Lead Software Engineer - Proxy/SSE Network Security

As a Lead Software Engineer at JPMorgan Chase within the Corporate Sector - Enterprise Technology, you are an integral part of an agile team that works to enhance, build, and deliver trusted market-leading technology products in a secure, stable, and scalable way. As a core technical contributor, you are responsible for conducting critical technology solutions across multiple technical areas within various business functions in support of the firm’s business objectives.

Job responsibilities

• Executes creative Network security software solutions, design, development, and technical troubleshooting with ability to think beyond routine or conventional approaches to build solutions or break down technical problems.
• Develops secure high-quality production code, and reviews and debugs code written by others.
• Architect and implement Zero Trust Network Access (ZTNA) patterns for user-to-app and user-to-internet access, minimizing implicit trust and reducing lateral movement.
• Build and operate an Identity-Aware Proxy (IAP) / policy enforcement point for web and application access, enforcing identity, device, and context-based policy decisions.
• Implement or integrate Secure Gateway / Secure Web Gateway (SWG) capabilities (URL filtering, TLS inspection where approved, malware protection, sandboxing, egress controls, DNS security).
• Experience with other SaaS based Secure Gateway vendor e.g. Zscaler, Netskope, Palo Alto, Broadcom ProxySG etc.
• Drives team adoption of enterprise-authorized AI-assisted engineering practices within the work environment to improve code quality, delivery speed, and operational outcomes.
• Applies knowledge of tools within the Software Development Life Cycle toolchain, including enterprise-authorized AI-assisted development and automation capabilities, to improve the value realized by automation.
• Good understanding of network infrastructure, network security concepts and application layer protocols (http/https) and vulnerability mitigation.
• Identifies opportunities to eliminate or automate remediation of recurring issues to improve overall operational stability of software applications and systems.
• Own the US perimeter, proxy, and SSE/SASE engineering roadmap and execution, including intake, prioritization, dependency management, delivery governance, and stakeholder alignment across cybersecurity, network services, operations, and application and platform teams.
• Define and operationalize standards, reference architectures, and reusable engineering patterns for perimeter and egress controls.
• Provide engineering leadership across edge and connectivity adjacencies that materially impact perimeter posture and service delivery.
• Establish and run governance mechanisms that accelerate remediation while preserving strong controls.
• Drive operational excellence at scale for perimeter, proxy, and SSE services in the US.

Required qualifications, capabilities, and skills

• 5+ years in network security / SASE/ SSE/ identity security / security engineering (or equivalent depth).
• Strong understanding of Zero Trust principles, policy-based access, segmentation, and secure egress.
• Hands-on experience with proxy/gateway architectures and secure internet access controls.
• Deep knowledge of SAML, OIDC, OAuth 2.0 concepts, JWT.
• Demonstrated experience leading effective use of approved AI-assisted software development tools.
• Strong understanding of responsible AI use in engineering workflows.
• Demonstrated experience delivering regional execution ownership in the US for infrastructure and/or security platforms.
• Experience supervising engineers and delivering cross-team remediation, modernization, and platform programs.
• Strong knowledge of network and perimeter security architecture and controls.
• Experience designing, delivering, or operating proxy and/or SSE capabilities at enterprise scale.
• Strong experience translating security requirements into deployable edge and perimeter-adjacent connectivity patterns.
• Working knowledge of interconnect and colocation connectivity models and cloud adjacency patterns.

Preferred qualifications, capabilities, and skills

• Experience integrating US delivery requirements and stakeholder needs into global standards.
• Experience leading AI-threat-informed remediation programs.
• Experience building enterprise-scale governance programs for security engineering.
• Experience with large-scale operations for externally facing or security enforcement services.
• Experience designing and operating hybrid edge architectures and cloud interconnect patterns across multiple cloud providers.
• Security certifications such as CISSP, CCSP, or comparable credentials.