Director of Infrastructure Engineering - Firewall Services

JPMorgan Chase & Co.; Plano (TX); On-site; USD 180,000 - 260,000; Full time

Job summary

JPMorganChase is seeking a Director of Infrastructure Engineering for Firewall Services to lead engineering, automation, and operations of the global firewall estate across data centers, campus, and cloud. You will own the strategy, deliver modernization programs, drive ZTNA and SSE initiatives, and build a high-performing team focused on resiliency, security, and compliant operations at scale.

You'll coordinate with Network, Cloud, Cybersecurity, and Identity teams to architect Palo Alto and

Qualifications

• Hands-on delivery of ZTNA/SSE in hybrid environments (on-prem + cloud).
• Experience with firewall policy management platforms (Tufin, AlgoSec, FireMon).
• Knowledge of micro-segmentation and identity-aware access patterns.
• Strong observability tooling experience (Splunk, Elastic, Grafana).
• Relevant certifications (e.g., PCNSE, Fortinet NSE 7/8, AWS/Azure).
• Experience in regulated environments with audit-ready controls.
• Proven track record leading large-scale transformations with reliability improvements.

Responsibilities

• Lead Firewall Services engineering and operations across on-prem and public cloud.
• Own multi-year strategy and roadmap for firewall services and Zero Trust, translating into measurable outcomes.
• Drive large initiatives (platform modernization, migrations, cloud expansion, resiliency uplift).
• Own Palo Alto Networks and Fortinet architecture, lifecycle management, and fleet health.
• Manage firewall policy and rule management at enterprise scale with audits and compliance.
• Build automation and CI/CD to standardize change workflows and policy-as-code/infrastructure-as-code.
• Deliver consistent firewall capabilities across Azure and AWS with centralized governance.
• Define and advance a ZTNA vision integrated with on-prem SSE capabilities.
• Establish logging, telemetry, and monitoring standards for the firewall estate.
• Manage senior stakeholders with governance, reporting, and escalation.
• Develop a high-performing team culture with rigorous operational discipline.

Skills

ZTNA/SSE capabilities

Firewall policy management

Micro-segmentation

Observability tooling

Security certifications

Regulatory/compliance experience

Leadership of transformations

Tools

Tufin

AlgoSec

FireMon

Splunk

Elastic

Grafana

Job description

Job summary

As a Director of Infrastructure Engineering for Firewall Services at JPMorganChase, you'll lead the engineering, automation and operations of one of the largest and most important network security estates in financial services. You'll own the strategy and delivery for firewall platforms across data centers, campus, and public cloud. That covers Palo Alto Networks and Fortinet on-premises, plus Azure and AWS native and virtual firewalls. You'll also shape the firm's move toward Zero Trust Network Access (ZTNA) and integrated Security Service Edge (SSE) capabilities. You'll use advanced technical knowledge to solve complex problems and make independent decisions within general guidelines. You'll also build a high-performing team that executes quickly, works at scale, and holds a very high bar for resiliency, security, and control.

At a world-renowned company like JPMorganChase, you can take the lead in shaping the future of technology, unleash your full potential, and make your mark on the industry.

Job Responsibilities

• Lead Firewall Services engineering and operations across on‑prem and public cloud, partnering with Network, Cloud, Cybersecurity, and Identity teams to deliver secure, reliable, scalable connectivity.
• Own the multi‑year strategy and roadmap for firewall services, segmentation, and Zero Trust enforcement, translating it into measurable outcomes (SLOs, change lead time, automation coverage, policy hygiene, and audit results).
• Drive delivery of large, complex initiatives (platform modernization, migrations, cloud expansion, resiliency uplift), ensuring on‑time execution and controlled risk.
• Own Palo Alto Networks and Fortinet platform architecture, standards, lifecycle management, and global fleet health (HA design, upgrades, capacity, stability, break/fix).
• Run firewall policy and rule management at enterprise scale: intake, design, risk‑based review/approval, recertification, evidence, audits, and continuous cleanup of unused/overly permissive rules.
• Build automation and orchestration at scale using APIs and CI/CD to standardize change workflows, reduce manual effort, and improve speed and quality (policy‑as‑code / infrastructure‑as‑code where applicable).
• Deliver consistent firewall capabilities across Azure and AWS (native and virtual firewall patterns), including centralized governance and repeatable deployment blueprints.
• Define and advance a ZTNA vision and integrate it with on‑prem SSE capabilities and firewall enforcement points to enable identity‑ and application‑aware access.
• Establish logging, telemetry, and monitoring standards for the firewall estate; ensure high‑fidelity data feeds to security operations (SIEM/detection/forensics) and operational dashboards.
• Manage senior stakeholders and ensure delivery aligns to compliance, risk, security, and service requirements, with clear governance, reporting, and escalation.
• Build and develop a high‑performing team and culture: strong operational rigor, fast execution, continuous improvement, and open‑minded, evidence‑based decision making.

Preferred Qualifications, Capabilities, and Skills

• Hands‑on delivery experience implementing ZTNA and/or SSE/SASE capabilities in a hybrid environment (on‑prem + cloud), integrating with firewall policy and identity signals.
• Experience with firewall policy management/analysis platforms (e.g., Tufin, AlgoSec, FireMon) and related governance processes.
• Experience with micro‑segmentation and identity‑aware access patterns (workload tagging, posture/context signals, least privilege).
• Strong observability tooling experience (e.g., Splunk, Elastic, Grafana) including telemetry pipelines and operational analytics.
• Relevant certifications (e.g., PCNSE, Fortinet NSE 7/8, AWS Advanced Networking, Azure Network Engineer).
• Experience operating in highly regulated environments with audit/regulatory engagement and evidence‑ready controls.
• Proven track record leading large‑scale transformations with measurable improvements in reliability, speed of change, and security posture.