JPMorgan Chase
Security Engineer III - HSM Management
Plano, TX · Full-time · Posted Oct 28, 2026
- Experience
- Years of experience not specified; posting asks for applied experience in security engineering concepts.
- Education
- Formal training or certification on security engineering concepts; no degree specified.
About the job
Designs, implements, and maintains secure, resilient Hardware Security Module (HSM) and cryptographic infrastructure for critical payment operations.
What you'll do
- Architect, deploy, configure, integrate, and manage HSM infrastructure across Thales and FutureX platforms, including migrations and upgrades.
- Maintain architecture diagrams, system documentation, and operational runbooks; troubleshoot issues and perform root cause analysis.
- Collaborate on infrastructure standards and security controls, and support key management, compliance, risk assessments, audits, and incident response.
What they ask for
- Formal training or certification in security engineering concepts and applied experience; no number of years is specified.
- Hands-on HSM engineering, including highly available architecture, disaster recovery, and business continuity.
- Experience with network security, firewalls, secure room operations, and key ceremonies; strong Linux and Unix administration.
- Experience with Terraform, OpenSSL, certificate-based authentication, architecture documentation, and enterprise-authorized AI tools; ability to validate AI-assisted recommendations.
Nice to have
- Splunk or equivalent monitoring and troubleshooting platforms; payment-process and business-resiliency knowledge.
- Thales or FutureX HSM certifications; knowledge of cryptographic principles, key management, confidential computing, and secure hardware operations.
Tools
Hardware Security Modules, Thales, FutureX, Linux, Unix, Terraform, OpenSSL, Splunk
AI focus
Uses enterprise-authorized AI for threat modeling, vulnerability analysis, security documentation, and AI-assisted security testing and control validation, with output validation and attention to data sensitivity, traceability, and auditability.
Model-written summary · the original posting is authoritative