Assume a vital position as a key member of a high-performing team that delivers infrastructure and performance excellence. Your role will be instrumental in shaping the future at one of the world's largest and most influential companies.
As a Remote Access Lead Infrastructure Engineer at JPMorganChase within the Corporate Sector- Employee Platforms, you apply deep knowledge of software, applications, and technical processes within the infrastructure engineering discipline. You own the design and build of the infrastructure that delivers secure remote access to virtual desktops and applications for a global workforce. That estate covers application delivery controllers, access gateways, session brokers, and the certificate, network, and authentication services that support them across a multi-region global data center footprint. This is a hands-on engineering role with design authority where you will set the reference architecture and configuration standards, engineer capacity and regional failover, harden the externally reachable access path, and automate build and validation so the estate stays consistent as it scales in an environment that is tightly controlled. Continue to evolve your technical and cross-functional knowledge outside of your aligned domain of expertise.
Job Responsibilities
- Own the engineering design, build, and lifecycle of global remote access infrastructure, including application delivery controllers, access gateways, virtual desktop brokers and pods, and the supporting network and certificate services
- Define reference architecture and configuration standards across regions, retire one-off builds and legacy exceptions, and hold a multi-tenant estate to a consistent baseline
- Engineer capacity, resiliency, and failover, including regional redundancy, recovery design, traffic distribution, and load testing against peak and contingency concurrency
- Harden the access path end to end, covering TLS configuration, federation and multi-factor integration, device posture enforcement, firmware and vulnerability remediation, and integrity monitoring of externally reachable services
- Automate build, configuration, and post-change validation, and lead cross-domain engineering with network, identity, security, and data center operations partners
- Use enterprise-authorized AI capabilities within the work environment to accelerate infrastructure analysis and design documentation, validating outputs and handling operational data according to sensitivity and security requirements
- Apply reuse-first, AI-assisted practices within delivery and automation routines to identify recurring issues and validate remediation options, ensuring changes are traceable/auditable and aligned to resiliency and security expectations
Required qualifications, capabilities, and skills
- Formal training or certification on infrastructure engineering concepts and 5+ years applied experience
- Demonstrated experience engineering enterprise remote access, application delivery, or virtual desktop infrastructure at global scale in a regulated environment
- Deep hands-on expertise with application delivery controllers and access gateways, such as Citrix NetScaler and Omnissa UAG (Horizon), covering multi-tenant instance provisioning, load balancing, virtual server configuration, SSL and TLS profiles, certificate lifecycle, authentication policy, and session settings
- Strong engineering experience with enterprise virtual desktop platforms, such as Citrix and Omnissa Horizon, covering broker and connection server design, pod and image architecture, and protocol-level session delivery
- Working command of enterprise networking and identity integration, including DNS, routing and firewall policy, TLS, SAML federation, multi-factor authentication, and directory services
- Demonstrated capacity planning, load testing, and resiliency engineering for a high-concurrency platform, with automation built in PowerShell, Python, Terraform, or equivalent.
- Experience in Cloudflare or Akamai
- Deep knowledge of one or more areas of infrastructure engineering such as: hardware, networking terminology, databases, storage engineering, deployment practices, integration, automation, scaling, resilience or performance assessments
- Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support infrastructure engineering workflows with strong validation habits and awareness of data sensitivity
- Ability to review and validate AI-assisted recommendations before implementation, escalating when uncertain and ensuring outcomes align to resiliency, security, and auditability expectations
- Deep knowledge of cloud infrastructure and multiple cloud technologies with the ability to operate in and migrate across public and private clouds
Preferred qualifications, capabilities, and skills
- Experience with zero-trust network access or cloud-delivered access services, including identity-aware proxy and outbound connector models
- Track record of reducing internet-facing attack surface for externally reachable enterprise services without degrading user experience
- Familiarity with thin client platforms and a diverse endpoint population across managed and unmanaged devices
- Hands-on experience with appliance hardware refresh and firmware lifecycle in co-located data centers
We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process.
We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants’ and employees’ religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.
JPMorgan Chase & Co. is an Equal Opportunity Employer, including Disability/Veterans
Similar Jobs
What you need to know about the Colorado Tech Scene
Key Facts About Colorado Tech
- Number of Tech Workers: 260,000; 8.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Lockheed Martin, Century Link, Comcast, BAE Systems, Level 3
- Key Industries: Software, artificial intelligence, aerospace, e-commerce, fintech, healthtech
- Funding Landscape: $4.9 billion in VC funding in 2024 (Pitchbook)
- Notable Investors: Access Venture Partners, Ridgeline Ventures, Techstars, Blackhorn Ventures
- Research Centers and Universities: Colorado School of Mines, University of Colorado Boulder, University of Denver, Colorado State University, Mesa Laboratory, Space Science Institute, National Center for Atmospheric Research, National Renewable Energy Laboratory, Gottlieb Institute
