Lead Infrastructure Engineer : Neovest

JPMorgan Chase & Co.; Pleasant Grove (UT); Hybrid; USD 140,000 - 190,000; Full time

Job summary

JPMorganChase, a leading global financial services company, seeks a Lead Infrastructure Engineer to drive infrastructure excellence within Neovest. You will apply deep knowledge of software, infrastructure, and security controls to design, deploy, and optimize complex platforms.

The role emphasizes cross-functional collaboration, governance, and risk management while delivering scalable, reliable services across on-prem and cloud environments.

Qualifications

• Formal training or certification in infrastructure engineering concepts.
• 5+ years of applied infrastructure engineering experience.
• Deep knowledge in hardware, networking, storage, deployment, automation, and platform engineering.
• Experience using enterprise AI to support infra workflows with validation and data sensitivity awareness.
• Ability to review AI-assisted recommendations for resiliency and security.

Responsibilities

• Applies technical expertise to infrastructure projects of moderate scope with design and troubleshooting solutions.
• Uses enterprise AI to accelerate analysis, documentation, and automation while handling sensitive data.
• Drives infra workstreams across multiple technologies; partners to architect changes and modernize processes.
• Executes platform deployments, software rollouts, config changes, restarts, and release activities with validation and monitoring plans.
• Administers and troubleshoots firewalls, VPNs, networking gear, and hybrid cloud environments across data centers and cloud providers.
• Reviews remediation of vulnerabilities, security findings, DLP alerts, endpoint issues, and cloud posture events with governance documentation.
• Manages and supports user endpoints, apps, and virtual desktops, including M365 and VDI provisioning.

Skills

Infrastructure engineering

Cloud infrastructure

Networking

Security controls

AI usage in infra

Scripting

Tools

M365 Administration

Wiz

CrowdStrike

Tanium

Tenable

SonarQube

Veracode

JFrog Suite

CyberArk

Microsoft Defender

Broadcom DLP

NG-SIEM

SolarWinds

AWS WorkSpaces

Azure

GCP

Kubernetes

NGINX

Job description

Assume a vital position as a key member of a high-performing team that delivers infrastructure and performance excellence. Your role will be instrumental in shaping the future at one of the world's largest and most influential companies.

As a Lead Infrastructure Engineer at JPMorganChase within Neovest, you apply deep knowledge of software, applications, and technical processes within the infrastructure engineering discipline. Continue to evolve your technical and cross-functional knowledge outside of your aligned domain of expertise.

Job responsibilities

• Applies technical expertise and structured problem-solving to infrastructure projects of moderate scope, developing creative solutions for design, implementation, and technical troubleshooting.
• Uses enterprise-authorized AI capabilities to accelerate infrastructure analysis, design documentation, and automation, validating outputs and handling operational data in accordance with security and sensitivity requirements.
• Drives infrastructure engineering workstreams across multiple technologies, partnering with other platforms to architect and implement changes, modernize technology processes, and address upstream and downstream technical dependencies.
• Executes platform deployments, software rollouts, configuration changes, controlled restarts, and release activities across production and non-production environments, including implementation, rollback, validation, and monitoring plans.
• Administers and troubleshoots Palo Alto firewalls, Panorama, GlobalProtect VPN, Cisco, F5 BIG-IP, DNS, network access controls, and hybrid networking environments across colocation data centers, AWS, GCP, and Azure.
• Reviews and drives remediation of vulnerabilities, application-security findings, DLP alerts, endpoint issues, cloud posture findings, and security-monitoring events while maintaining required evidence, diagrams, runbooks, and governance documentation.
• Manages and supports user endpoint devices, applications, and virtual desktop environments, including M365, Intune, Company Portal, thin clients, AWS WorkSpaces, VDI provisioning, standardization, and ongoing support.

Required qualifications, capabilities, and skills

• Formal training or certification on infrastructure engineering concepts and 5+ years applied experience
• Deep knowledge of one or more areas of infrastructure engineering such as: hardware, networking terminology, databases, storage engineering, deployment practices, integration, automation, scaling, platform engineering, network engineering, infrastructure operations, cybersecurity controls.
• Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support infrastructure engineering workflows with strong validation habits and awareness of data sensitivity.
• Ability to review and validate AI-assisted recommendations before implementation, escalating when uncertain and ensuring outcomes align to resiliency, security, and auditability expectations.
• Deep knowledge of one specific infrastructure technology and scripting languages
• Deep knowledge of cloud infrastructure and multiple cloud technologies with the ability to operate in and migrate across public and private clouds
• Five or more years of experience across platform engineering, network engineering, network security, infrastructure operations, cybersecurity controls, or a closely related discipline.
• Broad infrastructure and security foundation: networking (IPv4/IPv6, TCP/IP, DNS/DHCP, NAT, VLANs/VPNs, ACLs, routing/switching, load balancing, cloud networking) plus core security/resiliency practices (IAM/privileged access, DLP, vulnerability management, application security, SIEM logging, endpoint hardening, WAF, asset management, technology resiliency).
• Supported enterprise application platforms and production deployments across the service lifecycle, delivering rollback-aware changes; documented and tracked work in Jira/Confluence (or equivalent); leveraged enterprise-authorized AI with strong validation and data-sensitivity; and communicated clearly to troubleshoot calmly and explain risk to technical and non-technical audiences.

Preferred qualifications, capabilities, and skills

• Experience in regulated financial services, trading, market data, or other high-availability environments.
• Hands-on experience with M365 Administration, Wiz, CrowdStrike, Tanium, Tenable, SonarQube, Veracode, JFrog suite, CyberArk, Microsoft Defender, Broadcom DLP, NG-SIEM, SolarWinds, AWS (Workspaces), Azure, and GCP.
• Experience automating infrastructure and control activities with Python, Ansible, Terraform, vendor APIs, shell scripting, or deployment tooling.
• Experience with Kubernetes, NGINX, cloud load balancers, infrastructure as code, CI/CD, or modern platform engineering practices.
• Experience with datacenter migrations, circuit transitions, service decommissioning, disaster recovery, and resilience improvements.
• Relevant certifications such as CISSP, CISM, CRISC, CCNP, PCNSE, Security+, or cloud networking certifications.
• Production experience with next-generation firewalls and centralized policy management, preferably Palo Alto Networks and Panorama.