Senior Infrastructure Engineer - Firewall and Cloud Security

JP Morgan Services India Pvt Ltd; Bengaluru; On-site; INR 1,800,000 - 2,600,000; Full time

Job summary

JPMorgan Chase in Bengaluru seeks an Infrastructure Engineer III specializing in firewall and cloud security. You will apply advanced firewall expertise to enterprise environments, orchestrate upgrades, and automate repetitive tasks while maintaining strict security compliance.

You will work with Checkpoint, Fortinet, and Palo Alto platforms, leverage Python/Ansible/Terraform for automation, and participate in 24x7 on-call rotations, audits, and capacity planning in a hybrid cloud setting.

Qualifications

• Formal training or certification in infrastructure engineering concepts and 3+ years applied experience.
• 7+ years of hands-on firewall engineering experience on major platforms (Checkpoint, Fortinet, Palo Alto or cloud firewalls).
• Experience deploying, configuring, maintaining, and decommissioning firewalls in large enterprise networks.
• Expertise in firewall upgrades, migrations, and new implementations.
• Strong knowledge of enterprise security, routing, switching, and load balancing.
• Knowledge of routing protocols such as BGP and OSPF.
• Scripting/automation using Python, Ansible, Terraform, or similar tools.
• Proficiency with Linux and CLI troubleshooting.
• Ability to validate AI-assisted recommendations and ensure security and auditability.

Responsibilities

• Applies technical knowledge to projects of moderate scope with end-to-end monitoring of applications.
• Install, configure, maintain, and decommission Checkpoint, Fortinet, Palo Alto, and cloud firewall solutions.
• Plan and execute firewall upgrades, patching, migrations, and new implementations.
• Administer hardware and virtual firewalls across hybrid cloud environments.
• Implement and enforce security policies and firewall configurations.
• Analyze firewall traffic to troubleshoot connectivity issues across the network.
• Resolve routing and VPN-related problems (BGP/OSPF).
• Develop scripts/automation to streamline firewall deployments and workflows.
• Monitor network activity, support incident response, and assist audits and runbooks.
• Use AI capabilities to accelerate monitoring and capacity analysis with proper validation.

Skills

Firewall engineering

Python scripting

Ansible

Terraform

Linux

BGP/OSPF knowledge

AI-assisted tooling

Education

Infrastructure engineering certification

Tools

Checkpoint

Fortinet

Palo Alto

Cloud firewalls

Job description

Infrastructure Engineer III- Firewall & Cloud Security

You belong to the top echelon of talent in your field. At one of the world's most iconic financial institutions, where infrastructure is of paramount importance, you can play a pivotal role. As an Infrastructure Engineer III at JPMorgan Chase within the Infrastructure Platforms team, you utilize strong knowledge of software, applications, and technical processes within the infrastructure engineering discipline. Apply your technical knowledge and problem-solving methodologies across multiple applications of moderate scope.

Job responsibilities

• Applies technical knowledge and problem-solving methodologies to projects of moderate scope, with a focus on improving data and systems running at scale, and ensures end to end monitoring of applications.
• Install, configure, maintain, and decommission Checkpoint, Fortinet, Palo Alto, and cloud firewall solutions in enterprise environments.
• Plan and execute firewall upgrades, patching, migrations, new implementations, and ongoing maintenance activities.
• Administer hardware appliances and virtual firewalls across hybrid public cloud environments using centralized management servers.
• Implement and enforce security policies, ensuring firewall rules and configurations align with defined security standards.
• Analyze firewall and network traffic to troubleshoot issues and identify connectivity drops along the network path.
• Troubleshoot and resolve routing and connectivity issues, including BGP/OSPF and VPN-related problems.
• Develop scripts/automation to streamline repetitive tasks and automate firewall deployments and operational workflows.
• Monitor network activity, support incident response and investigations, participate in audits/risk assessments, maintain documentation, mentor junior engineers, and support off-hours/weekend and 24x7 on-call rotation.
• Uses enterprise-authorized AI capabilities within the work environment to accelerate monitoring and capacity analysis and documentation, validating outputs and handling operational data according to sensitivity and security requirements.
• Applies reuse-first, AI-assisted approaches to identify recurring capacity risks and improve remediation workflows, ensuring changes are validated and aligned to resiliency and security expectations.

Required qualifications, capabilities, and skills

• Formal training or certification on infrastructure engineering concepts and 3+ years applied experience
• 7+ years of hands-on firewall engineering experience on at least one major platform (Checkpoint, Fortinet, Palo Alto, and/or cloud firewalls)
• Working experience across firewall deployment, configuration, maintenance, and decommissioning in large enterprise networks
• Demonstrated expertise in firewall upgrades, updates, migrations, and new implementations
• Strong knowledge of enterprise security and advanced networking concepts, including routing, switching, and load balancing
• Working knowledge of routing protocols such as BGP and OSPF
• Proven ability to analyze firewall traffic and troubleshoot complex network connectivity issues end-to-end
• Scripting/automation experience using Python, Ansible, Terraform, or similar cloud automation tools
• Proficiency with Linux operating systems and command-line troubleshooting
• Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support infrastructure engineering workflows with strong validation habits and awareness of data sensitivity.
• Ability to review and validate AI-assisted recommendations before implementation, escalating when uncertain and ensuring outcomes align to resiliency, security, and auditability expectations.

Preferred qualifications, capabilities, and skills

• Automate firewall compliance validation, drift detection, and reporting
• Integrate firewall change workflows with CI/CD pipelines and enterprise change-management processes
• Lead security audits, risk assessments, and remediation efforts for network security controls
• Design hybrid cloud network security architectures, segmentation, and policy models
• Develop reusable infrastructure-as-code modules for firewall provisioning and standardized deployments
• Mentor junior engineers and improve operational documentation/runbooks
• Experience Level Senior Level