As a Senior Lead Cybersecurity Architect at JPMorgan Chase within the Cybersecurity and Technology Controls’ Firmwide Technology Resiliency (FTR) organization, you are an integral part of a team that works to develop high-quality firmwide cybersecurity and technology resiliency solutions for various business/vendor applications, infrastructures, and platforms. Drive significant business impact through your capabilities and contributions and apply deep technical expertise and problem-solving methodologies to tackle a diverse array of cybersecurity and business continuity challenges that span multiple technology domains.

The ideal candidate has demonstrated experience in at least one or more of the following types of roles, Infrastructure and/or Application engineering architecture or SRE with both Private and Public Cloud, hands-on experience including Design, Assessment, Pattern development, and End-to-End Solution Design.

Job responsibilities

• Work closely with Line of Business architects and Infrastructure Product technologists to develop resilient architectures, design patterns and solutions that cover the Firm’s primary Plausible Disruptive Event scenarios
• Provide guidance and oversight in the development and implementation of resiliency controls to provide continuous monitoring of the Firm’s capability to recover from a disruptive event
• Provide key SME leadership across the technology organization on resiliency programs and initiatives
• Define and implement post-mortem / root-cause analysis processes – develop improved controls and testing scenarios based upon analysis
• Partner with Product teams to ensure that products are designed and implemented in a resilient manner and have validation plans in place including continuous improvement plans
• Partner with the Firmwide Simulation Utility (FSU), the Firmwide Business Resiliency (FBR), and Infrastructure and Application development teams to develop new testing scenarios and capabilities

Required qualifications, capabilities, and skills

• 10+ years of strong hands-on experience, including technical depth in one or more technology areas, such as: Cloud Enablement Design & Migration, Infrastructure Design, Data security, Endpoint/Platform security, Distributed Technologies, Data Replication, Messaging technology, Application Security
• Knowledge of network architecture concepts, including topology, protocols, components, principles, fault domains and failure modes
• Familiarity with Terraform and InfrastructureAsCode principles and tooling
• Skilled in conducting application and infrastructure design reviews/assessment and recognizing weaknesses vulnerabilities in systems
• Knowledge of system and application vulnerabilities e.g. OWASP, NIST, SANS
• Understanding of the MITRE Attack framework
• Experience applying expertise and new methods to develop and deliver solutions for complex architecture problems in one or more technical disciplines
• Hands-on experience of developing, engineering or architecting within a public cloud environment
• Skilled in planning, designing, and implementing enterprise level infrastructure solutions
• Strength in both business and technical requirements development and analysis
• Ability to communicate effectively to both business and technical audiences
• Ability to orchestrate and drive complex strategies and solutions
• Proven ability to build strong, cohesive partnerships with the business, operations, technology & other key stakeholders, including external vendor partners
• Ability to work effectively in a matrix organization

Preferred qualifications, capabilities, and skills

• Prior experience with Data Analysis related to Application Assets and Rules Based control compliance assessment development (Controls as Code)
• Prior experience working with external auditors and regulators would be advantageous
• Some Programming experiences in one or more languages (scripting/functional/imperative -- C/C++, Java, Python, Scala, R, SQL, etc.) would be advantageous
• Accreditation : AWS Solutions Architect, Azure Solutions Architect