Director of Software Engineering - Unified Ingress at JPMorgan Chase, Jersey City, NJ
Director of Software Engineering - Unified Ingress at JPMorgan Chase in Jersey City, NJ. Est. up to $250k. Apply with swipeandhired.
If you are a software engineering leader ready to take the reins and drive impact, we’ve got an opportunity just for you.
As a Director of Software Engineering at JPMorgan Chase within the Corporate & Investment Bank (CIB) Unified Ingress platform, you will be accountable for delivering the centralized ingress layer that handles authentication, authorization, traffic management, and observability for all Corporate & Investment Bank digital channels.. You will manage a team of 20+ engineers across gateway, control plane, identity integration, and platform operations, and owns the delivery plan through to full production adoption and legacy decommissioning. you will consolidate all external traffic through a standardized seven-layer stack (Domain Name System (DNS) steering, Content Delivery Network / Web Application Firewall (CDN/WAF), perimeter, gateway, authentication, authorization, observability) managed via a single control plane. The platform build, the LOB migration program, and production hardening now run in parallel across a team of 20+ engineers spanning gateway, control plane, identity, and platform operations workstreams.
Job responsibilities
- Own the end-to-end delivery plan for the platform - milestones, dependencies, critical path, and committed dates across all workstreams
- Set and enforce engineering standards - code review, testing, documentation, observability-first design, and production readiness criteria
- Chair technical design reviews for the gateway, control plane, and session management components, and make architectural decisions where the team needs a call
- Partner with enterprise Architecture groups to align the platform to reference architectures, secure design approvals, and represent the platform in architecture forums
- Partner with Infrastructure, Network, Cybersecurity, and Identity (AuthE / Sentry) teams to sequence and unblock shared dependencies including DNS, CDN/WAF, certificates, perimeter policy, and identity provider integration
- Drive the LOB migration program - onboarding sequencing, cutover planning, rollback readiness, and decommissioning of legacy authentication Web Agents and Apache proxies
- Run an efficient delivery cadence - sprint planning, backlog grooming, dependency tracking, risk and issue management, and capacity planning against roadmap commitments
Required qualifications, capabilities, and skills
- 12+ years of industry experience, including 4+ years leading engineering teams
- Proven track record managing teams of 15+ engineers across multiple concurrent workstreams, including line management, performance management, hiring, and mentoring
- Strong hands-on technical grounding in ingress and gateway technology - Envoy Proxy (xDS/ADS, ext_authz, HTTP/2, gRPC) and/or Kong API Gateway - sufficient to lead design reviews and challenge implementation decisions credibly
- Working depth in OAuth 2.0 / OpenID Connect (OIDC) / Proof Key for Code Exchange (PKCE) flows, Demonstrating Proof of Possession (DPoP) sender-constrained tokens, mutual Transport Layer Security (mTLS), and session management patterns
- Production Kubernetes experience (Amazon Elastic Kubernetes Service (EKS) and/or on-prem clusters) and GitOps delivery models (ArgoCD, Helm)
- Go development background sufficient to review control-plane code, set engineering standards, and participate in design discussions
- Experience partnering with enterprise Architecture functions - representing designs in architecture review forums, aligning to reference architectures, and negotiating exceptions
- Experience partnering with Infrastructure, Network, and Cybersecurity teams on shared dependencies such as DNS, CDN/WAF, certificate lifecycle, firewall policy, and perimeter change management
Preferred qualifications, capabilities, and skills
- Financial services or other regulated-industry experience, including regulatory and audit engagement
- Experience running a migration program that decommissions legacy infrastructure while traffic is live
- Familiarity with Open Policy Agent (OPA) and policy-as-code authorization models
- Familiarity with OpenTelemetry, Dynatrace, and Splunk Security Information and Event Management (SIEM) toolchains
- Background in identity platforms (ForgeRock, Security Assertion Markup Language (SAML) federation, token exchange patterns)