Lead Infrastructure Engineer

Assume a vital position as a key member of a high-performing team that delivers infrastructure and performance excellence. Your role will be instrumental in shaping the future at one of the world's largest and most influential companies.

As a Lead Infrastructure Engineer at JPMorganChase within the Enterprise Technology, network services team, you design, operate, and continuously improve enterprise DNS and IPv6 capabilities with a focus on reliability, security, and measurable service outcomes. You partner with infrastructure, application, and operations teams to deliver scalable network design, accurate name resolution, and strong diagnostics practices in a diverse, inclusive environment.

Job responsibilities

• Design enterprise DNS architectures and standards that support resilient, scalable name resolution across hybrid environments.
• Engineer IPv6 addressing plans and network designs using 128-bit formats, subnetting, and architecture patterns (e.g., GUA, ULA).
• Implement reverse DNS delegation for IPv6 using ip6.arpa zones and nibble-format delegation models.
• Execute IPv6 transition and mitigation approaches (e.g., Dual-Stack, NAT64, DNS64) aligned to application and network readiness.
• Operate core DNS services with an availability-first mindset, ensuring consistent performance and predictable change outcomes.
• Troubleshoot complex DNS and connectivity issues using disciplined diagnostics (e.g., dig, nslookup) across A vs. AAAA resolution paths.
• Analyze routing and protocol interactions impacting DNS and reachability, including TCP/IP layering and routing protocols (e.g., BGP, OSPFv3).
• Automate repeatable DNS and IPv6 operational tasks to reduce manual effort and improve consistency, auditability, and time-to-recovery.
• Document designs, runbooks, and troubleshooting playbooks that raise team effectiveness and reduce operational ambiguity.
• Uses enterprise-authorized AI capabilities within the work environment to accelerate infrastructure analysis and design documentation, validating outputs and handling operational data according to sensitivity and security requirements.

• Applies reuse-first, AI-assisted practices within delivery and automation routines to identify recurring issues and validate remediation options, ensuring changes are traceable/auditable and aligned to resiliency and security expectations.

Required qualifications, capabilities, and skills

• Formal training or certification on Infrastructure engineering concepts and 5+ years applied experience
• Advanced DNS core competencies, including authoritative and recursive DNS concepts, record types, and operational best practices.
• IPv6 addressing & architecture fluency, including 128-bit address formats, subnetting, and network design with Global Unicast and Unique Local addressing.
• Reverse DNS delegation knowledge for IPv6 using ip6.arpa zones and nibble-format delegations (in contrast to IPv4 in-addr.arpa).
• Hands-on experience with IPv6 transition and mitigation mechanisms, including Dual-Stack, NAT64, and DNS64.
• Strong networking & diagnostics capability, including practical understanding of TCP/IP layers and how they intersect with DNS behavior.
• Working knowledge of routing protocols that interact with DNS reachability and traffic paths, including BGP and OSPFv3.
• Proven troubleshooting skills using tools such as dig and nslookup to debug resolution outcomes and validate connectivity across A vs. AAAA records.
• Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support infrastructure engineering workflows with strong validation habits and awareness of data sensitivity.
• Ability to review and validate AI-assisted recommendations before implementation, escalating when uncertain and ensuring outcomes align to resiliency, security, and auditability expectations
• Experience operating within controlled change environments, including planning, peer review, and documentation expectations.

Preferred qualifications, capabilities, and skills

• Proficiency with logging, telemetry, and visualization tools such as Splunk, SevOne, ThousandEyes, and Grafana.
• Strong presentation skills, including the ability to explain DNS/IPv6 concepts and operational risk in a crisp, stakeholder-friendly way.
• Experience building operational dashboards and service health indicators to improve transparency and proactive detection.
• Demonstrated ability to standardize and simplify complex network/DNS patterns into repeatable reference architectures.