Principal Architect - Identity & Data Modeling

Salary: $61,000 - 101,000 per year Requirements:

• Formal training or certification in software infrastructure architecture, combined with expert-level practical experience
• Extensive background architecting within large, complex, regulated financial services environments, including identity-focused solutions and production delivery
• Deep knowledge of enterprise identity management and directory services, including Kerberos and Active Directory, forest and domain structures, trusts, group nesting, SPNs, constrained delegation, service accounts, and PKI
• Strong understanding of authorization frameworks and controls, including RBAC, ABAC, policy evaluation, least privilege, privileged access, break-glass, and just-in-time access
• Solid data modeling capability across relational, hierarchical, and graph structures, with schema design experience for governance datasets such as product catalogs, CMDB/inventory, configuration attributes, and organizational structures
• Professional software and API design experience, including REST and gRPC, versioning, compatibility, service contracts, error handling, pagination, performance, and security
• Hands-on understanding of IaaS and hypervisor platforms, including how identity and authorization integrate with provisioning, lifecycle management, and operations
• Proven ability to incorporate regulatory, risk, and control requirements into architecture and produce audit-ready evidence and traceability
• Strong communication and stakeholder management skills, with the ability to work closely with developers and platform engineers to deliver pragmatic solutions
• Experience with policy-as-code and control tools such as OPA, Conftest, or Sentinel, along with mapping to control frameworks
• Familiarity with Kubernetes identity patterns, including workload identity, service accounts, service meshes, and identity-aware networking
• Experience with data governance practices such as stewardship models, MDM, reference data, lineage, and reconciliation
• Background in secrets management, mTLS/PKI, and certificate lifecycle management for services
• Track record of improving team productivity through agile ways of working, backlog management, and delivery metrics
• Relevant certifications in identity, directory services, security, or architecture

• Own and define canonical data models that capture identity, authority, ownership, and permissions across compute, storage, and network resources
• Design and evolve APIs and service contracts for entitlements and workload onboarding to IaaS and hypervisor platforms, including versioning, compatibility, lifecycle, and governance
• Architect identity-aware provisioning flows and guardrails by integrating with directory and identity systems and enforcing RBAC, ABAC, separation of duties, least privilege, and auditable change
• Establish and maintain governance data structures such as product catalogs, inventories or CMDB, configuration attributes, and organizational hierarchies, with clear sources of truth, lineage, and stewardship
• Build compliance and control requirements into our designs, ensuring evidence and traceability for identity, access management, and operational risk obligations
• Partner with platform teams and application developers to create secure, operable, and scalable workload deployment patterns, reference architectures, reusable patterns, and templates
• Define policy and policy-as-code approaches for identity, authorization, configuration, and change, integrating controls into CI/CD and provisioning pipelines
• Improve data quality and observability for governance datasets through schemas, validation, metadata, golden records, reconciliation, and reporting
• Lead architecture and design reviews, document decisions, risks, exceptions or waivers, and remediation plans, and present in governance forums
• Support effective team delivery by organizing backlogs and ceremonies, maintaining Jira/Kanban hygiene, running stand-ups, and tracking delivery metrics
• Mentor engineers and architects while helping foster a collaborative, low-ego, outcome-focused culture

• API
• Active Directory
• Architect
• CI/CD
• Cloud
• CMDB
• IaaS
• Support
• JIRA
• Kanban
• Kubernetes
• Network
• REST
• RBAC
• Security
• gRPC

More:

We are working with J.P. Morgan to connect exceptional professionals with this Principal Architect opportunity at JPMorganChase. You will join the Core Infrastructure Platforms Architecture team and help shape cloud-based technologies, data and API foundations, and identity architectures in a large, regulated financial environment. Our Global Technology Infrastructure group builds high-quality products and solutions in a stable, resilient, and secure operating environment. We offer a competitive total rewards package, with base salary based on role, experience, skill set, and location, and eligible roles may include commission or discretionary incentive compensation. We also provide a range of benefits and programs, including comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching, and more. We value diversity and inclusion and are an equal opportunity employer, including Disability/Veterans. This role is considered a High Risk Role and is subject to enhanced pre-hire screening, including criminal and credit background checks where permitted by law.

last updated 37 week of 2026