Software Engineer III - DevSecOps - Kubernetes Security

We are building something different. Born from a bold vision to bring a new kind of banking experience to customers, our team combines the stability and scale of JPMorganChase with the energy and pace of a startup. Here your ideas matter, your growth is supported, and the work you do has a direct impact on millions of people. If you are looking for a place where you can build deep expertise, grow alongside talented engineers, and contribute to something that genuinely matters, this is that place.
As a Software Engineer III at JPMorganChase within the Compliance Platform Engineering team, you sit where security and platform engineering meet. You will work alongside experienced engineers to design, build, and run the guardrails, compliance tooling, and automation that let our product teams move fast without losing control of risk. This is a role for someone who is curious, collaborative, and eager to grow — someone who wants to build deep expertise in cloud and container security while contributing to a team that genuinely values diversity of thought and experience.
Job responsibilities
Develop secure, high-quality production code and participate in code reviews, with guidance and mentorship from senior engineers
Contribute to the design and build of security guardrails and policy-as-code controls that enforce secure configuration at scale
Build and maintain automation that detects, enriches, and reports on security findings and compliance posture across cloud and Kubernetes environments
Embed security and compliance controls into infrastructure-as-code and delivery pipelines so policy is applied consistently and is easy to audit
Identify and automate the remediation of recurring issues to improve the reliability of controls and tooling
Support teams in understanding and prioritizing their vulnerability and compliance findings, and contribute to audit evidence and reporting for risk and governance partners
Leverages enterprise-authorized AI coding assist tools within the work environment to improve code quality, delivery speed, and productivity (e.g., code generation/refactoring, unit test creation, documentation), while validating outputs through peer review, automated testing, and secure coding standards
Applies knowledge of tools within the Software Development Life Cycle toolchain, including enterprise-authorized AI-assisted development and automation capabilities, to improve the value realized by automation
Required qualifications, capabilities, and skills
Formal training or certification on software engineering concepts and proficient applied experience
Hands-on experience with software development, testing, and troubleshooting in a professional or project-based environment
Proficiency, or a strong working foundation, in one or more programming languages such as Go or Python
Foundational understanding of cloud and container technologies, including core Kubernetes concepts
Working understanding of agile methodologies, CI/CD pipelines, and secure development practices
Exposure to infrastructure-as-code and policy-as-code practices using tools such as Terraform, Sentinel, Kyverno, or OPA
Hands-on experience using enterprise-authorized AI-assisted software development tools within the work environment (e.g., for coding, testing, troubleshooting, or documentation) with demonstrated ability to critically evaluate and validate AI-generated outputs
Understanding of responsible AI use in engineering workflows, including data sensitivity considerations, secure handling of inputs/outputs, and adherence to resiliency and security expectations
Preferred qualifications, capabilities, and skills
Exposure to cloud and Kubernetes security concepts such as access control, workload security, network policies, and runtime security
Awareness of GitOps workflows and the Kubernetes operator pattern
Exposure to platform engineering tools such as Crossplane for managing cloud infrastructure through Kubernetes
Awareness of multi-region cloud architectures and their implications for consistent guardrails, compliance, and data residency
Awareness of software supply chain security concepts such as image scanning, trusted registries, and dependency governance
Familiarity with the UK regulatory environment including Financial Conduct Authority and Prudential Regulation Authority requirements
#ICBCareers