Lead Infrastructure Engineer, Checkpoint Firewall

Assume a vital position as a key member of a high-performing team that delivers infrastructure and performance excellence. Your role will be instrumental in shaping the future at one of the world's largest and most influential companies.

As a Lead Infrastructure Engineer at JPMorganChase within the Infrastructure Platforms, you apply deep knowledge of software, applications, and technical processes within the infrastructure engineering discipline. Continue to evolve your technical and cross-functional knowledge outside of your aligned domain of expertise.

Job responsibilities

• Applies technical expertise and problem-solving methodologies to projects of moderate scope and executes creative solutions for design, development, and technical troubleshooting for problems of moderate complexity

• Uses enterprise-authorized AI capabilities within the work environment to accelerate infrastructure analysis and design documentation, validating outputs and handling operational data according to sensitivity and security requirements.

• Drives a workstream or project consisting of one or more infrastructure engineering technologies and works with other platforms to architect and implement changes required to resolve issues and modernize the organization and technology processes

• Strongly considers upstream and downstream data and systems or technical implications and advises on mitigation actions

• Applies reuse-first, AI-assisted practices within delivery and automation routines to identify recurring issues and validate remediation options, ensuring changes are traceable/auditable and aligned to resiliency and security expectations.

• Design, implement, and manage enterprise firewall infrastructure, with hands-on expertise in Check Point, Fortinet, Palo Alto, and Tufin policy orchestration platforms

• Develop and maintain automation scripts for device provisioning and operational tasks, while establishing engineering standards and technical artifacts for certified technology products

• Develop implementation and operational documentations

• Acting as the escalation point for Network Operations and Service Delivery teams

• Cross-team coordination and collaboration with stakeholders

Required qualifications, capabilities, and skills

• Bachelor’s Degree in Computer Science, Cybersecurity, Data Science, or related disciplines

• Formal training or certification on infrastructure engineering concepts and 5+ years of firewall and network security design, engineering and implementation experience within a large enterprise environment

• Deep knowledge of one or more areas of infrastructure engineering such as: hardware, networking terminology, databases, storage engineering, deployment practices, integration, automation, scaling, resilience or performance assessments

• Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support infrastructure engineering workflows with strong validation habits and awareness of data sensitivity.

• Ability to review and validate AI-assisted recommendations before implementation, escalating when uncertain and ensuring outcomes align to resiliency, security, and auditability expectations.

• Deep knowledge of one specific infrastructure technology and scripting languages

• Deep knowledge of cloud infrastructure and multiple cloud technologies with the ability to operate in and migrate across public and private clouds

• Knowledge and experience on DMZ and other boundary network architecture

• Software development experience in one or more general purpose programming/scripting/DevOps languages: Python, Ansible, Terraform, JSON

• Understanding of micro-services, CI/CD pipelines such as Jenkins, APIs & In-depth knowledge TCP/IP and routing

Preferred qualifications, capabilities, and skills

• Experience with network security technologies such as proxy and load balancer

• Experience working with Agile methodologies like Kanban & Scrum

To apply for this position, please use the following URL:

https://ars2.equest.com/?response_id=1b64564ef01946a924a00cf1b1bc7f23