Lead Infrastructure Engineer

Assume a vital position as a key member of a high-performing team that delivers infrastructure and performance excellence. Your role will be instrumental in shaping the future at one of the world's largest and most influential companies.

As a Lead Infrastructure Engineer at JPMorganChase within the Enterprise Technology, network services team, you design, operate, and continuously improve enterprise DNS and IPv6 capabilities with a focus on reliability, security, and measurable service outcomes. You partner with infrastructure, application, and operations teams to deliver scalable network design, accurate name resolution, and strong diagnostics practices in a diverse, inclusive environment.

Job responsibilities

- Design enterprise DNS architectures and standards that support resilient, scalable name resolution across hybrid environments.

- Engineer IPv6 addressing plans and network designs using 128-bit formats, subnetting, and architecture patterns (e.g., GUA, ULA).

- Implement reverse DNS delegation for IPv6 using ip6.arpa zones and nibble-format delegation models.

- Execute IPv6 transition and mitigation approaches (e.g., Dual-Stack, NAT64, DNS64) aligned to application and network readiness.

- Operate core DNS services with an availability-first mindset, ensuring consistent performance and predictable change outcomes.

- Troubleshoot complex DNS and connectivity issues using disciplined diagnostics (e.g., dig, nslookup) across A vs. AAAA resolution paths.

- Analyze routing and protocol interactions impacting DNS and reachability, including TCP/IP layering and routing protocols (e.g., BGP, OSPFv3).

- Automate repeatable DNS and IPv6 operational tasks to reduce manual effort and improve consistency, auditability, and time-to-recovery.

- Document designs, runbooks, and troubleshooting playbooks that raise team effectiveness and reduce operational ambiguity.

- Uses enterprise-authorized AI capabilities within the work environment to accelerate infrastructure analysis and design documentation, validating outputs and handling operational data according to sensitivity and security requirements.

- Applies reuse-first, AI-assisted practices within delivery and automation routines to identify recurring issues and validate remediation options, ensuring changes are traceable/auditable and aligned to resiliency and security expectations.

Required qualifications, capabilities, and skills

- Formal training or certification on Infrastructure engineering concepts and 5+ years applied experience

- Advanced DNS core competencies, including authoritative and recursive DNS concepts, record types, and operational best practices.

- IPv6 addressing & architecture fluency, including 128-bit address formats, subnetting, and network design with Global Unicast and Unique Local addressing.

- Reverse DNS delegation knowledge for IPv6 using ip6.arpa zones and nibble-format delegations (in contrast to IPv4 in-addr.arpa).

- Hands-on experience with IPv6 transition and mitigation mechanisms, including Dual-Stack, NAT64, and DNS64.

- Strong networking & diagnostics capability, including practical understanding of TCP/IP layers and how they intersect with DNS behavior.

- Working knowledge of routing protocols that interact with DNS reachability and traffic paths, including BGP and OSPFv3.

- Proven troubleshooting skills using tools such as dig and nslookup to debug resolution outcomes and validate connectivity across A vs. AAAA records.

- Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support infrastructure engineering workflows with strong validation habits and awareness of data sensitivity.

- Ability to review and validate AI-assisted recommendations before implementation, escalating when uncertain and ensuring outcomes align to resiliency, security, and auditability expectations

- Experience operating within controlled change environments, including planning, peer review, and documentation expectations.

Preferred qualifications, capabilities, and skills

- Proficiency with logging, telemetry, and visualization tools such as Splunk, SevOne, ThousandEyes, and Grafana.

- Strong presentation skills, including the ability to explain DNS/IPv6 concepts and operational risk in a crisp, stakeholder-friendly way.

- Experience building operational dashboards and service health indicators to improve transparency and proactive detection.

- Demonstrated ability to standardize and simplify complex network/DNS patterns into repeatable reference architectures.