Companies in this catalog do not charge applicants. Never send money to apply.
Assume a vital position as a key member of a high-performing team that delivers infrastructure and performance excellence. Your role will be instrumental in shaping the future at one of the world's largest and most influential companies.
As a Remote Access Lead Infrastructure Engineer at JPMorganChase within the Corporate Sector- Employee Platforms, you apply deep knowledge of software, applications, and technical processes within the infrastructure engineering discipline. You own the design and build of the infrastructure that delivers secure remote access to virtual desktops and applications for a global workforce. That estate covers application delivery controllers, access gateways, session brokers, and the certificate, network, and authentication services that support them across a multi-region global data center footprint. This is a hands-on engineering role with design authority where you will set the reference architecture and configuration standards, engineer capacity and regional failover, harden the externally reachable access path, and automate build and validation so the estate stays consistent as it scales in an environment that is tightly controlled. Continue to evolve your technical and cross-functional knowledge outside of your aligned domain of expertise.
Job Responsibilities
Own the engineering design, build, and lifecycle of global remote access infrastructure, including application delivery controllers, access gateways, virtual desktop brokers and pods, and the supporting network and certificate services
Define reference architecture and configuration standards across regions, retire one-off builds and legacy exceptions, and hold a multi-tenant estate to a consistent baseline Engineer capacity, resiliency, and failover, including regional redundancy, recovery design, traffic distribution, and load testing against peak and contingency concurrency
Harden the access path end to end, covering TLS configuration, federation and multi-factor integration, device posture enforcement, firmware and vulnerability remediation, and integrity monitoring of externally reachable services
Automate build, configuration, and post-change validation, and lead cross-domain engineering with network, identity, security, and data center operations partners
Use enterprise-authorized AI capabilities within the work environment to accelerate infrastructure analysis and design documentation, validating outputs and handling operational data according to sensitivity and security requirements
Apply reuse-first, AI-assisted practices within delivery and automation routines to identify recurring issues and validate remediation options, ensuring changes are traceable/auditable and aligned to resiliency and security expectations
Required qualifications, capabilities, and skills
Formal training or certification on infrastructure engineering concepts and 5+ years applied experience
Demonstrated experience engineering enterprise remote access, application delivery, or virtual desktop infrastructure at global scale in a regulated environment
Deep hands-on expertise with application delivery controllers and access gateways, such as Citrix NetScaler and Omnissa UAG (Horizon), covering multi-tenant instance provisioning, load balancing, virtual server configuration, SSL and TLS profiles, certificate lifecycle, authentication policy, and session settings
Strong engineering experience with enterprise virtual desktop platforms, such as Citrix and Omnissa Horizon, covering broker and connection server design, pod and image architecture, and protocol-level session delivery
Working command of enterprise networking and identity integration, including DNS, routing and firewall policy, TLS, SAML federation, multi-factor authentication, and directory services
Demonstrated capacity planning, load testing, and resiliency engineering for a high-concurrency platform, with automation built in PowerShell, Python, Terraform, or equivalent.
Experience in Cloudflare or Akamai
Deep knowledge of one or more areas of infrastructure engineering such as: hardware, networking terminology, databases, storage engineering, deployment practices, integration, automation, scaling, resilience or performance assessments
Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support infrastructure engineering workflows with strong validation habits and awareness of data sensitivity
Ability to review and validate AI-assisted recommendations before implementation, escalating when uncertain and ensuring outcomes align to resiliency, security, and auditability expectations
Deep knowledge of cloud infrastructure and multiple cloud technologies with the ability to operate in and migrate across public and private clouds
Preferred qualifications, capabilities, and skills
Experience with zero-trust network access or cloud-delivered access services, including identity-aware proxy and outbound connector models
Track record of reducing internet-facing attack surface for externally reachable enterprise services without degrading user experience
Familiarity with thin client platforms and a diverse endpoint population across managed and unmanaged devices
Hands-on experience with appliance hardware refresh and firmware lifecycle in co-located data centers
