Enterprise Infrastructure Engineer (SME)

Location: Chantilly, VA
Security Clearance: Active TS or higher [Required]
Job Type: Full-Time
Target Salary Range*: $115,000 - $130,000

*This represents the potential salary range for this position depending on education level, years of experience and/or certifications in addition to other position specific requirements which may impact salary

The Enterprise Infrastructure Engineer (SME) serves as the principal authority for enterprise systems architecture, infrastructure modernization, and zero-trust security implementation. This role leads the design, automation, optimization, and governance of highly available infrastructure environments across complex, cross-enclave systems.

The position provides strategic and technical leadership for Infrastructure as Code, configuration management, disaster recovery, compliance automation, system administration, enterprise networking, virtualization, storage, monitoring, and infrastructure security while ensuring resilient, scalable, and secure operations.

• Serve as the principal authority for enterprise systems architecture and infrastructure modernization.
• Lead the design, automation, and optimization of highly available infrastructure environments.
• Optimize infrastructure for scalability, performance, resilience, and security across complex environments.
• Provide strategic technical leadership for enterprise security and operational resilience initiatives.

• Design, configure, and support Cisco switching, routing, firewalling, and site-to-site connectivity, including IPsec, DMVPN, and SD-WAN.
• Support Arista switching technologies.
• Configure and troubleshoot tunneling and VPN technologies, including GRE, IPsec, SSH, SSL, OpenVPN, WireGuard, and specialized multi-tiered applications.
• Support client-server VPNs, site-to-site VPNs, and ad hoc vendor or equipment integrations.
• Support virtual distributed switching within VMware, Proxmox, and Nutanix environments.

• Support VMware/Broadcom technologies, including ESXi/vSphere, vCenter, vSAN, VxRail, cluster management, and licensing.
• Configure and manage Proxmox hosts and clusters, networking, and Ceph environments.
• Configure and manage Nutanix hosts and clusters using Prism Central.
• Support Nutanix NDFS configuration and management.

• Support large-scale data storage technologies and platforms, including QNAP, Synology, TrueNAS, and NetApp.
• Support file transport protocols including Samba, SSH, SFTP, and NFS.

• Implement and support network-based and host-based monitoring and collection.
• Configure internal and external alerting, including SMTP-based notification mechanisms.
• Support active vulnerability scanning technologies such as Nessus.
• Support SIEM capabilities, including Splunk.
• Implement zero-trust security principles and cross-enclave interoperability solutions.

• Support Linux operating systems, including Rocky Linux, Red Hat, Amazon Linux, and Ubuntu.
• Support Windows and macOS environments.
• Administer identity and access management technologies, including IPA/FreeIPA, LDAP/OpenLDAP, Keycloak, and Linux SSSD host-based access control.
• Support applications and infrastructure components including Splunk and Nginx.

• Drive Infrastructure as Code and configuration management initiatives across the enterprise.
• Establish and enforce governance frameworks for disaster recovery and compliance automation.
• Guide teams on best practices for system administration, automation, infrastructure management, and secure operations.

• Bachelor’s degree. [Required]

• Minimum 10 years of relevant experience. [Required]
• Extensive experience supporting Windows, Linux, and hybrid-cloud environments. [Required]
• Expertise with Infrastructure as Code and configuration management tools such as Terraform, Ansible, Puppet, or Chef. [Required]
• Experience with cloud platforms including AWS, Azure, or Google Cloud. [Required]
• Strong experience with system monitoring, disaster recovery, backup solutions, and performance optimization. [Required]
• Proven experience leading enterprise infrastructure initiatives and technical teams. [Required]

• Deep understanding of enterprise security controls, compliance requirements, and infrastructure governance. [Required]
• Strong knowledge of scalable, highly available, and secure infrastructure design. [Required]
• Ability to provide strategic and technical leadership across complex enterprise infrastructure environments. [Required]

• Master’s degree in Information Technology, Computer Science, Cybersecurity, or a related field.
• Experience supporting federal, defense, intelligence, or highly regulated environments.
• Expertise in zero-trust architecture and secure infrastructure design.
• Experience with containerized platforms such as Docker and Kubernetes.
• Relevant certifications such as AWS Solutions Architect, Azure Administrator/Architect, RHCE, VMware, CISSP, or similar.
• Experience with DevSecOps, CI/CD pipelines, and enterprise automation frameworks.