Lead Security Engineer - Cloud Proxy

JPMorganChase is seeking a Lead Security Engineer to design, secure, and operate a cloud network perimeter platform that governs outbound traffic at enterprise scale. This onsite role in Plano, TX partners with engineering and business teams to enable secure, reliable cloud connectivity across the organization.

Salary for this position ranges from USD 152,000 to 215,000 per year and requires a minimum of five years of relevant experience.

Responsibilities

• Architect, develop, and maintain secure software for cloud network perimeter systems, delivering production-grade code and performing peer reviews throughout the full software lifecycle.
• Leverage enterprise AI capabilities to accelerate threat modeling, vulnerability analysis synthesis, and security documentation, while validating outputs and safeguarding sensitive data.
• Create and manage infrastructure-as-code to automate provisioning, configuration, and scaling of cloud networking and proxy systems in a repeatable, auditable manner.
• Operate enterprise-scale proxy infrastructure to ensure high availability, performance, and secure egress controls across cloud environments.
• Develop automation tooling to streamline network configuration, proxy onboarding, certificate management, and policy enforcement.
• Troubleshoot complex network and proxy connectivity issues across cloud environments using structured diagnostic approaches to identify root causes and drive resolution.
• Collaborate with application teams, platform engineers, and architects to design secure, scalable network connectivity patterns that meet technical and business requirements.
• Reduce security vulnerabilities by applying industry best practices and evolving guidance while continuously improving perimeter controls and validating effectiveness.
• Foster an inclusive, diverse, and respectful team culture that supports opportunity and growth.
• Apply reuse-first, AI-assisted practices within SDLC/toolchains to strengthen security testing and control validation, ensuring traceability and alignment with resiliency and audit expectations.

Requirements

• Formal training or certification in software engineering, security engineering, or network engineering concepts plus 5+ years of applied experience in one or more of these disciplines.
• Skilled in planning, designing, and implementing enterprise-level security and/or network solutions within cloud environments.
• Develops secure and high-quality production code and reviews and debugs code written by others, with a focus on cloud network security automation and infrastructure-as-code.
• Minimizes security vulnerabilities by following industry insights and governmental regulations to continuously evolve security protocols, including establishing processes to measure effectiveness of current controls.
• Works with stakeholders and business leaders to understand secure connectivity requirements and recommend architectural patterns during periods of vulnerability or change.
• Experience with AWS services including serverless solutions, ECS, EC2, Lambda, API Gateway, and networking services such as VPCs, Transit Gateway, and PrivateLink.
• Ability to review and validate AI-assisted code and security recommendations before adoption, escalating uncertainty and ensuring outcomes align with security, resiliency, and auditability expectations.
• Strong communication, teamwork, and self-learning mindset.
• Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support security engineering workflows with robust validation and awareness of data sensitivity.

Technologies

• AWS, AWS ECS, AWS EC2, AWS Lambda, AWS API Gateway, AWS VPC, AWS Transit Gateway, AWS PrivateLink
• F5, Squid, Envoy
• TLS/SSL certificate management, PKI, mTLS, truststore configuration
• HTTP CONNECT, HTTPS, SOCKS5, DNS-based routing

Benefits

• Base salary
• Commission-based pay
• Discretionary incentive compensation
• Cash and/or forfeitable equity
• Comprehensive health care coverage
• On-site health and wellness centers
• Retirement savings plan
• Backup childcare
• Tutition reimbursement
• Mental health support
• Financial coaching