Remote Access Lead Infrastructure Engineer

JPMorgan Chase & Co.; Jersey City (NJ); Remote; USD 140,000 - 190,000; Full time

Job summary

JPMorganChase is seeking a Remote Access Lead Infrastructure Engineer to design, build, and operate global remote access infrastructure for a regulated enterprise. You will own reference architectures, enforce standards, and drive automation across regions.

The role requires deep experience with VDIs, application delivery controllers, and secure access platforms, plus strong scripting and cloud skills. It is a remote-capable, international-role in the Corporate Sector- Employee Platforms group.

Qualifications

• Formal training or certification on infrastructure engineering concepts and 5+ years applied experience.
• Experience engineering enterprise remote access, application delivery, or VDI at global scale in a regulated environment.
• Hands-on expertise with Citrix NetScaler and Omnissa Horizon in multi-tenant setups.
• Strong VDI design, pod/image architecture, and protocol-level session delivery experience.
• Networking, DNS, TLS/SAML, MFA, and directory services integration familiarity.
• Automation experience with PowerShell, Python, Terraform or equivalents.
• Experience with Cloudflare or Akamai networks.

Responsibilities

• Own the engineering design, build, and lifecycle of global remote access infrastructure.
• Define reference architecture and standards across regions for a consistent baseline.
• Engineer capacity, resiliency, and failover including regional redundancy and load testing.
• Harden the access path end to end with TLS, authentication, and posture enforcement.
• Automate build, configuration, and validation; collaborate across networks, security, and DC ops.
• Leverage AI capabilities responsibly to accelerate analysis and documentation.

Skills

Infrastructure engineering concepts

Capacity planning

Automation and scripting

Cross-domain collaboration

Security and auditability

Education

Formal certification in infrastructure engineering

Tools

Citrix NetScaler

Omnissa Horizon

PowerShell

Python

Terraform

Cloudflare

Akamai

Job description

Assume a vital position as a key member of a high-performing team that delivers infrastructure and performance excellence. Your role will be instrumental in shaping the future at one of the world's largest and most influential companies.

As a Remote Access Lead Infrastructure Engineer at JPMorganChase within the Corporate Sector- Employee Platforms, you apply deep knowledge of software, applications, and technical processes within the infrastructure engineering discipline. You own the design and build of the infrastructure that delivers secure remote access to virtual desktops and applications for a global workforce. That estate covers application delivery controllers, access gateways, session brokers, and the certificate, network, and authentication services that support them across a multi-region global data center footprint. This is a hands-on engineering role with design authority where you will set the reference architecture and configuration standards, engineer capacity and regional failover, harden the externally reachable access path, and automate build and validation so the estate stays consistent as it scales in an environment that is tightly controlled. Continue to evolve your technical and cross-functional knowledge outside of your aligned domain of expertise.

Job Responsibilities

• Own the engineering design, build, and lifecycle of global remote access infrastructure, including application delivery controllers, access gateways, virtual desktop brokers and pods, and the supporting network and certificate services
• Define reference architecture and configuration standards across regions, retire one-off builds and legacy exceptions, and hold a multi-tenant estate to a consistent baseline
• Engineer capacity, resiliency, and failover, including regional redundancy, recovery design, traffic distribution, and load testing against peak and contingency concurrency
• Harden the access path end to end, covering TLS configuration, federation and multi-factor integration, device posture enforcement, firmware and vulnerability remediation, and integrity monitoring of externally reachable services
• Automate build, configuration, and post-change validation, and lead cross-domain engineering with network, identity, security, and data center operations partners
• Use enterprise-authorized AI capabilities within the work environment to accelerate infrastructure analysis and design documentation, validating outputs and handling operational data according to sensitivity and security requirements
• Apply reuse-first, AI-assisted practices within delivery and automation routines to identify recurring issues and validate remediation options, ensuring changes are traceable/auditable and aligned to resiliency and security expectations

Required qualifications, capabilities, and skills

• Formal training or certification on infrastructure engineering concepts and 5+ years applied experience
• Demonstrated experience engineering enterprise remote access, application delivery, or virtual desktop infrastructure at global scale in a regulated environment
• Deep hands-on expertise with application delivery controllers and access gateways, such as Citrix NetScaler and Omnissa UAG (Horizon), covering multi-tenant instance provisioning, load balancing, virtual server configuration, SSL and TLS profiles, certificate lifecycle, authentication policy, and session settings
• Strong engineering experience with enterprise virtual desktop platforms, such as Citrix and Omnissa Horizon, covering broker and connection server design, pod and image architecture, and protocol-level session delivery
• Working command of enterprise networking and identity integration, including DNS, routing and firewall policy, TLS, SAML federation, multi-factor authentication, and directory services
• Demonstrated capacity planning, load testing, and resiliency engineering for a high-concurrency platform, with automation built in PowerShell, Python, Terraform, or equivalent.
• Experience in Cloudflare or Akamai
• Deep knowledge of one or more areas of infrastructure engineering such as: hardware, networking terminology, databases, storage engineering, deployment practices, integration, automation, scaling, resilience or performance assessments
• Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support infrastructure engineering workflows with strong validation habits and awareness of data sensitivity
• Ability to review and validate AI-assisted recommendations before implementation, escalating when uncertain and ensuring outcomes align to resiliency, security, and auditability expectations
• Deep knowledge of cloud infrastructure and multiple cloud technologies with the ability to operate in and migrate across public and private clouds

Preferred qualifications, capabilities, and skills

• Experience with zero-trust network access or cloud-delivered access services, including identity-aware proxy and outbound connector models
• Track record of reducing internet-facing attack surface for externally reachable enterprise services without degrading user experience
• Familiarity with thin client platforms and a diverse endpoint population across managed and unmanaged devices
• Hands-on experience with appliance hardware refresh and firmware lifecycle in co-located data centers