Lead Software Engineer- Platform Identity

Promote engineering and reliability, ensuring firm identity and sign-on platforms stay always on while improving with every release

We have an opportunity to impact your career and provide an adventure where you can push the limits of what's possible. As a Lead Software Engineer at JPMorgan Chase within the Chief Technology Office team, you are an integral part of an agile team that works to enhance, build, and deliver trusted market-leading technology products in a secure, stable, and scalable way. As a core technical contributor, you are responsible for conducting critical technology solutions across multiple technical areas within various business functions in support of the firm’s business objectives. Vice President Engineering/SRE leadership role on the Platform Identity Engineering team, building and running the always-on identity systems the whole firm relies on to authenticate and access what they need, spanning firm identity solutions, workforce sign-on and access platforms, and public-cloud providers such as AWS, Entra, and Google Cloud. Blends software engineering with SRE: designing and building the services, APIs, and automation behind these platforms while owning their reliability in production, leading resiliency design reviews, and mentoring other engineers. The Platform Identity Engineering team builds and runs the identity systems the whole firm relies on to authenticate and access what they need, spanning the firm's own identity solutions, workforce sign-on and access platforms, and public-cloud identity providers such as AWS, Entra, and Google Cloud. These are front-line, always-on systems. When they degrade, workforce sign-on and the applications that depend on them feel it immediately, so both the engineering and the operational bar are high. As a Vice President Engineer, you will hold a leadership role on your team, demonstrate strong knowledge across multiple technical domains, and advise others on the technical and business issues facing them. You will lead resiliency design reviews, break complex problems into digestible work for other engineers, act as a technical lead for medium to large-sized products, and provide advice and mentoring to other engineers. This role blends software engineering with SRE: you will design and build the services, APIs, and automation behind these platforms, and you will own their reliability in production. Job responsibilities Design, build, and operate identity platform services and APIs across the portfolio, from architecture through production. Lead initiatives to improve the reliability and stability of your team's applications and platforms using data-driven analytics to improve service levels, proactively identifying and solving technology-related bottlenecks in areas of expertise. Collaborate to identify comprehensive service level indicators and partner with stakeholders to establish reasonable service level objectives and error budgets with your customers. Build and maintain the CI/CD, infrastructure-as-code, and deployment tooling the platform runs on, and plan for scale and resilience across regions, including capacity, failover, and disaster recovery. Use enterprise-authorized AI capabilities within the work environment to accelerate major-incident triage, troubleshooting, and post-incident analysis, validating outputs and handling operational data according to sensitivity and security requirements. Serve as the main point of contact during major incidents for your application. Partner with security and platform teams to keep identity services safe, compliant, and well-governed. Offer a high level of technical expertise within one or more technical domains and provide advice and mentorship to other engineers. Lead reuse-first adoption of AI-assisted reliability workflows across SDLC/toolchain practices (e.g., CI/CD quality checks, test/validation automation, and operational readiness), ensuring traceability/auditability, resiliency, and security controls. Drives team adoption of enterprise-authorized AI-assisted engineering practices within the work environment to improve code quality, delivery speed, and operational outcomes (e.g., AI-assisted code review/refactoring, test strategy acceleration, incident/root-cause analysis support), while establishing consistent validation standards (secure coding, peer review, automated testing) and promoting reuse of effective patterns across the team. Applies knowledge of tools within the Software Development Life Cycle toolchain, including enterprise-authorized AI-assisted development and automation capabilities, to improve the value realized by automation. Required qualifications, capabilities, and skills Formal training or certification on software engineering concepts and 5+ years applied experience Demonstrated proficiency in reliability, scalability, performance, security, enterprise system architecture, toil reduction, and other site reliability best practices. Proven experience designing and building production services and APIs, with clean, maintainable code, and fluent in at least one programming language such as Python, Java/Spring-Boot, Go, or others. Proficient with automation and infrastructure-as-code (Terraform or similar templating language). Demonstrated experience using enterprise-authorized AI capabilities within the work environment to improve SRE workflows (e.g., incident investigation support and knowledge capture). Proficient knowledge and experience in observability such as service level objective alerting and telemetry collection (e.g., CloudWatch, Prometheus, Grafana, Tempo). Proficient with continuous integration and continuous delivery practices and tooling. Experience with troubleshooting common networking technologies and issues. Demonstrated experience leading effective use of approved AI-assisted software development tools (e.g., for coding, code review, test acceleration, troubleshooting) with the ability to set team expectations for validating AI outputs for correctness, performance, and security. Strong understanding of responsible AI use in engineering workflows, including data sensitivity considerations, secure handling of inputs/outputs, and adherence to resiliency and security expectations; experience coaching engineers on safe, compliant adoption within delivery practices Preferred qualifications, capabilities, and skills Experience with modern authentication and federation protocols (token- and assertion-based). Broader IAM knowledge: auth models, certificate and key registration and rotation, onboarding, least privilege. Familiarity with directory services and enterprise access platforms. Experience with federated identity across firm and public-cloud providers. PKI knowledge (x509, mTLS, signing-key management and rotation). Experience running regulated or high-availability systems, including DR and multi-region resilience. Proficient with container and container orchestration (e.g., Kubernetes).