Firewall & Infrastructure Platform Architect

Testing Site - JPMC; Wilmington (DE); On-site; USD 140,000 - 180,000; Full time

Job summary

JPMorgan Chase is seeking a Lead Infrastructure Engineer – Tier 4 to shape security-first networking across on-prem, cloud, and hybrid environments. You will design and govern enterprise firewall architectures, lead deployment and migration efforts, and drive automation using Terraform, Ansible, and Python.

The role emphasizes Zero Trust, least privilege, and security standards alignment. You will collaborate with IP CPNS teams to deliver scalable, resilient security controls and ensure

Qualifications

• Formal training or certification on software engineering concepts.
• 5+ years of applied experience.
• Experience with next-generation firewalls, segmentation, and vendor platforms (Palo Alto, Fortinet).
• Strong networking skills: TCP/IP, BGP/OSPF, NAT, VPNs, SD-WAN.
• Proficiency with IaC and automation and CI/CD integration.

Responsibilities

• Define enterprise firewall reference architectures and policy frameworks.
• Design scalable NGFW deployments with clustering, load balancing, and decryption.
• Develop multi-cloud patterns (AWS, Azure, GCP) and cloud-native controls.
• Lead deployments, upgrades, and migrations across Palo Alto and Fortinet platforms.
• BuildIaC automation (Terraform, Ansible, Python) for provisioning and compliance checks.
• Define logging, telemetry, and alerting standards and integrate with SIEM/SOAR.
• Partner with Network and SOC teams to optimize performance and reduce rule-set complexity.
• Support audits and regulatory examinations with evidence and reports.

Skills

Firewall engineering

Networking

Cloud security

Security standards

Communication

Tools

Terraform

Ansible

Python

CI/CD

SIEM/SOAR

Job description

JPMorgan Chase is seeking a Lead Infrastructure Engineer – Tier 4 to shape security-first networking across on-prem, cloud, and hybrid environments. You will design and govern enterprise firewall architectures, lead deployment and migration efforts, and drive automation using Terraform, Ansible, and Python.

The role emphasizes Zero Trust, least privilege, and security standards alignment. You will collaborate with IP CPNS teams to deliver scalable, resilient security controls and ensure