Remote Access Lead Infrastructure Engineer
About The Position
Assume a vital position as a key member of a high-performing team that delivers infrastructure and performance excellence. Your role will be instrumental in shaping the future at one of the world's largest and most influential companies. As a Remote Access Lead Infrastructure Engineer at JPMorganChase within the Corporate Sector- Employee Platforms, you apply deep knowledge of software, applications, and technical processes within the infrastructure engineering discipline. You own the design and build of the infrastructure that delivers secure remote access to virtual desktops and applications for a global workforce. That estate covers application delivery controllers, access gateways, session brokers, and the certificate, network, and authentication services that support them across a multi-region global data center footprint. This is a hands-on engineering role with design authority where you will set the reference architecture and configuration standards, engineer capacity and regional failover, harden the externally reachable access path, and automate build and validation so the estate stays consistent as it scales in an environment that is tightly controlled. Continue to evolve your technical and cross-functional knowledge outside of your aligned domain of expertise.
Requirements
- Formal training or certification on infrastructure engineering concepts and 5+ years applied experience
- Demonstrated experience engineering enterprise remote access, application delivery, or virtual desktop infrastructure at global scale in a regulated environment
- Deep hands-on expertise with application delivery controllers and access gateways, such as Citrix NetScaler and Omnissa UAG (Horizon), covering multi-tenant instance provisioning, load balancing, virtual server configuration, SSL and TLS profiles, certificate lifecycle, authentication policy, and session settings
- Strong engineering experience with enterprise virtual desktop platforms, such as Citrix and Omnissa Horizon, covering broker and connection server design, pod and image architecture, and protocol-level session delivery
- Working command of enterprise networking and identity integration, including DNS, routing and firewall policy, TLS, SAML federation, multi-factor authentication, and directory services
- Demonstrated capacity planning, load testing, and resiliency engineering for a high-concurrency platform, with automation built in PowerShell, Python, Terraform, or equivalent.
- Experience in Cloudflare or Akamai
- Deep knowledge of one or more areas of infrastructure engineering such as: hardware, networking terminology, databases, storage engineering, deployment practices, integration, automation, scaling, resilience or performance assessments
- Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support infrastructure engineering workflows with strong validation habits and awareness of data sensitivity
- Ability to review and validate AI-assisted recommendations before implementation, escalating when uncertain and ensuring outcomes align to resiliency, security, and auditability expectations
- Deep knowledge of cloud infrastructure and multiple cloud technologies with the ability to operate in and migrate across public and private clouds
Nice To Haves
- Experience with zero-trust network access or cloud-delivered access services, including identity-aware proxy and outbound connector models
- Track record of reducing internet-facing attack surface for externally reachable enterprise services without degrading user experience
- Familiarity with thin client platforms and a diverse endpoint population across managed and unmanaged devices
- Hands-on experience with appliance hardware refresh and firmware lifecycle in co-located data centers
Responsibilities
- Own the engineering design, build, and lifecycle of global remote access infrastructure, including application delivery controllers, access gateways, virtual desktop brokers and pods, and the supporting network and certificate services
- Define reference architecture and configuration standards across regions, retire one-off builds and legacy exceptions, and hold a multi-tenant estate to a consistent baseline
- Engineer capacity, resiliency, and failover, including regional redundancy, recovery design, traffic distribution, and load testing against peak and contingency concurrency
- Harden the access path end to end, covering TLS configuration, federation and multi-factor integration, device posture enforcement, firmware and vulnerability remediation, and integrity monitoring of externally reachable services
- Automate build, configuration, and post-change validation, and lead cross-domain engineering with network, identity, security, and data center operations partners
- Use enterprise-authorized AI capabilities within the work environment to accelerate infrastructure analysis and design documentation, validating outputs and handling operational data according to sensitivity and security requirements
- Apply reuse-first, AI-assisted practices within delivery and automation routines to identify recurring issues and validate remediation options, ensuring changes are traceable/auditable and aligned to resiliency and security expectations
Benefits
- comprehensive health care coverage
- on-site health and wellness centers
- a retirement savings plan
- backup childcare
- tuition reimbursement
- mental health support
- financial coaching
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
