Lead Infrastructure Engineer - DDI

 

As a Lead Infrastructure Engineer at JPMorganChase within the  Enterprise Technology,  network services team, you design, operate, and continuously improve enterprise DNS and IPv6 capabilities with a focus on reliability, security, and measurable service outcomes. You partner with infrastructure, application, and operations teams to deliver scalable network design, accurate name resolution, and strong diagnostics practices in a diverse, inclusive environment.

 

 

Job responsibilities

• Design enterprise DNS architectures and standards that support resilient, scalable name resolution across hybrid environments.
• Engineer IPv6 addressing plans and network designs using 128-bit formats, subnetting, and architecture patterns (e.g., GUA, ULA).
• Implement reverse DNS delegation for IPv6 using ip6.arpa zones and nibble-format delegation models.
• Execute IPv6 transition and mitigation approaches (e.g., Dual-Stack, NAT64, DNS64) aligned to application and network readiness.
• Operate core DNS services with an availability-first mindset, ensuring consistent performance and predictable change outcomes.
• Troubleshoot complex DNS and connectivity issues using disciplined diagnostics (e.g., dig, nslookup) across A vs. AAAA resolution paths.
• Analyze routing and protocol interactions impacting DNS and reachability, including TCP/IP layering and routing protocols (e.g., BGP, OSPFv3).
• Automate repeatable DNS and IPv6 operational tasks to reduce manual effort and improve consistency, auditability, and time-to-recovery.
• Document designs, runbooks, and troubleshooting playbooks that raise team effectiveness and reduce operational ambiguity.
• Uses enterprise-authorized AI capabilities within the work environment to accelerate infrastructure analysis and design documentation, validating outputs and handling operational data according to sensitivity and security requirements.

• Applies reuse-first, AI-assisted practices within delivery and automation routines to identify recurring issues and validate remediation options, ensuring changes are traceable/auditable and aligned to resiliency and security expectations. 

Required qualifications, capabilities, and skills

• Formal training or certification on Infrastructure engineering concepts and 5+ years applied experience
• Advanced DNS core competencies, including authoritative and recursive DNS concepts, record types, and operational best practices.
• IPv6 addressing & architecture fluency, including 128-bit address formats, subnetting, and network design with Global Unicast and Unique Local addressing.
• Reverse DNS delegation knowledge for IPv6 using ip6.arpa zones and nibble-format delegations (in contrast to IPv4 in-addr.arpa).
• Hands-on experience with IPv6 transition and mitigation mechanisms, including Dual-Stack, NAT64, and DNS64.
• Strong networking & diagnostics capability, including practical understanding of TCP/IP layers and how they intersect with DNS behavior.
• Working knowledge of routing protocols that interact with DNS reachability and traffic paths, including BGP and OSPFv3.
• Proven troubleshooting skills using tools such as dig and nslookup to debug resolution outcomes and validate connectivity across A vs. AAAA records.
• Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support infrastructure engineering workflows with strong validation habits and awareness of data sensitivity.
• Ability to review and validate AI-assisted recommendations before implementation, escalating when uncertain and ensuring outcomes align to resiliency, security, and auditability expectations
• Experience operating within controlled change environments, including planning, peer review, and documentation expectations.

• Proficiency with logging, telemetry, and visualization tools such as Splunk, SevOne, ThousandEyes, and Grafana.
• Strong presentation skills, including the ability to explain DNS/IPv6 concepts and operational risk in a crisp, stakeholder-friendly way.
• Experience building operational dashboards and service health indicators to improve transparency and proactive detection.
• Demonstrated ability to standardize and simplify complex network/DNS patterns into repeatable reference architectures.

FEDERAL DEPOSIT INSURANCE ACT: This position is subject to Section 19 of the Federal Deposit Insurance Act. As such, an employment offer for this position is contingent on JPMorganChase’s review of criminal conviction history, including pretrial diversions or program entries.