Blockchain - Sr Lead Security Engineer

Lead Security Engineer

Take on a crucial role where you'll be a key part of a high-performing team delivering secure software solutions. Make a real impact as you help shape the future of software security at one of the world's largest and most influential companies.

As a Lead Security Engineer at JPMorgan Chase within the CTC Emerging Technologies Security group, you will design, build, and operate an enterprise-grade Digital Asset Custody and Wallet Orchestration Platform. In this role, you will be at the forefront of institutional blockchain infrastructure, responsible for building secure, scalable, and compliant wallet services that power our digital asset operations across multiple blockchain networks. You will work at the intersection of distributed systems engineering, cryptographic security, and financial services technology — building the foundational infrastructure that enables secure key management, programmable transaction policies, and seamless multi-chain wallet capabilities. This is a hands-on engineering role requiring knowledge of blockchain protocols, cloud-native development, and enterprise security practices.

Job Responsibilities

Design, architect, and develop a production-grade digital asset custody & wallet orchestration platform by integrating with wallet infra platforms leveraging their APIs and SDKs for wallet provisioning, key management, and transaction orchestration

Implement secure key management workflows using Multi-Party Computation (MPC) and distributed key generation, ensuring no single point of failure

Build and configure programmable transaction policy engines, including multi-approval workflows, spending thresholds, velocity limits and role-based access controls

Develop multi-chain wallet capabilities supporting blockchain networks such as Ethereum, Bitcoin, Solana, and Polygon through unified API abstractions

Manage the full blockchain transaction lifecycle, including transaction construction, fee estimation, payload signing, broadcast, confirmation tracking, and idempotent retry logic for failed or stuck transactions

Design event-driven and webhook-based architectures to process real-time blockchain notifications such as transaction confirmations, smart contract events

Build secure RESTful APIs and microservices that expose wallet functionality to internal consumers, applying OAuth 2.0, JWT-based authentication, API gateway patterns

Develop and maintain integrations with compliance and risk systems, including transaction monitoring and comprehensive audit trail generation

Implement robust observability across the wallet service stack, including distributed tracing, structured logging, alerting, and dashboarding using tools such as Datadog, Dynatrace, and Splunk

Architect the wallet service for high availability, disaster recovery, and horizontal scalability using container orchestration on AWS (EKS/ECS), infrastructure-as-code (Terraform), and cloud-native resilience patterns

Collaborate with product managers, security teams, and business stakeholders to translate regulatory and business requirements into technical designs and delivery milestones

Add to team culture of diversity, opportunity, inclusion, and respect

Required Qualifications, Capabilities, and Skills

Bachelor's degree in Computer Science, Software Engineering, or a related field, with 7+ years of software development experience, including at least 2 years working with blockchain technologies or digital asset platforms

Strong proficiency in Java/J2EE and/or Python, with hands-on experience building production microservices using frameworks such as Spring Boot, Flask, or FastAPI

Solid understanding of blockchain fundamentals, including transaction models, consensus mechanisms, smart contract interaction (EVM-based and non-EVM), gas and fee management, and block finality across major networks

Working knowledge of cryptographic primitives and protocols relevant to digital asset custody, including Multi-Party Computation (MPC), threshold signatures (TSS), distributed key generation (DKG), elliptic curve cryptography (ECDSA, EdDSA), and HD wallet derivation paths (BIP-32/BIP-44)

Experience designing and implementing policy engines or rule-based authorization frameworks for financial transaction workflows, including multi-signature schemes, approval chains, and configurable spending controls

Proficiency with cloud infrastructure on AWS, including EC2, EKS, Lambda, S3, RDS, IAM, SQS, SNS, API Gateway, and KMS, with experience using Terraform or CloudFormation for infrastructure-as-code

Strong experience with containerization and orchestration using Docker and Kubernetes, including deployment pipelines, and auto-scaling configurations

Experience designing and consuming RESTful APIs, with deep understanding of OAuth 2.0, JWT, TLS/mTLS, certificate management, and API security best practices

Familiarity with event-driven architectures, webhook processing, and asynchronous messaging patterns for handling real-time blockchain state changes and notifications

Experience with relational (Oracle, PostgreSQL) and NoSQL (DynamoDB, MongoDB, Redis) databases, including schema design, query optimization, and data consistency patterns for financial systems

Proficiency with observability and monitoring tools such as Datadog, Dynatrace, Splunk, Grafana, or Prometheus for distributed tracing, log aggregation, and performance monitoring

Solid understanding of agile development methodologies, CI/CD pipelines (Jenkins, GitHub Actions, Spinnaker), and DevOps practices in a large enterprise environment

Preferred Qualifications

Experience building or operating digital asset custody solutions in a regulated financial institution

Experience using AI-assisted development tools (e.g., GitHub Copilot, Claude Code ) to accelerate development and test generation