Lead Infrastructure Engineer : Neovest

Assume a vital position as a key member of a high-performing team that delivers infrastructure and performance excellence. Your role will be instrumental in shaping the future at one of the world's largest and most influential companies.

As a Lead Infrastructure Engineer at JPMorganChase within Neovest, you apply deep knowledge of software, applications, and technical processes within the infrastructure engineering discipline. Continue to evolve your technical and cross-functional knowledge outside of your aligned domain of expertise.

Job responsibilities
- Applies technical expertise and structured problem-solving to infrastructure projects of moderate scope, developing creative solutions for design, implementation, and technical troubleshooting.
- Uses enterprise-authorized AI capabilities to accelerate infrastructure analysis, design documentation, and automation, validating outputs and handling operational data in accordance with security and sensitivity requirements.
- Drives infrastructure engineering workstreams across multiple technologies, partnering with other platforms to architect and implement changes, modernize technology processes, and address upstream and downstream technical dependencies.
- Executes platform deployments, software rollouts, configuration changes, controlled restarts, and release activities across production and non-production environments, including implementation, rollback, validation, and monitoring plans.
- Administers and troubleshoots Palo Alto firewalls, Panorama, GlobalProtect VPN, Cisco, F5 BIG-IP, DNS, network access controls, and hybrid networking environments across colocation data centers, AWS, GCP, and Azure.
- Reviews and drives remediation of vulnerabilities, application-security findings, DLP alerts, endpoint issues, cloud posture findings, and security-monitoring events while maintaining required evidence, diagrams, runbooks, and governance documentation.
- Manages and supports user endpoint devices, applications, and virtual desktop environments, including M365, Intune, Company Portal, thin clients, AWS WorkSpaces, VDI provisioning, standardization, and ongoing support.
Required qualifications, capabilities, and skills
- Formal training or certification on infrastructure engineering concepts and 5+ years applied experience
- Deep knowledge of one or more areas of infrastructure engineering such as: hardware, networking terminology, databases, storage engineering, deployment practices, integration, automation, scaling, platform engineering, network engineering, infrastructure operations, cybersecurity controls.
- Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support infrastructure engineering workflows with strong validation habits and awareness of data sensitivity.
- Ability to review and validate AI-assisted recommendations before implementation, escalating when uncertain and ensuring outcomes align to resiliency, security, and auditability expectations.
- Deep knowledge of one specific infrastructure technology and scripting languages
- Deep knowledge of cloud infrastructure and multiple cloud technologies with the ability to operate in and migrate across public and private clouds
- Five or more years of experience across platform engineering, network engineering, network security, infrastructure operations, cybersecurity controls, or a closely related discipline.
- Broad infrastructure and security foundation: networking (IPv4/IPv6, TCP/IP, DNS/DHCP, NAT, VLANs/VPNs, ACLs, routing/switching, load balancing, cloud networking) plus core security/resiliency practices (IAM/privileged access, DLP, vulnerability management, application security, SIEM logging, endpoint hardening, WAF, asset management, technology resiliency).
- Supported enterprise application platforms and production deployments across the service lifecycle, delivering rollback-aware changes; documented and tracked work in Jira/Confluence (or equivalent); leveraged enterprise-authorized AI with strong validation and data-sensitivity; and communicated clearly to troubleshoot calmly and explain risk to technical and non-technical audiences.
Preferred qualifications, capabilities, and skills
- Experience in regulated financial services, trading, market data, or other high-availability environments.
- Hands-on experience with M365 Administration, Wiz, CrowdStrike, Tanium, Tenable, SonarQube, Veracode, JFrog suite, CyberArk, Microsoft Defender, Broadcom DLP, NG-SIEM, SolarWinds, AWS (Workspaces), Azure, and GCP.
- Experience automating infrastructure and control activities with Python, Ansible, Terraform, vendor APIs, shell scripting, or deployment tooling.
- Experience with Kubernetes, NGINX, cloud load balancers, infrastructure as code, CI/CD, or modern platform engineering practices.
- Experience with datacenter migrations, circuit transitions, service decommissioning, disaster recovery, and resilience improvements.
- Relevant certifications such as CISSP, CISM, CRISC, CCNP, PCNSE, Security+, or cloud networking certifications.
- Production experience with next-generation firewalls and centralized policy management, preferably Palo Alto Networks and Panorama.