Lead Software Engineer - Cloud Proxy

Take on a crucial role where you'll be a key part of a high-performing team delivering secure, scalable cloud network perimeter solutions. Make a real impact as you help shape the future of cloud egress security at one of the world's largest and most influential companies.

As a Lead Security Engineer at JPMorgan

Chase within the Cloud Edge Proxy team, you will help design, secure, and operate a critical cloud network perimeter platform that governs outbound cloud traffic at enterprise scale. You will work across engineering and business teams to ensure cloud connectivity is secure, reliable, and compliant - while enabling application teams to onboard and operate confidently.

• Designs, develops, and maintains secure software solutions for cloud network perimeter infrastructure, writing high-quality production code and reviewing code written by others across the full development lifecycle

• Uses enterprise-authorized AI capabilities within the work environment to accelerate threat modeling, vulnerability analysis synthesis, and security documentation, validating outputs and ensuring sensitive data is handled appropriately.

• Builds and manages infrastructure-as-code (IaC) to automate the provisioning, configuration, and scaling of cloud networking and proxy infrastructure in a consistent, repeatable, and auditable manner

• Manages and operates enterprise-scale proxy infrastructure, ensuring high availability, performance, and security of egress traffic controls across cloud environments

• Develops and maintains automation tooling to streamline network configuration, proxy onboarding workflows, certificate management, and policy enforcement

• Troubleshoots complex network and proxy connectivity issues across cloud environments, applying structured diagnostic approaches to identify root cause and drive resolution

• Collaborates with application teams, platform engineers, and architects to design secure and scalable network connectivity patterns that meet both technical and business requirements

• Minimizes security vulnerabilities by following industry insights and evolving best practices, continuously improving network perimeter controls and validating their effectiveness

• Adds to team culture of diversity, opportunity, inclusion, and respect

• Applies reuse-first, AI-assisted practices within SDLC/toolchain routines to strengthen security testing and control validation, ensuring traceability/auditability and alignment to resiliency and security expectations.

• Formal training or certification in software engineering, security engineering, or network engineering concepts and 5+ years of applied experience in one or more of these disciplines

• Strong Infrastructure-as-Code (IaC) experience using Terraform to provision and manage cloud networking and proxy infrastructure (e.g., reusable modules, remote state management, CI/CD integration, drift detection, and change controls)

• Strong Python experience building automation for cloud infrastructure and networking workflows, including authoring AWS Lambda functions and using boto3 to automate AWS operations.

• Hands‑on AWS experience implementing and troubleshooting core services across networking, compute, security, and observability (e.g., AWS Lambda, EC2, VPC, Transit Gateway, Private Link/VPC endpoints, NLB, Route 53, Cloud Watch, IAM). .

• Knowledge of security best practices and relevant regulatory expectations, with experience evolving controls and implementing mechanisms to measure/validate control effectiveness over time

• Ability to review and validate AI‑assisted code/security recommendations before adoption, escalating uncertainty and ensuring outcomes align to security, resiliency, and auditability expectations.

• Good communication skills, teamwork capabilities, and a self‑learning attitude

• Demonstrated experience using enterprise‑authorized AI capabilities to accelerate security engineering workflows (e.g., threat modeling, vulnerability analysis synthesis, documentation), with strong validation habits and appropriate handling of sensitive data

• Experience with…