Job Description
At JPMorganChase, we build the technology that powers one of the world's most trusted financial institutions and we're looking for engineers who want to make a real impact. You'll join a collaborative, people-first team where curiosity, continuous learning, and technical excellence are part of everyday work. If you're passionate about security in containerised, Kubernetes, and cloud-native environments, this is your opportunity to grow your career while solving challenges that matter at scale.
As a Software Engineer III at JPMorganChase within the International Consumer Bank, you serve as a hands-on member of our Cloud Platform Engineering tribe in the Compliance Platform Engineering squad, which owns the security controls, compliance tooling, and guardrails underpinning the Chase UK cloud platform. Focused on Kubernetes security, you will build the tooling and automation that gives the business continuous visibility of its security posture, help design and enforce guardrails, and support teams in understanding and remediating their exposure.
Job responsibilities
Help define and enforce Kubernetes security controls across our clusters - access controls, workload security standards, network policies and industry benchmarks
Build and maintain automation to detect, enrich and report on security findings and compliance posture across our Kubernetes and cloud environments
Help implement security guardrails and policy-as-code controls to enforce secure configuration at scale
Assess and track vulnerability findings across Kubernetes clusters and workloads, providing context to help teams prioritise remediation
Contribute to software supply chain security practices such as container image scanning, trusted registries, and dependency analysis
Embed security guardrails into infrastructure-as-code and automated delivery pipelines so that policy is applied consistently and is easy to audit
Use enterprise-authorised AI coding assist tools to improve code quality, delivery speed, and productivity, validating outputs through peer review, automated testing, and secure coding standards
Required qualifications, capabilities and skills
Formal training or certification on software engineering concepts and proficient applied experience
Working knowledge of a major cloud provider (AWS, GCP or Azure) and its core security services, such as audit logging, threat detection, vulnerability scanning and compliance posture management
Hands-on experience securing Kubernetes and container orchestration in production, including access control, secrets management, workload security, network policies and hardening against benchmarks such as the CIS Kubernetes Benchmark
Hands-on experience with a managed Kubernetes service - we run on AWS EKS, and equivalent experience with Google GKE or Azure AKS is equally welcome
Exposure to infrastructure-as-code and/or policy-as-code practices using tools such as Terraform, Sentinel, Kyverno or OPA
Hands-on experience building automation or tooling with the Go programming language (experience with other languages such as Python is also valuable)
Experience with GitOps and CI/CD delivery tooling such as Argo CD and GitHub Actions for declarative, auditable deployments
An ability to critically evaluate and validate the output of enterprise-authorised AI-assisted development tools, with an understanding of responsible AI use including data sensitivity and secure handling of inputs and outputs
Preferred qualifications, capabilities, and skills
Certified Kubernetes Security Specialist (CKS), a recognised cloud security certification, or equivalent demonstrable knowledge of Kubernetes and cloud security across cluster and system hardening, workload security, and runtime security
Exposure to platform engineering tools such as Crossplane for managing cloud infrastructure through Kubernetes
Knowledge of software supply chain security concepts including software bill of materials (SBOM) and dependency governance
Awareness of multi-region cloud architectures and their implications for consistent guardrails, compliance, and data residency
Familiarity with the UK regulatory environment including Financial Conduct Authority and Prudential Regulation Authority requirements
#ICBCareer