Sr. Security Infrastructure Engineer - HSM

Salary: $61,000 - 101,000 per year Requirements:

• We expect formal training or certification in security engineering concepts, along with 5+ years of applied experience.
• We require 7+ years of hands-on engineering experience with Hardware Security Modules, including infrastructure architecture and system design for highly available environments, disaster recovery, and business continuity.
• We look for demonstrated experience using enterprise-authorized AI capabilities in the workplace to support security engineering workflows, with strong validation habits and sensitivity to data handling.
• We need strong Linux and Unix administration skills in enterprise environments, along with solid technical troubleshooting ability.
• We require a strong understanding of cryptographic principles, key management, confidential computing, and secure hardware operations.
• We expect hands-on experience with OpenSSL and certificate-based authentication mechanisms.
• We require expertise in public cloud key management services and cloud-based Hardware Security Module solutions.
• We look for proficiency in designing and documenting infrastructure architectures using industry-standard tools and methods.
• We require experience with infrastructure automation tools such as Terraform for securing and scaling environments.
• We expect the ability to review and validate AI-assisted security recommendations before adoption, escalating uncertainty and ensuring outcomes align with security, resiliency, and auditability expectations.
• Preferred: experience with network security, firewalls, secure room operations, and key ceremonies.
• Preferred: hands-on experience with Splunk or a similar platform for infrastructure monitoring and troubleshooting.
• Preferred: strong domain knowledge of payment processes and business resiliency as applied to infrastructure design.
• Preferred: relevant Hardware Security Module platform certifications such as Thales or FutureX credentials.
• Preferred: familiarity with broader cybersecurity frameworks and how they apply to cryptographic and payment infrastructure environments.
• Preferred: ability to influence technical direction and drive alignment across organizational boundaries in a large, complex enterprise.

• We lead the architecture, design, and documentation of complex Hardware Security Module and cryptographic infrastructure, ensuring alignment with business, resiliency, and security requirements.
• We use enterprise-authorized AI capabilities in the work environment to accelerate security risk analysis and documentation, while validating outputs and handling sensitive data appropriately.
• We design and implement Hardware Security Module solutions, including deployment, configuration, integration, and full lifecycle management across Thales and FutureX platforms.
• We develop and maintain detailed architectural diagrams, system documentation, and operational runbooks to support operational excellence and knowledge continuity.
• We collaborate with cross-functional teams to define infrastructure standards, best practices, and security controls aligned with firm-wide policies and industry regulations.
• We oversee the migration, upgrade, and consolidation of Hardware Security Module infrastructure, minimizing disruption and maximizing security during transitions.
• We provide expert guidance on cryptographic key management, secure storage, confidential computing, and compliance with standards including Payment Card Industry Data Security Standard and Federal Information Processing Standards.
• We troubleshoot and resolve infrastructure and Hardware Security Module issues, perform root cause analysis, and implement corrective actions using monitoring tools.
• We participate in risk assessments, audits, and incident response activities related to infrastructure and Hardware Security Module environments.
• We apply reuse-first, AI-assisted practices within SDLC and toolchain routines to strengthen security testing and control validation, ensuring traceability, auditability, and alignment with resiliency and security expectations.
• We apply domain knowledge of payment processes and business resiliency to infrastructure design and operational decisions.

• AI
• Cloud
• Hardware
• Support
• Linux
• Marketing
• Network
• Security
• Splunk
• Terraform
• Unix

More:

We are JPMorganChase, one of the oldest financial institutions, delivering innovative financial solutions to millions of consumers, small businesses, and many of the worlds most prominent corporate, institutional, and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years, and we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing, and asset management. We offer a competitive total rewards package, with base salary determined by role, experience, skill set, and location, and eligible roles may also include commission-based pay and/or discretionary incentive compensation. We provide a range of benefits and programs, including comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, and financial coaching. We value diversity and inclusion and are an equal opportunity employer, including Disability/Veterans. This role sits within our Corporate Functions team, where our professionals support areas from finance and risk to human resources and marketing, helping set up our businesses, clients, customers, and employees for success.

last updated 37 week of 2026