JP Morgan Chase

Runs a consumer bank and an investment bank

Lead Infrastructure Engineer

Cloud EngineeringConfirmed live in the last 24 hours

Full-timeTampa, FL, USANo salary listedIn-person

About the Job

Requirements

At least 10 years of infrastructure engineering experience in cloud and/or datacenter environments, including direct experience supporting modernization or migration from mainframe environments to distributed or cloud platforms.
Practical experience with Microsoft Azure networking, including virtual networks, routing, network security groups, Azure Firewall, Private Link, and DNS.
Experience with Azure connectivity technologies, including ExpressRoute, VPN, Virtual WAN, and hub-and-spoke architectures.
Experience with Azure compute and storage fundamentals, including virtual machines, disk performance, and availability patterns.
Ability to set up, troubleshoot, and performance-tune hybrid connectivity, including latency, throughput, packet loss, MTU/MSS, routing, and failover.
Experience with Infrastructure as Code using Terraform and/or Bicep/ARM, and Git-based workflows.
Strong troubleshooting skills and ability to work across network, security, application, and data teams.

Responsibilities

Partner with application and platform teams to migrate and modernize mainframe-adjacent workloads, including rehosting or refactoring components, distributed integrations, and data movement patterns.
Design target-state infrastructure and transition architectures for Azure, including landing zones and alignment with platform services.
Build and operate Azure core services, including virtual networks and subnets, routing, network security groups, Azure Firewall, Private Link, DNS, identity integrations, and resource organization across subscriptions and management groups, including tagging.
Implement Infrastructure as Code using Terraform or Bicep and integrate it with CI/CD pipelines.
Design, implement, and troubleshoot on-premises-to-Azure connectivity using ExpressRoute, VPN, Virtual WAN, and hub-and-spoke or Virtual WAN architectures.
Configure and validate routing using BGP, MTU/MSS settings, latency and throughput baselines, and failover behavior.
Tune connectivity performance for critical batch, file transfer, API, messaging, and data replication flows, including bandwidth planning and quality-of-service considerations where applicable.
Identify and remediate bottlenecks across network, compute, storage, and platform services, including virtual machine sizing, disk throughput and IOPS, load-balancing behavior, TCP tuning, and connection-pooling implications.
Establish monitoring and observability using Azure Monitor, Log Analytics, Network Watcher, and Application Insights where relevant; define SLOs, alerting, and runbooks.
Lead root-cause analysis for performance incidents and drive preventative improvements.
Apply cloud security best practices, including least privilege, segmentation, private endpoints, and key management, and ensure alignment with governance controls.
Produce design documentation and operational procedures, and provide knowledge transfer.

Desired Qualifications

Experience with modernization patterns such as rehost, replatform, and refactor, and familiarity with mainframe integrations such as batch scheduling, file transfer, messaging, and data replication.
Azure Landing Zone or CAF experience, policy and guardrails, and enterprise subscription design.
Experience with performance tools and methods, including load-testing coordination, network path analysis, packet-capture interpretation, and baseline/SLO definition.
Exposure to containers such as AKS, API management, and messaging services such as Service Bus and Event Hubs.

Key Responsibilities

Mainframe modernization enablement
- Partner with application and platform teams to migrate and modernize mainframe-adjacent workloads (e.g., rehost/refactor components, distributed integrations, data movement patterns).
- Design target-state infrastructure and transition architectures for Azure, including landing zones and platform services alignment.
Azure infrastructure engineering
- Build and operate Azure core services: VNETs/subnets, routing, NSGs, Azure Firewall, Private Link, DNS, identity integrations, and resource organization (subscriptions, management groups, tagging).
- Implement Infrastructure as Code (IaC) using Terraform/Bicep and integrate with CI/CD pipelines.
Hybrid connectivity & network performance
- Design, implement, and troubleshoot on-prem ↔ Azure connectivity using ExpressRoute, VPN, Virtual WAN, and hub/spoke (or vWAN) architectures.
- Configure and validate routing (BGP), MTU/MSS settings, latency/throughput baselines, and failover behavior.
- Tune connectivity performance for critical flows (batch, file transfer, API, messaging, data replication), including bandwidth planning and QoS considerations where applicable.
Performance tuning & reliability
- Identify and remediate bottlenecks across network, compute, storage, and platform services (e.g., VM sizing, disk throughput/IOPS, load balancing behavior, TCP tuning, connection pooling implications).
- Establish monitoring/observability (Azure Monitor, Log Analytics, Network Watcher, Application Insights where relevant), SLOs, alerting, and runbooks.
- Lead root cause analysis for performance incidents and drive preventative improvements.
Security, governance, and operational excellence
- Apply cloud security best practices (least privilege, segmentation, private endpoints, key management) and ensure alignment with governance controls.
- Produce clear design documentation, operational procedures, and knowledge transfer.

Required Qualifications

10+ years in infrastructure engineering (cloud and/or datacenter), with direct experience supporting modernization or migration from mainframe environments to distributed/cloud platforms.
Strong, practical experience with Microsoft Azure, especially:
- Networking (VNET, routing, NSG, Azure Firewall, Private Link, DNS)
- Connectivity (ExpressRoute, VPN, vWAN, hub/spoke)
- Compute/storage fundamentals (VMs, disk performance, availability patterns)
Demonstrated ability to set up, troubleshoot, and performance-tune hybrid connectivity (latency, throughput, packet loss, MTU/MSS, routing, failover).
Infrastructure as Code experience (Terraform and/or Bicep/ARM) and Git-based workflows.
Strong troubleshooting skills and ability to work across teams (network, security, app, data).

Preferred / Nice to Have

Experience with modernization patterns: rehost, replatform, refactor; familiarity with integration with mainframe systems (e.g., batch scheduling, file transfer, messaging, data replication).
Azure Landing Zone / CAF experience, policy/guardrails, and enterprise subscription design.
Experience with performance tools and methods (load testing coordination, network path analysis, packet capture interpretation, baseline/SLO definition).
Containers (AKS), API management, and/or messaging services (Service Bus, Event Hubs) exposure.

About the Company

JP Morgan Chase

Runs a consumer bank and an investment bank

JPMorgan Chase runs the largest bank in the United States, which serves households and small businesses as Chase and large companies, governments, and investors as J.P. Morgan. During the 2008 financial crisis it bought the failing investment bank Bear Stearns and lender Washington Mutual, and in 2023 it took over First Republic Bank after regulators seized it. Chase takes deposits and earns interest on credit cards, mortgages, and car loans, while the investment side earns fees for advising on mergers, raising money for companies, trading stocks and bonds, and managing wealth. Formed in a 2000 merger, JPMorgan Chase traces its roots to 1799 and is based in New York City.

Company size: 10,001+
Company stage: IPO
Headquarters: New York City, New York
Founded: 1799

Recently Posted Jobs

Explore more opportunities at JP Morgan Chase

See more jobs