Senior IT Operations Engineer (R6117)

The Senior IT Systems Engineer builds, improves, and sustains classified infrastructure supporting engineering work. The role covers compute, virtualization, storage, networking, identity, endpoints, and security tooling in standalone and air-gapped environments.

This is a hands-on senior individual contributor position. Responsibilities include racking and imaging hardware, building and hardening systems, automating repeatable work, troubleshooting difficult issues, and helping establish technical standards across sites. The engineer must be comfortable working independently, shifting across infrastructure disciplines when needed, and owning work from design through testing, documentation, and support.

The role sits between IT operations and accreditation. Systems must be secure, reliable, and ready for review by ISSMs and government assessors. Correct implementation the first time, backed by complete documentation and technical evidence, is an expected part of every build.

Build and operate classified infrastructure

Deploy, configure, and sustain Windows Server and Red Hat Enterprise Linux systems, virtualization clusters, enterprise storage, and core infrastructure services in standalone and air-gapped enclaves.

Build and support VMware, Nutanix AHV/Prism, or similar virtualization environments. Nutanix experience is preferred.

Support high-density compute for AI/ML, simulation, and engineering workloads, including GPU node provisioning, performance troubleshooting, capacity planning, and coordination with facilities on rack space, power, and cooling.

Administer and support Active Directory, DNS, DHCP, Group Policy, PKI, certificate services, privileged access, and role-based access for isolated forests with no connection to corporate IT.

Build and maintain golden images and hardened baselines for servers, workstations, virtual desktops, and supporting infrastructure.

Manage patching, updates, software packages, and security content in disconnected environments through approved transfer and validation processes.

Administer backup, recovery, and continuity capabilities. Perform scheduled restore testing and document results and corrective actions.

Design, configure, and troubleshoot managed switching, VLANs, firewall rules, network segmentation, and approved network connections between facilities. Coordinate with network and security teams to maintain secure, supportable network standards.

Automate and standardize

Automate provisioning, configuration, patching, reporting, and compliance tasks using PowerShell, Ansible, Python, Terraform, or similar tools.

Create repeatable build processes, system baselines, checklists, and runbooks so systems can be deployed consistently rather than built by hand each time.

Improve existing processes by reducing manual steps, preventing common errors, and documenting effective methods for building and supporting systems.

Apply and validate DISA STIGs and SRGs using SCAP, STIG Viewer, ACAS/Nessus, scripted remediation, and other approved tools.

Maintain configuration-management records, as-built documentation, change records, and scan evidence so system configurations can be understood and defended later.

Review technical changes before production implementation, with attention to security, availability, rollback planning, and operational impact.

Support accreditation and security operations

Work with ISSMs, ISSOs, security teams, and program stakeholders to implement NIST SP 800-53, JSIG, RMF, and program-specific technical controls.

Provide technical documentation and evidence for authorization packages, continuous monitoring, assessments, and audits.

Implement and maintain audit logging and forwarding, including Elastic or similar centralized logging and SIEM tools.

Support vulnerability management through ACAS/Nessus scanning, findings triage, remediation planning, patching, and validation during approved maintenance windows.

Help resolve technical POA&M items and document remediation steps, validation results, and remaining risks.

Support approved media handling, file transfer, cross-domain processes, and contamination or spillage response alongside the security team.

Support users and sites

Act as a senior escalation point for classified IT issues that block engineering work or require deeper troubleshooting across multiple systems.

Identify and correct root causes rather than relying on repeated fixes or workarounds.

Support user-account, privileged-access, and workstation-access requests consistent with least privilege and separation-of-duties requirements.

Support new facility and enclave stand-ups from rack layout and cabling through infrastructure deployment, user onboarding, and operational handoff.

Mentor junior system administrators and site IT staff, review implementation work before production release, and help improve team standards.

Work independently, manage competing priorities, communicate risks early, and bring practical solutions to the team.

Strong hands-on experience with Windows Server, Active Directory, Group Policy, DNS, DHCP, PKI, and enterprise endpoint management.

Experience administering Red Hat Enterprise Linux or similar enterprise Linux systems.

Experience with VMware, Nutanix, Hyper-V, or similar enterprise virtualization platforms. Nutanix AHV/Prism experience is preferred.

Experience with enterprise storage, backup/recovery, and capacity planning.

Experience with managed switching, VLANs, firewall administration, network segmentation, and troubleshooting network connectivity.

Experience with PowerShell and infrastructure automation. Experience with Ansible, Python, Terraform, or similar tools is a plus.

Experience applying DISA STIGs, using SCAP/STIG Viewer, supporting ACAS/Nessus findings, and working in RMF, NIST SP 800-53, JSIG, or similarly regulated environments.

Experience operating in disconnected, air-gapped, classified, or highly controlled environments.

Ability to document work clearly, follow change control, validate results, and build systems that are easy for others to support.

Ability to work independently in a fast-moving environment, shift between infrastructure disciplines when needed, and make sound technical decisions without requiring detailed direction.

Nutanix AHV, Prism Central, Files, Flow, or cluster lifecycle management.

GPU server, AI/ML, simulation, VDI, or high-performance compute infrastructure.

Elastic, Splunk, or other centralized logging and SIEM platforms.

Disconnected WSUS, offline patching, software-repository management, or approved media-transfer workflows.

Data-center buildouts, rack-and-stack, structured cabling, power/cooling coordination, and new-facility stand-ups.

Relevant technical or security certifications, such as Security+, CISSP, RHCSA/RHCE, VMware VCP, Nutanix NCA/NCP, Microsoft certifications, or CCNA/CCNP.

#LI-KE1

#LC

Full-time regular employee offer package:

Pay within range listed + Bonus + Benefits + Equity

 

Temporary employee offer package:

Pay within range listed above + temporary benefits package (applicable after 60 days of employment)

 

Salary compensation is influenced by a wide array of factors including but not limited to skill set, level of experience, licenses and certifications, and specific work location. All offers are contingent on a cleared background and possible reference check. Military fellows and part-time employees are not eligible for benefits. Please speak to your talent acquisition representative for more information.

 

###

 

Shield AI is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, marital status, disability, gender identity or Veteran status. If you have a disability or special need that requires accommodation, please let us know.