Lead Infrastructure Engineer

JPMorganChase; Tampa (FL); On-site; USD 120,000 - 180,000; Full time

Job summary

JPMorganChase is seeking an experienced Azure Infrastructure Engineer to design and migrate mainframe-adjacent workloads to cloud, build landing zones, and align platform services for scalable operations.

You will implement IaC with Terraform/Bicep, integrate with CI/CD, automate networking, security, and monitoring, and optimize performance across hybrid connectivity and cloud services.

Qualifications

• Proven extensive experience in cloud infrastructure engineering, with focus on migration from on-prem/mainframe-adjacent workloads to Azure.

Responsibilities

• Partner with application and platform teams to migrate and modernize workloads in Azure.
• Design target-state infrastructure and landing zones for Azure.
• Build and operate Azure core services and networking components.
• Implement IaC using Terraform/Bicep and integrate with CI/CD pipelines.
• Design and troubleshoot hybrid connectivity (ExpressRoute, VPN, vWAN).
• Establish monitoring, SLOs, and runbooks; lead RCA for incidents.
• Apply cloud security best practices and governance controls.

Skills

Azure networking

Hybrid connectivity

IaC (Terraform/Bicep)

CI/CD integration

Troubleshooting

Cross-team collaboration

Network performance tuning

Tools

Terraform

Bicep/ARM

Git workflows

Job description

Job Description

• Partner with application and platform teams to migrate and modernize mainframe-adjacent workloads (e.g., rehost/refactor components, distributed integrations, data movement patterns).
• Design target-state infrastructure and transition architectures for Azure, including landing zones and platform services alignment.
• Build and operate Azure core services: VNETs/subnets, routing, NSGs, Azure Firewall, Private Link, DNS, identity integrations, and resource organization (subscriptions, management groups, tagging).
• Implement Infrastructure as Code (IaC) using Terraform/Bicep and integrate with CI/CD pipelines.
• Hybrid connectivity & network performance
• Design, implement, and troubleshoot on-prem to Azure connectivity using ExpressRoute, VPN, Virtual WAN, and hub/spoke (or vWAN) architectures.
• Configure and validate routing (BGP), MTU/MSS settings, latency/throughput baselines, and failover behavior.
• Tune connectivity performance for critical flows (batch, file transfer, API, messaging, data replication), including bandwidth planning and QoS considerations where applicable.
• Performance tuning & reliability
• Identify and remediate bottlenecks across network, compute, storage, and platform services (e.g., VM sizing, disk throughput/IOPS, load balancing behavior, TCP tuning, connection pooling implications).
• Establish monitoring/observability (Azure Monitor, Log Analytics, Network Watcher, Application Insights where relevant), SLOs, alerting, and runbooks.
• Lead root cause analysis for performance incidents and drive preventative improvements.
• Security, governance, and operational excellence
• Apply cloud security best practices (least privilege, segmentation, private endpoints, key management) and ensure alignment with governance controls.
• Produce clear design documentation, operational procedures, and knowledge transfer.

Key Responsibilities

• Mainframe modernization enablement
  • Partner with application and platform teams to migrate and modernize mainframe-adjacent workloads (e.g., rehost/refactor components, distributed integrations, data movement patterns).
  • Design target-state infrastructure and transition architectures for Azure, including landing zones and platform services alignment.
• Azure infrastructure engineering
  • Build and operate Azure core services: VNETs/subnets, routing, NSGs, Azure Firewall, Private Link, DNS, identity integrations, and resource organization (subscriptions, management groups, tagging).
  • Implement Infrastructure as Code (IaC) using Terraform/Bicep and integrate with CI/CD pipelines.
• Hybrid connectivity & network performance
  • Design, implement, and troubleshoot on-prem to Azure connectivity using ExpressRoute, VPN, Virtual WAN, and hub/spoke (or vWAN) architectures.
  • Configure and validate routing (BGP), MTU/MSS settings, latency/throughput baselines, and failover behavior.
  • Tune connectivity performance for critical flows (batch, file transfer, API, messaging, data replication), including bandwidth planning and QoS considerations where applicable.
• Performance tuning & reliability
  • Identify and remediate bottlenecks across network, compute, storage, and platform services (e.g., VM sizing, disk throughput/IOPS, load balancing behavior, TCP tuning, connection pooling implications).
  • Establish monitoring/observability (Azure Monitor, Log Analytics, Network Watcher, Application Insights where relevant), SLOs, alerting, and runbooks.
  • Lead root cause analysis for performance incidents and drive preventative improvements.
• Security, governance, and operational excellence
  • Apply cloud security best practices (least privilege, segmentation, private endpoints, key management) and ensure alignment with governance controls.
  • Produce clear design documentation, operational procedures, and knowledge transfer.

Required Qualifications

• 10+ years in infrastructure engineering (cloud and/or datacenter), with direct experience supporting modernization or migration from mainframe environments to distributed/cloud platforms.
• Strong, practical experience with Microsoft Azure, especially:
  • Networking (VNET, routing, NSG, Azure Firewall, Private Link, DNS)
  • Connectivity (ExpressRoute, VPN, vWAN, hub/spoke)
  • Compute/storage fundamentals (VMs, disk performance, availability patterns)
• Demonstrated ability to set up, troubleshoot, and performance-tune hybrid connectivity (latency, throughput, packet loss, MTU/MSS, routing, failover).
• Infrastructure as Code experience (Terraform and/or Bicep/ARM) and Git-based workflows.
• Strong troubleshooting skills and ability to work across teams (network, security, app, data).

Preferred / Nice To Have

• Experience with modernization patterns: rehost, replatform, refactor; familiarity with integration with mainframe systems (e.g., batch scheduling, file transfer, messaging, data replication).
• Azure Landing Zone / CAF experience, policy/guardrails, and enterprise subscription design.
• Experience with performance tools and methods (load testing coordination, network path analysis, packet capture interpretation, baseline/SLO definition).
• Containers (AKS), API management, and/or messaging services (Service Bus, Event Hubs) exposure.

ABOUT US

JPMorganChase, one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world's most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management.

We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process.

We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.

JPMorgan Chase & Co. is an Equal Opportunity Employer, including Disability/Veterans

About The Team

J.P. Morgan's Commercial & Investment Bank is a global leader across banking, markets, securities services and payments. Corporations, governments and institutions throughout the world entrust us with their business in more than 100 countries. The Commercial & Investment Bank provides strategic advice, raises capital, manages risk and extends liquidity in markets around the world.