Infrastructure Engineer III- Network Infrastructure Risk Analyst

You belong to the top echelon of talent in your field. At one of the world's most iconic financial institutions, where infrastructure is of paramount importance, you can play a pivotal role.

As an Infrastructure Engineer III at JPMorgan Chase within the Infrastructure Platforms team. Own the remediation of security and operational risks across the enterprise network. Partner with network engineering, Security, and Risk to identify, prioritize, and eliminate exposures on routers, switches, firewalls, load balancers, proxies and reverse proxies. Drive timely vulnerability fixes, configuration hygiene and end‑of‑life upgrades-backed by automation, strong change governance, and audit‑ready evidence.

Job responsibilities

• Configure and support core networking technologies (TCP/IP, VLANs, routing OSPF/BGP, switching, firewalls, load balancing, forward and reverse proxy).
• Remediate vulnerabilities and manage patch and firmware cycles under formal SLAs.
• Detect and correct configuration drift and misconfigurations; enforce standard templates.
• Execute change management, ITSM, and CMDB processes for network changes.
• Maintain inventory of EoL/EoS devices and software; plan and execute upgrades or replacements with minimal downtime.
• Leverage scripts and APIs to accelerate remediation, policy checks, and evidence collection.
• Build and maintain dashboards and KRIs/KPIs to track exposure and SLA adherence.
• Ensure complete telemetry coverage (syslog, NetFlow/sFlow, cloud flow logs) into SIEM and close coverage gaps.
• Support incident response, conduct root cause analysis, and implement corrective actions that prevent recurrence.
• Collaborate with Cyber, Technology, and Operations to minimize operational, cyber, data, and resilience risks.
• Maintain runbooks, standards, and diagrams; produce audit‑ready evidence and align remediation with business priorities.

• Formal training or certification on infrastructure disciplines concepts and 3+ years applied experience
• Demonstrates hands‑on network engineering or network security experience in complex, regulated environments.
• Demonstrate mastery of networking fundamentals: TCP/IP, VLANs, routing (OSPF/BGP), switching, firewalls, load balancing, forward and reverse proxy.
• Show a track record of remediating vulnerabilities and managing patch and firmware cycles under formal SLAs.
• Apply rigor to detect and remediate configuration drift and misconfigurations; enforce standard templates.
• Operate within change management, ITSM, and CMDB processes with high compliance.
• Plan and execute upgrades or replacements for EoL/EoS devices and software with minimal downtime.
• Automate workflows using scripts and APIs for remediation, policy validation, and evidence collection.
• Build and manage dashboards and KRIs/KPIs that measure exposure and SLA adherence.
• Integrate telemetry (syslog, NetFlow/sFlow, cloud flow logs) with SIEM and close coverage gaps.
• Support incident response and conduct root cause analysis, implementing corrective actions that prevent recurrence.

• Obtain entry‑level industry certifications (e.g., ISACA IT Risk Fundamental).
• Manage and monitor risk‑related issues in ticketing systems, ensuring SLA‑compliant updates and resolution.
• Automate network and risk workflows using Python or Ansible, leveraging YAML/JSON, REST APIs, and Git.
• Execute enterprise and operational risk frameworks; coordinate audits and regulatory responses, and use solutions such as Archer to track findings to sustainable closure.