Lead Infrastructure Engineer- Network Security & Automation

Job responsibilities

• Applies technical expertise and problem-solving methodologies to projects of moderate scope
• Applies technical expertise and problem-solving methodologies to projects of moderate scope
• Manages client and stakeholder relationships through consultations, clear communications, and ongoing expectation management, including expected completion dates
• Maintains and improves team processes by creating and updating documentation and runbooks aligned to engineering standards
• Provides advanced troubleshooting and operational support for proxy-related issues
• Collaborates with IT and business teams to align proxy solutions to organizational goals and requirements
• Enhances change management by developing standardized change implementation templates and promoting consistent execution
• Provides technical guidance and mentorship to team members to build capability and delivery consistency
• Communicates effectively across technical and non-technical stakeholders, applying strong analytical thinking and problem-solving
• Uses enterprise-authorized AI capabilities within the work environment to accelerate infrastructure analysis and design documentation, validating outputs and handling operational data according to sensitivity and security requirements.
• Applies reuse-first, AI-assisted practices within delivery and automation routines to identify recurring issues and validate remediation options, ensuring changes are traceable/auditable and aligned to resiliency and security expectations.

Required qualifications, capabilities, and skills

• Formal training or certification on Infrastructure engineering concepts and 5+ years applied experience
• 5+ years hands-on installation, migration, upgrade, and decommission of Broadcom (erstwhile Bluecoat) suite: ProxySG, Secure Web Gateway (ISG), Symantec Content Analysis Systems (CAS), SSL Visibility appliances, Symantec Management Center (SMC).
• Experience with SaaS Secure Web Gateway vendors (e.g., Zscaler, Netskope) including deployment/integration and migration/coexistence patterns.
• Ability to build, test, and deploy proxy-based security solutions, including policy/traffic-flow understanding and operational readiness.
• Strong understanding of network infrastructure & security concepts, including HTTP/HTTPS, application-layer protocols, and vulnerability mitigation.
• Good understanding of networking fundamentals: network topology, VLANs, routing, switching, firewalls, global/local load balancing.
• Proficient in SIEM tools for investigation, troubleshooting, and incident support.
• Strong automation/scripting skills: Shell (Bash/Korn), Python, and Ansible playbooks for proxy environment automation; strong grasp of version/revision control practices (e.g., Git workflows).
• Understanding of PAC file and ability to manage and maintain PAC file automation infrastructure and development lifecycle; good understanding of REST APIs and container-based deployment models.
• Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support infrastructure engineering workflows with strong validation habits and awareness of data sensitivity
• Ability to review and validate AI-assisted recommendations before implementation, escalating when uncertain and ensuring outcomes align to resiliency, security, and auditability expectations.

• Self-Starter who can take initiative and has the ability to work independently and collaboratively
• Organized and able to follow JPMC processes designed to minimize risk to the environment
• Ability to collaborate with different roles and different levels across different teams to achieve common goals and ensure end to end project delivery
• Demonstrated leadership and collaboration skills in a large enterprise environment

• Flexible to work off hours and weekends in 24x7 on-call rotation.