Assume a vital position as a key member of a high-performing team that delivers infrastructure and performance excellence. Your role will be instrumental in shaping the future at one of the world's largest and most influential companies.
As a Lead Infrastructure Engineer at JPMorganChase within the Enterprise Technology, network services team, you design, operate, and continuously improve enterprise DNS and IPv6 capabilities with a focus on reliability, security, and measurable service outcomes. You partner with infrastructure, application, and operations teams to deliver scalable network design, accurate name resolution, and strong diagnostics practices in a diverse, inclusive environment.
Job responsibilities
- Design enterprise DNS architectures and standards that support resilient, scalable name resolution across hybrid environments.
- Engineer IPv6 addressing plans and network designs using 128-bit formats, subnetting, and architecture patterns (e.g., GUA, ULA).
- Implement reverse DNS delegation for IPv6 using ip6.arpa zones and nibble-format delegation models.
- Execute IPv6 transition and mitigation approaches (e.g., Dual-Stack, NAT64, DNS64) aligned to application and network readiness.
- Operate core DNS services with an availability-first mindset, ensuring consistent performance and predictable change outcomes.
- Troubleshoot complex DNS and connectivity issues using disciplined diagnostics (e.g., dig, nslookup) across A vs. AAAA resolution paths.
- Analyze routing and protocol interactions impacting DNS and reachability, including TCP/IP layering and routing protocols (e.g., BGP, OSPFv3).
- Automate repeatable DNS and IPv6 operational tasks to reduce manual effort and improve consistency, auditability, and time-to-recovery.
- Document designs, runbooks, and troubleshooting playbooks that raise team effectiveness and reduce operational ambiguity.
- Uses enterprise-authorized AI capabilities within the work environment to accelerate infrastructure analysis and design documentation, validating outputs and handling operational data according to sensitivity and security requirements.
-
Applies reuse-first, AI-assisted practices within delivery and automation routines to identify recurring issues and validate remediation options, ensuring changes are traceable/auditable and aligned to resiliency and security expectations.
Required qualifications, capabilities, and skills
- Formal training or certification on Infrastructure engineering concepts and 5+ years applied experience
- Advanced DNS core competencies, including authoritative and recursive DNS concepts, record types, and operational best practices.
- IPv6 addressing & architecture fluency, including 128-bit address formats, subnetting, and network design with Global Unicast and Unique Local addressing.
- Reverse DNS delegation knowledge for IPv6 using ip6.arpa zones and nibble-format delegations (in contrast to IPv4 in-addr.arpa).
- Hands-on experience with IPv6 transition and mitigation mechanisms, including Dual-Stack, NAT64, and DNS64.
- Strong networking & diagnostics capability, including practical understanding of TCP/IP layers and how they intersect with DNS behavior.
- Working knowledge of routing protocols that interact with DNS reachability and traffic paths, including BGP and OSPFv3.
- Proven troubleshooting skills using tools such as dig and nslookup to debug resolution outcomes and validate connectivity across A vs. AAAA records.
- Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support infrastructure engineering workflows with strong validation habits and awareness of data sensitivity.
- Ability to review and validate AI-assisted recommendations before implementation, escalating when uncertain and ensuring outcomes align to resiliency, security, and auditability expectations
- Experience operating within controlled change environments, including planning, peer review, and documentation expectations.
Preferred qualifications, capabilities, and skills
- Proficiency with logging, telemetry, and visualization tools such as Splunk, SevOne, ThousandEyes, and Grafana.
- Strong presentation skills, including the ability to explain DNS/IPv6 concepts and operational risk in a crisp, stakeholder-friendly way.
- Experience building operational dashboards and service health indicators to improve transparency and proactive detection.
- Demonstrated ability to standardize and simplify complex network/DNS patterns into repeatable reference architectures.