Senior IT Systems Engineer

This is a fully remote position, open to applicants in California.

📋 Description

• Create and execute secure network architectures that safeguard Controlled Unclassified Information (CUI) and implement network segmentation in accordance with NIST SP 800-171.

• Develop and sustain infrastructure that complies with CMMC standards, incorporating access controls, encryption, monitoring, and audit logging.

• Formulate and update Scout's System Security Plan.

• Carry out network hardening, intrusion detection, and threat monitoring; oversee firewall configurations and VPN management.

• Design, deploy, and manage both cloud-based and on-premises infrastructure to support all Scout operations.

• Provision and oversee employee devices, ensuring timely OS patches, software updates, and hardware refresh cycles.

• Create and implement identity management systems with automated provisioning processes.

• Offer direct support for employee IT issues and assist in help desk ticket triage.

• Develop infrastructure-as-code solutions to streamline provisioning, configuration, and scaling.

• Write Python/Bash scripts to automate operational tasks and ensure compliance validation.

• Set up infrastructure monitoring, logging, and alerting as repeatable and auditable code.

• Design and execute automated backup procedures along with disaster recovery strategies.

• Address outages and security incidents; perform root-cause analysis and remediation efforts.

• Collaborate with the compliance team regarding CMMC requirements, audit preparation, and policy enforcement.

⛳️ Requirements

• Over 7 years of hands-on experience in network and infrastructure engineering within enterprise or defense settings.

• Experience with the implementation of CMMC and/or NIST SP 800-171.

• Proficiency in infrastructure-as-code methodologies.

• System administration skills across Linux, MacOS, and Windows; adept in working with various operating systems.

• Proficient in Python or Bash scripting with an automation-centric approach.

• Comprehensive understanding of network segmentation, access control, encryption, and compliance-oriented architecture.

• Experience in identity and access management.

• Strong documentation practices and keen attention to detail.

• Exceptional communication abilities; capable of conveying technical decisions to both technical and non-technical audiences.

• Experience in startup or scale-up infrastructure environments.

• Background in developing internal tools or scripts that enhance operational efficiency.

• Must be a U.S. Person due to the necessity of accessing U.S. export-controlled information or facilities.

• A strong commitment to the defense of the United States and its allies.

• May be required to obtain and maintain a U.S. Top Secret security clearance.

🏝️ Benefits

• Competitive compensation package that includes a base salary and performance bonuses.

• Meaningful equity opportunities.

• Comprehensive medical, dental, and vision plans with no paycheck contributions required.

• Competitive paid time off (PTO) and a generous company holiday schedule.

• Daily catered lunches and a fully stocked kitchen.

• Electric vehicle (EV) charging facilities available.

• Relocation assistance provided (subject to role eligibility).

• Comprehensive, top-tier benefits for full-time employees.