Lead Infrastructure Engineer : Neovest

JPMorgan Chase & Co.; Utah; Sur place; USD 140 000 - 210 000; Plein temps

Résumé du poste

JPMorganChase seeks a Lead Infrastructure Engineer to advance our Neovest platform, applying deep infrastructure and security expertise to design, deploy, and optimize complex environments. You will drive cross-team collaboration, validate AI-driven recommendations, and ensure resiliency across production and non-production systems.

With 5+ years in infrastructure domains, you will navigate cloud ecosystems, vendor tools, and security controls while delivering scalable solutions and robust

Qualifications

• Formal training or certification on infrastructure engineering concepts and 5+ years applied experience.
• Deep knowledge of infrastructure engineering areas such as hardware, networking, databases, storage, deployment, automation, scaling, platform engineering, network engineering, and cybersecurity controls.
• Experience using enterprise-authorized AI capabilities within the work environment to support infrastructure workflows with strong validation and data-sensitivity awareness.
• Ability to review and validate AI-assisted recommendations before implementation, escalating when uncertain and ensuring resiliency, security, and auditability.
• Deep knowledge of one specific infrastructure technology and scripting languages.
• Deep knowledge of cloud infrastructure and multiple cloud technologies with the ability to operate in and migrate across public and private clouds.
• Five or more years of experience across platform engineering, network engineering, network security, infrastructure operations, cybersecurity controls, or a closely related discipline.
• Broad infrastructure and security foundation: networking, security practices, IAM, DLP, vulnerability management, SIEM, WAF, and resiliency.
• Supported enterprise application platforms and production deployments across the service lifecycle with rollback-aware changes; documented and tracked work in Jira/Confluence; and communicated risk clearly.

Responsabilités

• Applies technical expertise to infrastructure projects of moderate scope, developing creative design and troubleshooting solutions.
• Uses enterprise AI capabilities to accelerate infrastructure analysis, design documentation, and automation with proper validation.
• Drives infrastructure workstreams across technologies, partnering to architect changes and modernize processes.
• Executes deployments, rollouts, configuration changes, restarts, and releases across environments with validation and monitoring plans.
• Administers and troubleshoots firewalls, VPN, DNS, and hybrid networking across data centers and cloud environments (AWS, GCP, Azure).
• Reviews and remediates vulnerabilities, security findings, DLP alerts, and governance documentation with evidence and runbooks.
• Manages and supports user endpoints and VDI environments including M365, Intune, and WorkSpaces.

Connaissances

Infrastructure engineering

Cloud computing

Networking

Security controls

AI-assisted tooling

Formation

Bachelor's degree

Outils

M365 Admin

Wiz

CrowdStrike

Tanium

Tenable

SonarQube

Veracode

JFrog

CyberArk

Microsoft Defender

Broadcom DLP

NG-SIEM

SolarWinds

AWS WorkSpaces

Azure

GCP

Description du poste

Assume a vital position as a key member of a high-performing team that delivers infrastructure and performance excellence. Your role will be instrumental in shaping the future at one of the world's largest and most influential companies.

As a Lead Infrastructure Engineer at JPMorganChase within Neovest, you apply deep knowledge of software, applications, and technical processes within the infrastructure engineering discipline. Continue to evolve your technical and cross-functional knowledge outside of your aligned domain of expertise.

Job responsibilities

• Applies technical expertise and structured problem-solving to infrastructure projects of moderate scope, developing creative solutions for design, implementation, and technical troubleshooting.
• Uses enterprise-authorized AI capabilities to accelerate infrastructure analysis, design documentation, and automation, validating outputs and handling operational data in accordance with security and sensitivity requirements.
• Drives infrastructure engineering workstreams across multiple technologies, partnering with other platforms to architect and implement changes, modernize technology processes, and address upstream and downstream technical dependencies.
• Executes platform deployments, software rollouts, configuration changes, controlled restarts, and release activities across production and non-production environments, including implementation, rollback, validation, and monitoring plans.
• Administers and troubleshoots Palo Alto firewalls, Panorama, GlobalProtect VPN, Cisco, F5 BIG-IP, DNS, network access controls, and hybrid networking environments across colocation data centers, AWS, GCP, and Azure.
• Reviews and drives remediation of vulnerabilities, application-security findings, DLP alerts, endpoint issues, cloud posture findings, and security-monitoring events while maintaining required evidence, diagrams, runbooks, and governance documentation.
• Manages and supports user endpoint devices, applications, and virtual desktop environments, including M365, Intune, Company Portal, thin clients, AWS WorkSpaces, VDI provisioning, standardization, and ongoing support.

Required qualifications, capabilities, and skills

• Formal training or certification on infrastructure engineering concepts and 5+ years applied experience
• Deep knowledge of one or more areas of infrastructure engineering such as: hardware, networking terminology, databases, storage engineering, deployment practices, integration, automation, scaling, platform engineering, network engineering, infrastructure operations, cybersecurity controls.
• Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support infrastructure engineering workflows with strong validation habits and awareness of data sensitivity.
• Ability to review and validate AI-assisted recommendations before implementation, escalating when uncertain and ensuring outcomes align to resiliency, security, and auditability expectations.
• Deep knowledge of one specific infrastructure technology and scripting languages
• Deep knowledge of cloud infrastructure and multiple cloud technologies with the ability to operate in and migrate across public and private clouds
• Five or more years of experience across platform engineering, network engineering, network security, infrastructure operations, cybersecurity controls, or a closely related discipline.
• Broad infrastructure and security foundation: networking (IPv4/IPv6, TCP/IP, DNS/DHCP, NAT, VLANs/VPNs, ACLs, routing/switching, load balancing, cloud networking) plus core security/resiliency practices (IAM/privileged access, DLP, vulnerability management, application security, SIEM logging, endpoint hardening, WAF, asset management, technology resiliency).
• Supported enterprise application platforms and production deployments across the service lifecycle, delivering rollback-aware changes; documented and tracked work in Jira/Confluence (or equivalent); leveraged enterprise-authorized AI with strong validation and data-sensitivity; and communicated clearly to troubleshoot calmly and explain risk to technical and non-technical audiences.

Preferred qualifications, capabilities, and skills

• Experience in regulated financial services, trading, market data, or other high-availability environments.
• Hands-on experience with M365 Administration, Wiz, CrowdStrike, Tanium, Tenable, SonarQube, Veracode, JFrog suite, CyberArk, Microsoft Defender, Broadcom DLP, NG-SIEM, SolarWinds, AWS (Workspaces), Azure, and GCP.
• Experience automating infrastructure and control activities with Python, Ansible, Terraform, vendor APIs, shell scripting, or deployment tooling.
• Experience with Kubernetes, NGINX, cloud load balancers, infrastructure as code, CI/CD, or modern platform engineering practices.
• Experience with datacenter migrations, circuit transitions, service decommissioning, disaster recovery, and resilience improvements.
• Relevant certifications such as CISSP, CISM, CRISC, CCNP, PCNSE, Security+, or cloud networking certifications.
• Production experience with next-generation firewalls and centralized policy management, preferably Palo Alto Networks and Panorama.