Lead Infrastructure Engineer : Neovest

Assume a vital position as a key member of a high-performing team that delivers infrastructure and performance excellence. Your role will be instrumental in shaping the future at one of the world's largest and most influential companies.

As a Lead Infrastructure Engineer at JPMorganChase within Neovest, you apply deep knowledge of software, applications, and technical processes within the infrastructure engineering discipline. Continue to evolve your technical and cross-functional knowledge outside of your aligned domain of expertise.

• Applies technical expertise and structured problem-solving to infrastructure

projects of moderate scope, developing creative solutions for design, implementation, and technical troubleshooting.

• Uses enterprise-authorized AI capabilities to accelerate infrastructure

analysis, design documentation, and automation, validating outputs and handling operational data in accordance with security and sensitivity requirements.

• Drives infrastructure engineering workstreams across multiple technologies,

partnering with other platforms to architect and implement changes, modernize technology processes, and address upstream and downstream technical dependencies.

• Executes platform deployments, software rollouts, configuration changes,

controlled restarts, and release activities across production and non-production environments, including implementation, rollback, validation, and monitoring plans.

• Administers and troubleshoots Palo Alto firewalls, Panorama, GlobalProtect

VPN, Cisco, F5 BIG-IP, DNS, network access controls, and hybrid networking environments across colocation data centers, AWS, GCP, and Azure.

• Reviews and drives remediation of vulnerabilities, application-security

findings, DLP alerts, endpoint issues, cloud posture findings, and security-monitoring events while maintaining required evidence, diagrams, runbooks, and governance documentation.

• Manages and supports user endpoint devices, applications, and virtual desktop

environments, including M365, Intune, Company Portal, thin clients, AWS WorkSpaces, VDI provisioning, standardization, and ongoing support.

• Formal training or certification on infrastructure engineering concepts and

• Experience in regulated financial services, trading, market data, or other

high-availability environments.

• Hands-on experience with M365 Administration, Wiz, CrowdStrike, Tanium,

Tenable, SonarQube, Veracode, JFrog suite, CyberArk, Microsoft Defender, Broadcom DLP, NG-SIEM, SolarWinds, AWS (Workspaces), Azure, and GCP.

• Experience automating infrastructure and control activities with Python,

Ansible, Terraform, vendor APIs, shell scripting, or deployment tooling.

• Experience with Kubernetes, NGINX, cloud load balancers, infrastructure as

code, CI/CD, or modern platform engineering practices.

• Experience with datacenter migrations, circuit transitions, service

decommissioning, disaster recovery, and resilience improvements.

• Relevant certifications such as CISSP, CISM, CRISC, CCNP, PCNSE, Security+,

or cloud networking certifications.

• Production experience with next-generation firewalls and centralized policy

management, preferably Palo Alto Networks and Panorama.

JPMorganChase, one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world’s most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management.

We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility.

These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process.

J.P. Morgan’s Commercial & Investment Bank is a global leader across banking, markets, securities services and payments. Corporations, governments and institutions throughout the world entrust us with their business in more than 100 countries. The Commercial & Investment Bank provides strategic advice, raises capital, manages risk and extends liquidity in markets around the world.

• Deep knowledge of one or more areas of infrastructure engineering such as:

hardware, networking terminology, databases, storage engineering, deployment practices, integration, automation, scaling, platform engineering, network engineering, infrastructure operations, cybersecurity controls.

• Demonstrated experience using enterprise-authorized AI capabilities within

the work environment to support infrastructure engineering workflows with strong validation habits and awareness of data sensitivity.

• Ability to review and validate AI-assisted recommendations before

implementation, escalating when uncertain and ensuring outcomes align to resiliency, security, and auditability expectations.

• Deep knowledge of one specific infrastructure technology and scripting

• Deep knowledge of cloud infrastructure and multiple cloud technologies with

• Five or more years of experience across platform engineering, network

engineering, network security, infrastructure operations, cybersecurity controls, or a closely related discipline.

• Broad infrastructure and security foundation: networking (IPv4/IPv6, TCP/IP,

DNS/DHCP, NAT, VLANs/VPNs, ACLs, routing/switching, load balancing, cloud networking) plus core security/resiliency practices (IAM/privileged access, DLP, vulnerability management, application security, SIEM logging, endpoint hardening, WAF, asset management, technology resiliency).

• Supported enterprise application platforms and production deployments across

the service lifecycle, delivering rollback-aware changes; documented and tracked work in Jira/Confluence (or equivalent); leveraged enterprise-authorized AI with strong validation and data-sensitivity; and communicated clearly to troubleshoot calmly and explain risk to technical and non-technical audiences.