Senior Lead Infrastructure Engineer

We have an opportunity to impact your career and provide an adventure where you can push the limits of what's possible.

As a Senior Lead Infrastructure Engineer at JPMorgan Chase within the Employee Compute Architecture team , you will drive structured, adversarial-style product testing to uncover weaknesses, misconfigurations, and exploit paths in our employee compute ecosystem—spanning hardware, operating systems, images, agents, and management tooling. You will develop and execute test plans, reproduce and document exploit chains, and partner with engineering owners to validate fixes and hardening approaches. This is an internal product testing function focused on platform resilience and readiness for production at scale.

Responsibilities

• Lead end‑to‑end test campaigns on employee compute platforms, including desktops, laptops, virtual endpoints, OS builds, and gold images, to identify weaknesses, abuse paths, and misconfigurations before broad deployment.
• Evaluate endpoint agents and platform components (e.g., device management clients, posture and health checkers, logging/telemetry collectors, and controls such as CrowdStrike configurations) for stability, bypass paths, and failure modes under real‑world conditions.
• Design adversarial test cases and exploit simulations targeting privilege boundaries, persistence vectors, lateral‑movement opportunities, supply‑chain touchpoints, and software update paths—prioritizing practical, reproducible findings and measurable risk reduction.
• Build and maintain automated and semi‑automated test harnesses, including scripted lab environments and CI-integrated checks for regression and configuration drift.
• Apply AI-assisted techniques for discovery and validation of weaknesses, including prompt engineering and red‑team‑style use of LLMs (e.g., Claude, others) to enumerate misconfigurations, insecure defaults, and privilege escalation routes; assess and harden AI-related attack surfaces in endpoint workflows and tools.
• Partner with platform, imaging, and operations teams to triage, reproduce, and resolve issues; verify remediations and track closure through to improved baseline standards and deployment gates.
• Produce clear reports and artifacts (test plans, PoC steps, reproducibility scripts) that enable engineering teams to quickly understand impact and implement control improvements.
• Establish acceptance criteria and go/no-go thresholds for platform releases; contribute to standard configurations, hardening guides, and golden image content.
• Mentor a small group of testers/engineers; uplift testing rigor and knowledge across the broader Employee Compute community.

Required qualifications, skills, and capabilities

• 10 years in enterprise endpoint or platform engineering, product testing, or adversarial-style evaluation of infrastructure and software, with a focus on Windows and macOS endpoint ecosystems.
• Deep hands‑on experience with:
  • OS internals and hardening (Windows, macOS, or Linux), driver/extension models, and update lifecycles.
  • Enterprise imaging and provisioning (gold images, packaging, device enrollment, policy baselines), and configuration management at scale.
  • Endpoint agents and controls common to employee compute (e.g., CrowdStrike sensor deployment and policy tuning), logging/telemetry pipelines, and device health monitoring.
  • Scripting and automation (PowerShell, Python, Bash) to build repeatable tests, reproduce findings, and validate remediations.
• Demonstrated ability to craft and execute exploit simulations and abuse-case testing targeting privilege escalation, persistence, and lateral movement within endpoint and management stacks.
• Practical experience using AI/LLMs as accelerants for testing and discovery (e.g., prompt design to enumerate misconfigurations, generate attack paths, or review configurations), as well as familiarity with AI-related attack surfaces in endpoint workflows and tools.
• Strong communication skills with a track record of delivering clear, actionable test reports and partnering with platform owners to land fixes at scale in complex enterprises.