Technology Support Lead (Remote Access)

Archer; Jersey City (NJ); On-site; USD 120,000 - 160,000; Full time

Job summary

JPMorganChase in Jersey City seeks a Technology Support Lead in the Remote Access Team to ensure the stability and security of the firm’s remote-access and network security environment. You’ll manage VPNs, firewalls, and security services across a large enterprise and partner with Network Engineering, SecOps, Identity, and Service Desk.

This role requires hands-on Cisco security expertise, incident and change management, automation scripting, and collaboration with cross‑functional teams.

Qualifications

• 5+ years of experience or equivalent in troubleshooting IT services
• Experience operating Cisco network security platforms in a large enterprise
• Hands-on with Cisco ASA including SSL VPN, IPsec, NAT, and ACL
• Production experience with Firepower/FTD managed via FMC/CDO
• Experience with Cisco ISE and AD/Entra ID integration
• Strong incident management and clear communication
• Ability to work on-site five days per week and participate in an on-call rotation

Responsibilities

• Provides Level 2 and Level 3 support for remote-access VPN services, including SSL/IPsec, AnyConnect / Cisco Secure Client, site-to-site VPN, and perimeter firewall services.
• Triages, diagnoses, and resolves incidents across Cisco ASA, Firepower Threat Defense, Identity Services Engine, and supporting infrastructure within agreed service levels.
• Participates in a 24x7 on-call rotation for P1/P2 incidents affecting remote connectivity or perimeter security.
• Leads major incident bridges, drive root-cause analysis, and deliver post-incident reviews with concrete preventative actions.
• Plans, peer review, and implement standard and complex changes through Cisco Security Manager, Cisco Defense Orchestrator, FMC/FCM, and related platforms, including policy, NAT, ACL, VPN, SSL decryption, IPS tuning, and URL filtering changes.
• Manages ISE policy sets, authentication and authorization rules, posture, profiling, certificate services, and integrations with Active Directory, MFA, and pxGrid.
• Maintains Firepower software lifecycle on FCM-managed chassis, including FXOS upgrades, FTD high‑availability pairs, clustering, and logical device provisioning.
• Operates and extends ThousandEyes coverage across Cloud, Enterprise, and Endpoint agents to monitor remote‑access user experience, ISP/SaaS dependencies, and BGP/path health.
• Builds and tunes dashboards, alerts, and synthetic tests; correlate ThousandEyes findings with firewall and VPN telemetry to shorten mean time to detect and mean time to restore.
• Supports audit, vulnerability management, and certificate lifecycle activities, including PKI and SAML/OIDC identity provider integrations.
• Reduces operational toil through scripting and API‑driven automation using FMC/FTD REST API, ISE ERS/OpenAPI, CDO API, and ThousandEyes API and Infrastructure‑as‑Code and configuration‑as‑data practices where applicable, including Git, Ansible, and Python.

Skills

Cisco security platforms

VPN technologies

Incident management

Change management

Python scripting

REST APIs

Tools

Cisco FMC

Cisco Defense Orchestrator

ThousandEyes

FMC/FTD

ISE ERS/OpenAPI

Job description

Archer is collaborating with J.P. Morgan to connect them with exceptional professionals for this role.

Job Description

Join our dynamic team to innovate and refine technology operations, impacting the core of our business services.

Bring your Technology operations support expertise and join a team that manages one of the largest global remote access platforms, providing connectivity for more than 340,000 users. The role combines hands‑on platform support, incident response, change delivery, automation, monitoring, and continuous improvement across Cisco‑based security and remote access products.

As a Technology Support Lead at JPMorganChase in the Remote Access Team, you will help ensure the stability, availability, and secure operation of the firm's remote‑access and network security environment. In this role, you will apply your technical expertise to support remote‑access VPN, site‑to‑site VPN, perimeter firewall, network assurance, and security operations services across a large enterprise environment. Your success in this role will rely on using your hands‑on experience with Cisco security platforms, disciplined incident and change management practices, and close collaboration with Network Engineering, Identity, SecOps, and Service Desk teams to keep remote connectivity fast, reliable, and secure.

Job Responsibilities

• Provides Level 2 and Level 3 support for remote‑access VPN services, including SSL/IPsec, AnyConnect / Cisco Secure Client, site‑to‑site VPN, and perimeter firewall services.
• Triages, diagnoses, and resolves incidents across Cisco ASA, Firepower Threat Defense, Identity Services Engine, and supporting infrastructure within agreed service levels.
• Participates in a 24x7 on‑call rotation for P1/P2 incidents affecting remote connectivity or perimeter security.
• Leads major incident bridges, drive root‑cause analysis, and deliver post‑incident reviews with concrete preventative actions.
• Plans, peer review, and implement standard and complex changes through Cisco Security Manager, Cisco Defense Orchestrator, FMC/FCM, and related platforms, including policy, NAT, ACL, VPN, SSL decryption, IPS tuning, and URL filtering changes.
• Manages ISE policy sets, authentication and authorization rules, posture, profiling, certificate services, and integrations with Active Directory, MFA, and pxGrid.
• Maintains Firepower software lifecycle on FCM-managed chassis, including FXOS upgrades, FTD high‑availability pairs, clustering, and logical device provisioning.
• Operates and extends ThousandEyes coverage across Cloud, Enterprise, and Endpoint agents to monitor remote‑access user experience, ISP/SaaS dependencies, and BGP/path health.
• Builds and tunes dashboards, alerts, and synthetic tests; correlate ThousandEyes findings with firewall and VPN telemetry to shorten mean time to detect and mean time to restore.
• Supports audit, vulnerability management, and certificate lifecycle activities, including PKI and SAML/OIDC identity provider integrations.
• Reduces operational toil through scripting and API‑driven automation using FMC/FTD REST API, ISE ERS/OpenAPI, CDO API, and ThousandEyes API and Infrastructure‑as‑Code and configuration‑as‑data practices where applicable, including Git, Ansible, and Python.

Required Qualifications, Capabilities, And Skills

• 5+ years of experience or equivalent expertise troubleshooting, resolving, and maintaining information technology services
• Experience operating Cisco network security platforms in a large enterprise or service‑provider environment.
• Strong hands‑on expertise with Cisco ASA, including multi‑context, failover, clustering, NAT, ACL, AnyConnect/SSL VPN, IPsec, DAP, and split tunneling.
• Production experience with Cisco Firepower / FTD managed through FMC and/or Cisco Defense Orchestrator, including access control policy, SSL policy, IPS/Snort 3, file/malware, and identity policy.
• Working knowledge of Firepower Chassis Manager / FXOS, including logical device provisioning, interface mapping, and software upgrades on 41xx/93xx-class hardware.
• Operational experience with Cisco ISE, including RADIUS/TACACS+, 802.1X, MAB, posture, profiling, guest access, certificate‑based authentication, and AD/Entra ID integration.
• Experience using Cisco Security Manager and Cisco Defense Orchestrator for multi‑device policy management, migration, and change orchestration.
• Hands‑on experience with ThousandEyes, including agent deployment, test design for HTTP, page‑load, network, BGP, and end‑user tests, alerting, and root‑cause analysis.
• Solid networking fundamentals, including routing with BGP and OSPF, switching, NAT, QoS, PKI, DNS, and TCP/IP troubleshooting using packet capture and Wireshark.
• Strong incident management discipline and clear written and verbal communication with technical and non‑technical stakeholders.
• Ability to work on‑site five days per week and participate in an on‑call rotation.

Preferred Qualifications, Capabilities, And Skills

• CCNP Security, CCIE Security, ThousandEyes certifications, Cisco Certified Specialist - Secure Firewall, or Cisco Certified Specialist - ISE.
• Experience migrating ASA to FTD at scale, or FMC to cloud‑delivered FMC through CDO‑managed environments.
• Scripting experience in Python and familiarity with Ansible, Git, and CI/CD pipelines for network change.
• Experience integrating telemetry into Splunk, ELK, Grafana, and SOAR platforms.

ABOUT US

JPMorganChase, one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world's most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management.

We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission‑based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions.

We also offer a range of benefits and programs to meet employee needs, based on eligibility.

• comprehensive health care coverage, on‑site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more.

We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.

JPMorgan Chase & Co. is an Equal Opportunity Employer, including Disability/Veterans

About The Team

Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we're setting our businesses, clients, customers and employees up for success.