Lead Infrastructure Engineer- PKI

Testing Site - JPMC; Plano (TX); On-site; USD 140,000 - 180,000; Full time

Job summary

JPMorganChase is seeking a Lead Infrastructure Engineer within the PKI Engineering Team to drive PKI and TLS initiatives, shaping secure infrastructure across the enterprise.

You will provide technical leadership, collaborate with cross-functional teams, and advance automation and resilience of PKI services and cryptographic operations in a large, dynamic environment.

Qualifications

• Formal training or certification on infrastructure disciplines concepts and 5+ years applied experience.
• 10+ years of experience in software engineering, with a focus on PKI and TLS certificates.
• Proven experience with ADCS, EJBCA, and HSMs (e.g., Safenet/Gemalto).
• Deep knowledge of infrastructure engineering areas such as deployment practices, automation, scaling, resilience, or performance assessments.
• Deep knowledge of cloud infrastructure and multiple cloud technologies with the ability to operate in and migrate across public and private clouds.

Responsibilities

• Applies technical expertise and problem-solving methodologies to projects of moderate scope.
• Provide technical leadership in the design and implementation of PKI solutions using ADCS and EJBCA.
• Collaborate with cross-functional teams to integrate PKI services, focusing on TLS and certificate management.
• Drive automation of PKI processes, including certificate issuance, renewal, and revocation.
• Ensure the security and integrity of TLS certificates and cryptographic operations.
• Monitor and enhance PKI system performance, availability, and resilience
• Drives a workstream or project consisting of one or more infrastructure engineering technologies
• Works with other platforms to architect and implement changes required to resolve issues and modernize the organization and its technology processes
• Executes creative solutions for the design, development, and technical troubleshooting for problems of moderate complexity
• Strongly considers upstream/downstream data and systems or technical implications and advises on mitigation actions
• Adds to team culture of diversity, opportunity, inclusion, and respect

Skills

PKI

TLS certificates

Automation

Python

Cloud infrastructure

Scripting

Education

Infrastructure certifications

Tools

ADCS

EJBCA

HSMs

TLS management

Job description

Assume a vital position as a key member of a high-performing team that delivers infrastructure and performance excellence. Your role will be instrumental in shaping the future at one of the world's largest and most influential companies.

As a Lead Infrastructure Engineer at JPMorganChase within the PKI Engineering Team youapply deep knowledge of software, applications, and technical processes within the infrastructure engineering discipline. Continue to evolve your technical and cross-functional knowledge outside of your aligned domain of expertise.

Job responsibilities

• Applies technical expertise and problem-solving methodologies to projects of moderate scope
• Provide technical leadership in the design and implementation of PKI solutions using ADCS and EJBCA.
• Collaborate with cross-functional teams to integrate PKI services, focusing on TLS and certificate management.
• Drive automation of PKI processes, including certificate issuance, renewal, and revocation.
• Ensure the security and integrity of TLS certificates and cryptographic operations.
• Monitor and enhance PKI system performance, availability, and resilience
• Drives a workstream or project consisting of one or more infrastructure engineering technologies
• Works with other platforms to architect and implement changes required to resolve issues and modernize the organization and its technology processes
• Executes creative solutions for the design, development, and technical troubleshooting for problems of moderate complexity
• Strongly considers upstream/downstream data and systems or technical implications and advises on mitigation actions
• Adds to team culture of diversity, opportunity, inclusion, and respect

Required qualifications, capabilities, and skills

• Formal training or certification on infrastructure disciplines concepts and 5+ years applied experience
• 10+ of experience in software engineering, with a focus on PKI and TLS certificates.
• Proven experience with ADCS, EJBCA, and HSMs (e.g., Safenet/Gemalto).
• Deep knowledge of one or more areas of infrastructure engineering such as hardware, networking terminology, databases, storage engineering, deployment practices, integration, automation, scaling, resilience, or performance assessments
• Deep knowledge of one specific infrastructure technology and scripting languages (e.g., Scripting, Python, etc.)
• Drives to continue to develop technical and cross-functional knowledge outside of the product
• Deep knowledge of cloud infrastructure and multiple cloud technologies with the ability to operate in and migrate across public and private clouds

Preferred qualifications, capabilities, and skills

• Experience with EJBCA and DCLM solutions such as Key Factor / Venafi
• Experience with cloud platforms like AWS, Azure, or Kubernetes.