Security Architect
JP Morgan
Location: Greater London
Job Type: Full time
Posted
We are not your standard bank, we are a house of innovation! We are part of the team that launched Chase as a new UK bank in 2021, and are now starting on a new initiative with big ambitions. More details will be provided during the interview but for now we can enthusiastically say: It’s challenging, it’s high stakes, it’s fun!
Our team is at the heart of building this new venture. We have created a new organisation with diverse professionals that come from a wide set of skills, backgrounds and experiences, including top tech giants, blockchain innovators and FinTech unicorns.
Team members have autonomy to collaborate and work in a cross-functional way. We value your opinion in every matter. Our inclusive culture is hugely important to us and we are looking for intellectually curious, compassionate people who would like to expand their skills whilst working on a new exciting venture for the firm. We are about bringing new products to market that solve real-world problems for real-life customers, not just innovation for the sake of innovation. We are human first; we love working with each other, and we need personal connections and in-person bonding. We find we are happier, more motivated and more productive this way. If this sounds like something that you would like to be a part of we'd encourage you to read on and apply.
What we do
- Use domain modeling techniques to allow us to build best in class business products.
- Structure software so that it is easy to understand, test and evolve.
- Build solutions that avoid single points of failure, using scalable architectural patterns.
- Develop secure code so that our customers and ourselves are protected from malicious actors.
- Promptly investigate and fix issues and ensure they do not resurface in the future.
- Make sure our releases happen with zero downtime for our end-users.
- See that our data is written and read in a way that's optimised for our needs.
- Keep an eye on performance, making sure we use the right approach to identify and solve problems.
- Ensure our systems are reliable and easy to operate.
- Keep us up to date by continuously updating our technologies and patterns.
What we expect
- Identifies problems, proposes solutions, suggests what's best to focus on. Sees themselves as a problem solver. Contributes to the problem at hand, even when outside their area of speciality.
- Co-location is important to us and we are spending 3-4 days a week in the office at this formative stage of the project, but we will review at later phases.
- A desire to teach others and share knowledge. We aren’t looking for hero developers, more for team players.
- Adjusts quickly to changing priorities and conditions. Copes effectively with complexity and change. Learns and unlearns technologies and patterns quickly. Comfortable in uncharted waters.
- Can see the long term. Won’t sacrifice the future for the present. Chooses technologies and approaches based on the end goals.
- High standards. Expects personal performance and team performance to be nothing short of the best.
- Does not cut corners ethically. Earns and maintains trust.
- Does what's best for the company, rather than what's best for themselves or their team.
- Able to take the initiative and shape their own path.
- Has a pragmatic and iterative approach to achieving our long term goals
Leadership Skills
- Collaborate and interact with senior stakeholders across different team
- Influence a wide range of people across larger teams in order to apply security principals
- Understand the impact of decisions, balancing requirements and deciding between approaches
- Be the point of escalation for architects in lower grade roles
- Lead the technical design of systems and services
Technical Skills
- Strong understanding and implementing secure architecture solution in collaboration with the engineering team. Understand and articulate
- the impact of vulnerabilities on existing and future designs and systems, and how easy or difficult it will be to exploit these vulnerabilities
- Design Secure Systems: Design and review system architectures through the development of patterns and principles
- Design and structure micro-services so that they are easy to understand, test and evolve
- Strong understanding and previous experience with cloud ecosystems (GCP and/or AWS)
- Strong knowledge on building scalable solution in the Cloud
- Experience on Influencing decision makers to improve current or feature architecture patterns to meet the needed security controls
- Experience on defining and deploying infrastructure as a code
- Threat modelling or security design review experience
- Experience with Kubernetes, Docker container and preferably GitHub Actions (or other CICD frameworks)
- Experience with modern SDLC methodologies and technologies
Technologies we use
- We primarily use Jvm based languages ( Java/Kotlin) but we also have parts of the platform that use other languages as needed.
- We look to use Open source when it makes sense and build ourselves when it doesn't.
- We are entirely cloud native and want to build a truly multi-cloud solution.
- We look at each problem independently and pick the right technology to solve it.
- We aren’t afraid to try new things but we always remember that we are looking to build something to last, and we focus on solving real world
- problems for real life customers.
How we look after you
Compensation
Our compensation team pay close attention to the external market and endeavour to provide balanced and competitive offers, generally
consisting of a base salary and incentive compensation.
Work type
We prefer to be co-located but we understand that people need flexibility.
Holidays:
27 days / year + bank holidays
Benefits:
Private Healthcare, Pension (matching up to 6% + 6% core contribution from JPM), Gym, Theatre and Entertainment discounts and many other
flexible options.