Lead Infrastructure Engineer - DMZ Perimeter Networking

Lead Infrastructure Engineer- DMZ Perimeter

Assume a vital position as a key member of a high-performing team that delivers infrastructure and performance excellence. Your role will be instrumental in shaping the future at one of the world's largest and most influential companies.

As a Lead Infrastructure Engineer at JPMorgan Chase within the Infrastructure Platform team,  you apply deep knowledge of software, applications, and technical processes within the infrastructure engineering discipline. Continue to evolve your technical and cross-functional knowledge outside of your aligned domain of expertise.

 

Job responsibilities

 

• Research, design, and engineer DMZ perimeter switching and routing across Cisco data center platforms.
• Design client-facing solutions and introduce new feature requirements aligned to business needs.
• Develop and maintain scripts and tooling to pave/repave devices and automate routine operational tasks.
• Standardize and publish engineering artifacts, golden configurations, and product standards.
• Plan and execute hardware and software certification cycles with documented test matrices and results.
• Serve as the L3 escalation point for Network Operations and Service Delivery during critical incidents.
• Coordinate cross-team change activities and stakeholder communications to minimize operational risk.
• Implement and optimize BGP, OSPF/EIGRP, VRF segmentation, and ISP edge routing policies for availability and performance.
• Build and maintain CI/CD workflows for network automation with pre- and post-change validation gates.
• Document runbooks, change procedures, and backout plans to support reliable and auditable operations.
• Monitor, troubleshoot, and tune DMZ performance, availability, and resilience across environments.

 

Required qualifications, capabilities, and skills

• Formal training or certification on software engineering concepts and 5+ years applied experience

• Demonstrates strong experience of network design, engineering, and implementation experience within large enterprise environments.

• Demonstrate deep expertise in DMZ architectures and Cisco data center fabrics (e.g., Nexus, vPC, EVPN/ACI).
• Master BGP, OSPF, EIGRP, VRF segmentation, TCP/IP fundamentals, and ISP routing practices.
• Engineer scalable internet edge and peering policies including prefix filtering, communities, and traffic engineering.
• Automate network workflows using Python for provisioning, validation, and operational tooling.
• Apply Ansible to deliver idempotent configurations and standardized device pave/repave builds.
• Use Terraform to define and manage network constructs and infrastructure as code where applicable.
• Work with JSON and RESTful APIs and integrate automation into CI/CD pipelines such as Jenkins.
• Understand microservices networking patterns, service discovery, and API-driven integrations.

  Preferred qualifications, capabilities, and skills 

• Operate and integrate network security technologies including firewalls, proxies, and load balancers.
• Support internet-facing services traversing the DMZ with appropriate NAT and policy controls.
• Apply Agile methodologies such as Kanban and Scrum in planning and delivery.

 

Experience Level

Senior Level