As a Cloud Resiliency Testing Engineer within the Firmwide Technology Resiliency organization, you will be responsible for partnering with various teams across the firm to develop real-life scenarios and appropriate solutions where gaps exist. You will ensure that resiliency is designed across the life cycle of both infrastructure technology and applications, thereby promoting the timely and successful execution of the firm-wide Recovery and Resiliency strategy within the Cloud and Cyber Testing arenas.
The Firmwide Technology Resiliency organization is tasked with ensuring the Firm's technology estate can maintain effective operations and support the ongoing, critical functioning of Essential Business Services in the face of today's evolving threat landscape. The Firmwide Technology Resiliency team partners across all JPMC Lines of Business and Corporate Functions to drive & deliver the following:
Want more jobs like this?
Get Software Engineering jobs delivered to your inbox every week.
- Proactive, threat-informed testing, simulations, & assessments that validate readiness and drive down residual risk.
- An end-to-end technology resiliency control framework linked to robust governance & reporting structures to ensure appropriate visibility and accountability.
- A multi-year, prioritized resiliency investment strategy focused on uplifting core tooling, capabilities, and controls to enable the Firm's top strategic priorities across key areas such as Public Cloud, Technology Modernization, AI/ML, and ongoing business expansion (among others).
- Proactive threat and vulnerability analyses that ensure the above activities are grounded in the current risk landscape and most plausible disruptive scenarios.
The Cloud Resiliency Testing Engineer, will be responsible for partnering with Cloud, Cybersecurity, Line of Business Resiliency Leads and technologists across the firm in developing real life scenarios and appropriate solutions where gaps exist. Ensuring that resiliency is designed across the life cycle of both infrastructure technology and applications, thereby driving the timely and successful execution of the firm wide Recovery and Resiliency strategy within the Cloud and Cyber Testing arenas.
Job responsibilities
- Providing vision and execution of modernize firm-wide test events
- Acting as the focal point for deploying new testing paradigms across multiple LOBs and all individual groups within Technology (e.g., desktop services, network services, distributed technology, data centers, production services, and risk and security) and their respective organizational technology continuity plan responsibilities.
- Work closely with Line of Business architects and Infrastructure Product technologists to develop resilient architectures, design patterns and solutions that cover the Firm's primary Plausible Disruptive Event scenarios
- Partner with the Firmwide Simulation Utility (FSU), the Firmwide Business Resiliency (FBR), and Infrastructure and Application development teams to develop new testing scenarios and capabilities
- Provide key SME leadership across the technology organization on resiliency programs and initiatives
- Provide guidance and oversight in the development and implementation of resiliency controls to provide continuous monitoring of the Firm's capability to recover from a disruptive event
- Ensure that recovery playbooks are clearly defined, documented, communicated, adhered to, are audit compliant, and support associated application and business recovery objectives
Required qualifications, capabilities, and skills
- Formal training or certification on software engineering concepts and 5+ years applied experience
- Hands-on technical depth in at least one or more of the following types of roles, Infrastructure and/or Application engineering architecture or SRE with both Private and Public Cloud
- Hands-on experience including Design, Assessment, Pattern development, and End-to-End Solution Design.
- Knowledge of network architecture concepts, including topology, protocols, components, principles, fault domains and failure modes
- Current understanding of latest cyber threats, attacking techniques and mitigating strategies
- Knowledge of software-related information technology (IT) security principles and methods (e.g., modularization, layering, abstraction, data hiding, implicitly / minimization...)
- Familiarity with Infrastructure as Code (IaC) principles and tooling (i.e. Terraform)
- Skilled in conducting application and infrastructure design reviews/assessment and recognizing weaknesses vulnerabilities in systems
- Prior experience in disaster and/or cyber recovery planning and testing would be advantageous
- Proven ability to build strong, cohesive partnerships with the business, operations, technology & other key stakeholders, including external vendor partners
Preferred qualifications, capabilities, and skills
- Experience working with external auditors and regulators. Prior experience maintaining regulatory & financial industry engagement to support the strengthening of sector-level resiliency & readiness.
- Experience in one or more programming languages (C/C++, Java, Python, etc.)
- Accreditation/Certifications:
- AWS Certified Practitioner/Cloud Engineer/Software Development Engineer/Cloud Security Engineer/Cloud Security Architect/Application Architect
- Google Certified Professional Cloud Security Engineer and/or Microsoft Certified: Azure Security Engineer Associate
- Certified Kubernetes Security Specialist (CKS)
- CISSP
ABOUT US
JPMorgan Chase & Co., one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world's most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management.
We offer a competitive total rewards package including base salary determined based on the role, experience, skill set, and location. For those in eligible roles, we offer discretionary incentive compensation which may be awarded in recognition of firm performance and individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process.
We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.
JPMorgan Chase is an Equal Opportunity Employer, including Disability/Veterans
ABOUT THE TEAM
The Cybersecurity & Technology Controls group at JPMorgan Chase aligns the firm's cybersecurity, access management, controls and resiliency teams. The group proactively and strategically partners with all lines of business and functions to enable them to design, adopt and integrate appropriate controls; deliver processes and solutions efficiently and consistently; and drive automation of controls. The group's number one priority is to enable the business by keeping the firm safe, stable and resilient.
High Risk Roles (HRR) are sensitive roles within the technology organization that require high assurance of the integrity of staff by virtue of 1) sensitive cybersecurity and technology functions they perform within systems or 2) information they receive regarding sensitive cybersecurity or technology matters. Users in these roles are subject to enhanced pre-hire screening which includes both criminal and credit background checks (as allowed by law). The enhanced screening will need to be successfully completed prior to commencing employment or assignment.