Lead Infrastructure Engineer - Proxy/SSE Network Security
JPMorgan Chase7 hours ago
London, United KingdomStaff+
Responsibilities
- Design, develop, troubleshoot, review, and debug secure production network security software.
- Architect and implement Zero Trust Network Access, identity-aware proxy, secure web gateway, policy enforcement, segmentation, and secure egress patterns.
- Integrate or operate proxy and SSE capabilities such as URL filtering, TLS inspection, malware protection, sandboxing, egress controls, and DNS security.
- Own the US perimeter, proxy, and SSE engineering roadmap, including prioritization, dependencies, delivery governance, and stakeholder alignment.
- Define standards, reference architectures, reusable engineering patterns, and operational guardrails for perimeter and egress controls.
- Provide engineering leadership across Cisco and Arista edge environments, Equinix Fabric, AWS Direct Connect, AWS PrivateLink, and related cloud-adjacency patterns.
- Establish governance for remediation, exceptions, risk acceptance, auditability, traceability, and risk-reduction reporting.
- Lead incident, change, problem-management, observability, resilience validation, automation, lifecycle management, and modernization activities.
- Supervise engineers and coordinate cross-team remediation, modernization, and platform programs.
- Lead responsible adoption of approved AI-assisted engineering tools, including validation of outputs for correctness, performance, and security.
Requirements
- Proven experience in network security, SASE/SSE, identity security, or security engineering, or equivalent depth.
- Strong understanding of Zero Trust principles, policy-based access, segmentation, secure egress, network and perimeter security architecture, encryption, routing, and access-control patterns.
- Hands-on experience with forward proxy, reverse proxy, identity-aware proxy, gateway architectures, and secure internet access controls.
- Deep knowledge of SAML, OIDC, OAuth 2.0, JWT signing and verification, JWK rotation, scopes, claims, and replay protection.
- Experience designing, delivering, or operating enterprise-scale proxy and SSE capabilities and translating security requirements into deployable patterns and guardrails.
- Experience leading regional infrastructure or security platform execution in the US or North America, including prioritization, coordination, and operational accountability.
- Experience supervising engineers and delivering cross-team remediation, modernization, or platform programs.
- Experience with Cisco and Arista environments, Equinix Fabric, AWS Direct Connect, and AWS PrivateLink.
- Experience using and coaching teams on approved AI-assisted development tools, secure validation of AI outputs, and responsible handling of sensitive data.
- Preferred experience integrating regional requirements into global standards, leading AI-threat-informed remediation, building security governance programs, operating externally facing security services, and designing hybrid multi-cloud edge architectures.
- Security certifications such as CISSP or CCSP are preferred.
Categories
About JPMorgan Chase
JPMorgan Chase provides consumer and commercial banking, payments, credit card, wealth management, and corporate and investment banking services to individuals, businesses, institutions, and governments. The public company (NYSE: JPM) earns revenue from interest, fees, trading, and asset management across operations in more than 100 markets. Headquartered in New York City with roots dating to 1799, it serves retail customers and prominent corporate and government clients through brands including Chase and J.P. Morgan.