Director of Infrastructure Engineering - Firewall Services

Job summary

As a Director of Infrastructure Engineering for Firewall Services at JPMorganChase, you'll lead the engineering, automation and operations of one of the largest and most important network security estates in financial services. You'll own the strategy and delivery for firewall platforms across data centers, campus, and public cloud. That covers Palo Alto Networks and Fortinet on-premises, plus Azure and AWS native and virtual firewalls. You'll also shape the firm's move toward Zero Trust Network Access (ZTNA) and integrated Security Service Edge (SSE) capabilities. You'll use advanced technical knowledge to solve complex problems and make independent decisions within general guidelines. You'll also build a high-performing team that executes quickly, works at scale, and holds a very high bar for resiliency, security, and control.

At a world-renowned company like JPMorganChase, you can take the lead in shaping the future of technology, unleash your full potential, and make your mark on the industry.

Job Responsibilities

• Lead Firewall Services engineering and operations across on‑prem and public cloud, partnering with Network, Cloud, Cybersecurity, and Identity teams to deliver secure, reliable, scalable connectivity.
• Own the multi‑year strategy and roadmap for firewall services, segmentation, and Zero Trust enforcement, translating it into measurable outcomes (SLOs, change lead time, automation coverage, policy hygiene, and audit results).
• Drive delivery of large, complex initiatives (platform modernization, migrations, cloud expansion, resiliency uplift), ensuring on-time execution and controlled risk.
• Own Palo Alto Networks and Fortinet platform architecture, standards, lifecycle management, and global fleet health (HA design, upgrades, capacity, stability, break/fix).
• Run firewall policy and rule management at enterprise scale: intake, design, risk-based review/approval, recertification, evidence, audits, and continuous cleanup of unused/overly permissive rules.
• Build automation and orchestration at scale using APIs and CI/CD to standardize change workflows, reduce manual effort, and improve speed and quality (policy-as-code / infrastructure-as-code where applicable).
• Deliver consistent firewall capabilities across Azure and AWS (native and virtual firewall patterns), including centralized governance and repeatable deployment blueprints.
• Define and advance a ZTNA vision and integrate it with on‑prem SSE capabilities and firewall enforcement points to enable identity- and application-aware access.
• Establish logging, telemetry, and monitoring standards for the firewall estate; ensure high-fidelity data feeds to security operations (SIEM/detection/forensics) and operational dashboards.
• Manage senior stakeholders and ensure delivery aligns to compliance, risk, security, and service requirements, with clear governance, reporting, and escalation.
• Build and develop a high-performing team and culture: strong operational rigor, fast execution, continuous improvement, and open-minded, evidence-based decision making.

Preferred Qualifications, Capabilities, and Skills

• Hands-on delivery experience implementing ZTNA and/or SSE/SASE capabilities in a hybrid environment (on‑prem + cloud), integrating with firewall policy and identity signals.
• Experience with firewall policy management/analysis platforms (e.g., Tufin, AlgoSec, FireMon) and related governance processes.
• Experience with micro-segmentation and identity-aware access patterns (workload tagging, posture/context signals, least privilege).
• Strong observability tooling experience (e.g., Splunk, Elastic, Grafana) including telemetry pipelines and operational analytics.
• Relevant certifications (e.g., PCNSE, Fortinet NSE 7/8, AWS Advanced Networking, Azure Network Engineer).
• Experience operating in highly regulated environments with audit/regulatory engagement and evidence-ready controls.
• Proven track record leading large-scale transformations with measurable improvements in reliability, speed of change, and security posture.