Lead Infrastructure Engineer - DDI, IPv6
JPMorgan Chase · San Francisco, United States · 11d ago
Staff / Lead / PrincipalOn-siteDevOps, SRE & Infrastructure
Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we’re setting our businesses, clients, customers and employees up for success.
Assume a vital position as a key member of a high-performing team that delivers infrastructure and performance excellence. Your role will be instrumental in shaping the future at one of the world's largest and most influential companies.
As a Lead Infrastructure Engineer at JPMorganChase within the Enterprise Technology, network services team, you design, operate, and continuously improve enterprise DNS and IPv6 capabilities with a focus on reliability, security, and measurable service outcomes. You partner with infrastructure, application, and operations teams to deliver scalable network design, accurate name resolution, and strong diagnostics practices in a diverse, inclusive environment.
Job responsibilities
- Design enterprise DNS architectures and standards that support resilient, scalable name resolution across hybrid environments.
- Engineer IPv6 addressing plans and network designs using 128-bit formats, subnetting, and architecture patterns (e.g., GUA, ULA).
- Implement reverse DNS delegation for IPv6 using ip6.arpa zones and nibble-format delegation models.
- Execute IPv6 transition and mitigation approaches (e.g., Dual-Stack, NAT64, DNS64) aligned to application and network readiness.
- Operate core DNS services with an availability-first mindset, ensuring consistent performance and predictable change outcomes.
- Troubleshoot complex DNS and connectivity issues using disciplined diagnostics (e.g., dig, nslookup) across A vs. AAAA resolution paths.
- Analyze routing and protocol interactions impacting DNS and reachability, including TCP/IP layering and routing protocols (e.g., BGP, OSPFv3).
- Automate repeatable DNS and IPv6 operational tasks to reduce manual effort and improve consistency, auditability, and time-to-recovery.
- Document designs, runbooks, and troubleshooting playbooks that raise team effectiveness and reduce operational ambiguity.
- Uses enterprise-authorized AI capabilities within the work environment to accelerate infrastructure analysis and design documentation, validating outputs and handling operational data according to sensitivity and security requirements.
Applies reuse-first, AI-assisted practices within delivery and automation routines to identify recurring issues and validate remediation options, ensuring changes are traceable/auditable and aligned to resiliency and security expectations.
Required qualifications, capabilities, and skills
- Formal training or certification on Infrastructure engineering concepts and 5+ years applied experience
- Advanced DNS core competencies, including authoritative and recursive DNS concepts, record types, and operational best practices.
- IPv6 addressing & architecture fluency, including 128-bit address formats, subnetting, and network design with Global Unicast and Unique Local addressing.
- Reverse DNS delegation knowledge for IPv6 using ip6.arpa zones and nibble-format delegations (in contrast to IPv4 in-addr.arpa).
- Hands-on experience with IPv6 transition and mitigation mechanisms, including Dual-Stack, NAT64, and DNS64.
- Strong networking & diagnostics capability, including practical understanding of TCP/IP layers and how they intersect with DNS behavior.
- Working knowledge of routing protocols that interact with DNS reachability and traffic paths, including BGP and OSPFv3.
- Proven troubleshooting skills using tools such as dig and nslookup to debug resolution outcomes and validate connectivity across A vs. AAAA records.
- Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support infrastructure engineering workflows with strong validation habits and awareness of data sensitivity.
- Ability to review and validate AI-assisted recommendations before implementation, escalating when uncertain and ensuring outcomes align to resiliency, security, and auditability expectations
- Experience operating within controlled change environments, including planning, peer review, and documentation expectations.
Preferred qualifications, capabilities, and skills
- Proficiency with logging, telemetry, and visualization tools such as Splunk, SevOne, ThousandEyes, and Grafana.
- Strong presentation skills, including the ability to explain DNS/IPv6 concepts and operational risk in a crisp, stakeholder-friendly way.
- Experience building operational dashboards and service health indicators to improve transparency and proactive detection.
- Demonstrated ability to standardize and simplify complex network/DNS patterns into repeatable reference architectures.
FEDERAL DEPOSIT INSURANCE ACT: This position is subject to Section 19 of the Federal Deposit Insurance Act. As such, an employment offer for this position is contingent on JPMorganChase’s review of criminal conviction history, including pretrial diversions or program entries.