OWASP Top 10 security issues for web and mobile applications, and remediation patterns