Senior IT Systems Engineer

Position Description

This position will help define the next generation of the Laboratory's collateral enterprise computing environment, extending today's on-premises capabilities into a secure hybrid-cloud architecture that supports both enterprise services and research missions while operating at inspection level readiness.  

The Sr. Systems Engineer provides senior technical leadership for the design, evolution, and integration of the Laboratory's collateral enterprise computing environment. The position collaborates with team engineers to establish the technical vision and engineering direction necessary to deliver secure, resilient, scalable, and supportable enterprise capabilities across on-premises infrastructure, classified cloud environments, enterprise platforms, and research-facing services. 

The Sr. Systems Engineer serves as a technical authority across organizational and technology boundaries, translating mission and business requirements into enterprise-level technical direction and ensuring that individual technology investments contribute to a coherent long-term strategy. 

A significant near-term focus will be establishing the technical foundation required to expand the Laboratory's use of classified cloud capabilities, including AWS Secret Cloud for Industry (ASCI) and comparable classified cloud offerings, while integrating those capabilities with existing collateral enterprise services. This includes defining patterns for cloud connectivity, workload isolation, identity and access, shared services, logging and monitoring, DevSecOps, data movement, security boundaries, and the integration of research and enterprise workloads. 

The position works closely with infrastructure engineering, cybersecurity and information assurance, research organizations, enterprise applications, network engineering, cloud providers, and Laboratory leadership to establish technical standards and guide complex engineering decisions. 

Key Responsibilities

• Establish and maintain the target technical design for the Laboratory's collateral enterprise environment, spanning on-premises infrastructure, classified cloud, networking, compute, storage, identity, security, DevSecOps, observability, and enterprise services. 
• Lead the technical classified enterprise infrastructure and apply that experience to the integration of classified cloud capabilities into the Laboratory enterprise. 
• Define technical patterns for a hybrid classified environment, including the role of as the trusted on-premises enterprise access path to classified cloud services while enabling cloud workloads and services to operate within appropriately designed cloud environments. 
• Serve as a senior technical authority for collateral cloud systems engineering (in alignment with our unclassified cloud team), including the integration of AWS and future classified cloud capabilities into the Laboratory enterprise. 
• Develop technical designs that support distinct research and enterprise cloud environments, including appropriate segmentation and workload zones for research computing, enterprise IaaS, enterprise AI services, shared applications, and access to externally provided services. 
• Define the technical design for foundational cloud capabilities including network segmentation, VPC design, routing, firewalling, IAM, encryption/key management, centralized logging, monitoring, configuration management, security services, and workload isolation. 
• Establish reusable reference designs, engineering patterns, standards, and technical guardrails that enable engineering teams to implement solutions consistently without requiring each project to independently solve enterprise-level technical problems. 
• Partner with cybersecurity, information assurance, and authorization stakeholders to ensure technical decisions support applicable security requirements and authorization processes while avoiding unnecessary technical complexity. 
• Ensure classified-cloud technical design appropriately integrates with—or deliberately remains independent from—existing on-premises enterprise services such as identity, logging, monitoring, configuration management, software repositories, DevSecOps tooling, and security services. 
• Evaluate emerging technologies and vendor capabilities and determine their appropriate role within the collateral enterprise environment, distinguishing between tactical opportunities and capabilities suitable for enterprise adoption. 
• Lead technical design reviews for significant initiatives and identify technical risks, dependencies, technical debt, and integration requirements before implementation. 
• Collaborate with team and department leadership to Develop technical roadmaps that connect the current-state collateral environment to the desired future state, identifying sequencing, dependencies, foundational investments, and transition strategies. 
• Serve as a technical bridge between research organizations and enterprise IT, ensuring enterprise technical direction provides sufficient standardization and governance while preserving the flexibility necessary to support research and mission requirements. 
• Mentor senior engineers across technology domains and raise the overall level of systems thinking and engineering discipline within the organization. 

Minimum Qualifications

• 10-15 years of experience designing and operating complex enterprise or mission computing environments. 
• Demonstrated experience developing technical designs spanning multiple infrastructure and application technology domains. 
• Demonstrated experience establishing new classified or enterprise infrastructure environments, including governance and standardization across security domains. 
• Strong knowledge of hybrid-cloud technical design, including networking, compute, storage, identity, security, automation, and cloud-native services. 
• Experience with classified cloud approaches (e.g., AWS or comparable offerings) or hyperscale cloud environments more broadly. 
• Strong understanding of enterprise network design, segmentation, routing, firewalling, encryption, and secure connectivity. 
• Demonstrated ability to translate business, mission, cybersecurity, and operational requirements into scalable technical designs. 
• Experience developing technical standards, reference designs, technology roadmaps, and design-review processes. 
• Ability to communicate complex technical concepts to both technical audiences and senior leadership. 
• Demonstrated ability to influence technical direction across organizational boundaries without relying solely on direct organizational authority. 
• Ability to obtain and maintain the security clearance required for the position. 

Preferred Qualifications

• Experience designing or operating classified enterprise environments. 
• Experience with AWS Secret Cloud, AWS or other classified commercial cloud offerings. 
• Familiarity with NIST, RMF, DISA STIGs, Zero Trust principles, and authorization processes applicable to classified systems. 
• Experience integrating cloud and on-premises environments at enterprise scale. 
• Experience supporting both enterprise and research/mission computing environments. 
• Experience with modern DevSecOps practices, infrastructure automation, configuration management, CI/CD, and software supply-chain security. 
• Experience with technologies such as Linux, Ansible, GitHub/GitLab, JFrog, enterprise monitoring, configuration management, and cloud automation. 
• Experience with AI/ML infrastructure or managed AI services in controlled computing environments.