Lead Infrastructure Engineer : Neovest

Assume a vital position as a key member of a high-performing team that delivers infrastructure and performance excellence. Your role will be instrumental in shaping the future at one of the world's largest and most influential companies.

As a Lead Infrastructure Engineer at JPMorgan

Chase within Neovest, you apply deep knowledge of software, applications, and technical processes within the infrastructure engineering discipline. Continue to evolve your technical and cross-functional knowledge outside of your aligned domain of expertise.

• Applies technical expertise and structured problem-solving to infrastructure projects of moderate scope, developing creative solutions for design, implementation, and technical troubleshooting.
• Uses enterprise-authorized AI capabilities to accelerate infrastructure analysis, design documentation, and automation, validating outputs and handling operational data in accordance with security and sensitivity requirements.
• Drives infrastructure engineering work streams across multiple technologies, partnering with other platforms to architect and implement changes, modernize technology processes, and address upstream and downstream technical dependencies.
• Executes platform deployments, software rollouts, configuration changes, controlled restarts, and release activities across production and non-production environments, including implementation, rollback, validation, and monitoring plans.
• Administers and troubleshoots Palo Alto firewalls, Panorama, Global Protect VPN, Cisco, F5 BIG-IP, DNS, network access controls, and hybrid networking environments across colocation data centers, AWS, GCP, and Azure.
• Reviews and drives remediation of vulnerabilities, application-security findings, DLP alerts, endpoint issues, cloud posture findings, and security-monitoring events while maintaining required evidence, diagrams, runbooks, and governance documentation.
• Manages and supports user endpoint devices, applications, and virtual desktop environments, including M365, Intune, Company Portal, thin clients, AWS Work Spaces, VDI provisioning, standardization, and ongoing support.

• Formal training or certification on infrastructure engineering concepts and 5+ years applied experience
• Deep knowledge of one or more areas of infrastructure engineering such as: hardware, networking terminology, databases, storage engineering, deployment practices, integration, automation, scaling, platform engineering, network engineering, infrastructure operations, cybersecurity controls.
• Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support infrastructure engineering workflows with strong validation habits and awareness of data sensitivity.
• Ability to review and validate AI-assisted recommendations before implementation, escalating when uncertain and ensuring outcomes align to resiliency, security, and auditability expectations.
• Deep knowledge of one specific infrastructure technology and scripting languages
• Deep knowledge of cloud infrastructure and multiple cloud technologies with the ability to operate in and migrate across public and private clouds
• Five or more years of experience across platform engineering, network engineering, network security, infrastructure operations, cybersecurity controls, or a closely related discipline.
• Broad infrastructure and security foundation: networking (IPv4/IPv6, TCP/IP, DNS/DHCP, NAT, VLANs/VPNs, ACLs, routing/switching, load balancing, cloud networking) plus core security/resiliency practices (IAM/privileged access, DLP, vulnerability management, application security, SIEM logging, endpoint hardening, WAF, asset management, technology resiliency).
• Supported enterprise application platforms and production deployments across the service lifecycle, delivering rollback-aware changes; documented and tracked work in Jira/Confluence (or equivalent); leveraged enterprise-authorized AI with strong validation and data-sensitivity; and communicated clearly to troubleshoot calmly and explain risk to technical and non-technical audiences.

• Experience in regulated financial services, trading, market data, or other high-availability environments.
• Hands-on experience with M365 Administration, Wiz, Crowd Strike, Tanium, Tenable, Sonar Qube, Veracode, JFrog suite, Cyber Ark, Microsoft Defender, Broadcom DLP, NG-SIEM, Solar Winds, AWS (Work spaces), Azure,…