Sr Lead Software Engineer- Java Full Stack/ IAM

J.P. Morgan’s Commercial & Investment Bank is a global leader across banking, markets, securities services and payments. Corporations, governments and institutions throughout the world entrust us with their business in more than 100 countries. The Commercial & Investment Bank provides strategic advice, raises capital, manages risk and extends liquidity in markets around the world. 

As a Sr Lead Software Engineer in our Identity and Access Management team, you will drive a team of innovators and technologists to deliver next-generation authentication and authorization solutions. You will set strategic direction, solve complex challenges, and inspire your team to embrace leading-edge technologies and methodologies. Your leadership will help us deliver secure, high-quality outcomes that support our business and clients. You'll collaborate with global teams and harness the talents of technologists from around the world. Your work will have a direct impact on our technology and the clients we serve.

Job Responsibilities

• Lead and mentor a team to deliver high-quality, innovative identity and access management solutions.

• Modernize authentication and authorization platforms across multiple channels and domains, leveraging **PingFederate, Transmit Security, and ForgeRock

• Evaluate and prototype internal and vendor solutions for user authentication. Integrate anti-fraud and biometric authentication solutions into customer-facing applications.

•  Utilize APIs and SDKs for both niche solutions and open standards.

• Drive team adoption of enterprise-authorized AI-assisted engineering practices within the work environment to improve code quality, delivery speed, and operational outcomes (e.g., AI-assisted code review/refactoring, test strategy acceleration, incident/root-cause analysis support), while establishing consistent validation standards (secure coding, peer review, automated testing) and promoting reuse of effective patterns across the team.

• Apply knowledge of tools within the Software Development Life Cycle toolchain, including enterprise-authorized AI-assisted development and automation capabilities, to improve the value realized by automation.

• Identify opportunities to eliminate or automate remediation of recurring issues to improve overall operational stability of software applications and systems.

• Lead evaluation sessions with external vendors, startups, and internal teams to drive outcomes-oriented probing of architectural designs, technical credentials, and applicability for use within existing systems and information architecture.

• Design, develop, and maintain custom solution adapters, authentication nodes, and orchestration logic that integrate with external data sources and endpoints.

• Design, develop, and maintain the supporting APIs and backend services behind the IAM platforms, including secure service-to-service integration.

• Build and maintain IAM web and UI components that invoke platform authentication flows.

• Design supporting data schemas, connection pooling, and failover for authentication and token storage.

Required qualifications, capabilities, and skills

- Formal training or certification on software engineering concepts and 10+ years applied experience.
- Hands-on experience with **PingFederate, Transmit Security/ ForgeRock** platforms for authentication and authorization.
- Ability to lead and guide a small team to deliver innovative solutions.
- Understanding of application and data architecture disciplines.
- Knowledge of architecture, design, and business processes.
- Ability to work collaboratively in diverse, global teams.
- Experience with authentication and modern authentication practices and solutions (such as OAuth2/OpenID Connect, SAML, Facebook Login, Google Sign-In).
- Proficiency in Java, Spring Boot, React.
- Knowledge of RESTful API design and development, including secure token-based authentication and authorization.
- Knowledge of AWS, Kubernetes; advanced in one or more programming language(s).
- Hands-on experience developing and supporting Java (Spring Boot) microservices in an enterprise environment.
- Cloud-native experience (AWS, Azure, or GCP).
- Experience developing and consuming secure REST APIs and backend services supporting IAM platforms, including token validation and service-to-service integration.
- Proficiency in Java, including building applications that integrate with identity providers.
- Flexibility to work across disparate technology stacks and applications.
- Demonstrated experience leading effective use of approved AI-assisted software development tools (e.g., for coding, code review, test acceleration, troubleshooting) with the ability to set team expectations for validating AI outputs for correctness, performance, and security.
- Strong understanding of responsible AI use in engineering workflows, including data sensitivity considerations, secure handling of inputs/outputs, and adherence to resiliency and security expectations; experience coaching engineers on safe, compliant adoption within delivery practices.

Preferred qualifications, capabilities, and skills

- Experience integrating anti-fraud and biometric authentication solutions.
- Familiarity with open standards and security protocols.
- Strong analytical and problem-solving skills.
- Excellent communication and interpersonal abilities.
- Passion for mentoring and developing others.