Role overview

The Principal IT Systems Administrator is the most senior individual contributor on the IT Systems team, setting technical direction for core platforms, endpoints, networks, and security within IT Operations. This role drives reliability, scalability, and automation.

You will lead complex initiatives, serve as a top escalation point, and partner across the business to ensure infrastructure and endpoints enable productivity while meeting security and compliance needs.

What you'll do

• System Configuration & Administration: Design and implement complex configurations for core IT platforms (identity, collaboration, infrastructure, SaaS). Establish configuration management, lead performance/reliability improvements, and automate repetitive tasks.
• Workspace & Endpoint Management: Design enterprise-wide endpoint strategies (macOS, Windows, mobile). Develop and enforce security policies, automate software/OS deployments via MDM/EMM, and own compliance reporting.
• Network & Infrastructure: Design and implement complex network configurations (LAN/WAN/Wi-Fi/VPN/voice) for scalability and security. Maintain monitoring, automate network management, and lead infrastructure projects (e.g., migrations, new site buildouts).
• Security Engineering & Operations: Define and drive security strategies within IT Systems (identity, access, endpoints, networks). Integrate security tools (SSO/MFA, EDR, DLP), enforce access policies, and act as a technical lead during critical security incidents.
• Incident Management & Reliability: Define and implement incident response strategies, lead Post-Incident Reviews (PIRs) to drive corrective action, develop runbooks, and oversee on-call rotations.
• Documentation & Knowledge Management: Define documentation standards (architecture, SOPs, runbooks) and ensure knowledge bases are accurate, comprehensive, and easily discoverable.

What you'll bring

• Extensive experience (typically 8+ years) in IT systems engineering/administration, with significant time in senior/lead roles on enterprise-scale environments.
• Deep expertise in: Core IT systems (identity, collaboration, directory), Endpoint management (MDM/EMM, lifecycle), Network infrastructure (switching, routing, VPN), and Security controls (EDR, SSO/MFA).
• Demonstrated ability to design complex configurations, lead large cross-functional projects, and influence architectural decisions.
• Strong automation mindset and proficiency with scripting/infrastructure-as-code (Python, PowerShell, Terraform).
• Proven track record leading major incidents and PIRs.
• Excellent cross-functional collaboration and communication skills, comfortable engaging all levels.
• Experience in environments with security, regulatory, or audit requirements (SOC 2, SOX).
• A bias toward ownership, documentation, and mentorship.

Nice to have: Experience in a high-growth SaaS or technology company, familiarity with CarGurus tools (Okta, Google Workspace/M365, Jamf, Intune), and experience partnering with Security Engineering and GRC.

ABOUT THE TEAM

Anduril Intelligence Systems (AIS) is a lead provider of highly specialized engineering products for Intelligence Community (IC) customers. We work within the IC to understand their requirements and shape concepts of operation. We design, develop, and deliver exquisite capability across their mission set using commercially available and custom hardware and software. We provide critically needed capabilities that address our customers’ most pressing national security requirements. 

ABOUT THE JOB

If you are a Senior Software Engineer with strong software development expertise and DevOps capabilities supporting mission-critical infrastructure products in air-gapped and security-hardened environments, this role is for you. This hybrid role bridges software engineering and site reliability engineering, requiring both the ability to understand, modify, and extend complex internal infrastructure codebases and the DevOps knowledge to deploy, configure, and maintain these systems in disconnected environments.

As the software engineer closest to our customers and deployment environments, you will work at the intersection of product development and operations. You'll have access to core product codebases and will make targeted modifications to support air-gapped deployments, while collaborating closely with commercial product teams to ensure feature parity and reliability.

This role demands a "Whatever It Takes" mindset—you'll need to be equally comfortable debugging C++ code, designing Terraform configurations, troubleshooting networking issues in classified environments, and building automation tooling to scale deployments

WHAT YOU’LL DO

Software Development:

• Access and modify core infrastructure product codebases (C++, Python, or similar languages) to enable functionality in air-gapped and sovereign cloud environments
• Debug production issues in infrastructure software, identify root causes, and implement fixes that work within disconnected network constraints
• Collaborate with commercial product teams to understand upcoming features, assess air-gap compatibility, and close parity gaps between commercial and air-gapped deployments
• Write clean, well-tested, and well-documented code that passes security reviews and maintains system reliability

DevOps & Infrastructure Management:

• Own end-to-end deployment of infrastructure products in air-gapped environments, from initial provisioning through production operations
• Configure and optimize Linux systems, containerized environments (Docker/Kubernetes), and networking for mission-critical applications
• Build automation solutions to eliminate manual toil in deployment, configuration management, and system updates

Monitoring, Observability & Reliability:

• Create custom metrics and dashboards to track system health, performance, and security in disconnected environments
• Perform data-driven root cause analysis on complex distributed systems to identify and resolve reliability issues

Cross-Team Collaboration:

• Work with commercial product teams to advocate for air-gap-friendly architectures and flag deployment challenges
• Collaborate across multiple teams to plan feature integration, test complex functionality, and coordinate releases
• Contribute to establishing deployment best practices and reusable patterns across product lines
• Document deployment procedures, architectural decisions, and troubleshooting guides for knowledge sharing

REQUIRED QUALIFICATIONS

• Strong engineering background from industry or school, ideally in areas/fields such as Computer Science, Software Engineering, Mathematics, or Physics.
• Experience with C/C++, Go, and other common Object-Oriented languages – C/C++ strongly preferred.
• Demonstrated experience modifying and debugging large, complex codebases with minimal oversight.
• Strong Linux systems administration skills, including system configuration, performance tuning, and troubleshooting.
• Hands-on experience with containerization (Docker) and container orchestration (Kubernetes).
• Experience with CI/CD pipelines and build systems (GitHub Actions, Azure DevOps, Jenkins, or similar)
• Networking knowledge including TCP/IP, DNS, routing, firewalls, and troubleshooting connectivity issues
• Experience working in constrained or air-gapped development environments and understanding the unique challenges they present
• Ability to quickly understand and navigate complex systems and established code bases
• Strong problem-solving skills with ability to solve complex technical problems with little oversight
• Excellent written and verbal communication skills for technical documentation and stakeholder engagement
• Currently possesses and is able to maintain an active U.S. Top Secret security clearance.

PREFERRED QUALIFICATIONS

• Experience supporting infrastructure software (databases, orchestration systems, command & control platforms, etc.) in production environments
• Cloud platform expertise (Azure, AWS, GCP – AWS strongly preferred) with understanding of sovereign/government cloud environments
• Experience with monitoring and observability tools such as Grafana, Prometheus, ELK Stack, Azure Data Explorer, Splunk, or Datadog
• Scripting and automation expertise in Python, Bash, or PowerShell for operational efficiency
• Understanding of distributed systems architecture and debugging techniques
• Experience with security scanning, compliance automation, and secrets management in secure environments

ABOUT THE TEAM
Anduril Intelligence Systems (AIS) is focused on positioning Anduril as a lead provider of specialized engineering and products for Intelligence Community (IC) customers. We work within the IC to understand their requirements, shape their concepts of operation, and deliver exquisite capability across their problem set. We aim to develop and deploy critically needed capabilities that address our customers’ most pressing national security requirements.

WHAT YOU’LL DO:
We are looking for a DevOps Engineer to join our rapidly growing AIS team in Reston, VA. In this role, you will be responsible for automating the software delivery and operations across multiple classified programs. You will help guide the development and implementation of robust DevOps strategies, practices and tools. This will require hands on experience with Infrastructure as Code tools Ansible or Teraform, experience building and managing Virtual Machines, and experience orchestrating builds while understanding containers. 

• Help guide the development and implementation of robust DevOps strategies, practices, and tools.
• Collaborate with cross-functional teams to integrate DevOps best practices into the software development lifecycle.
• Design, deploy, and manage automated testing and deployment processes.
• Implement approaches to deploying and operating software on air-gapped and isolated networks.
• Create, tune, and maintain continuous integration/continuous delivery (CI/CD) pipelines.
• Integrate open source, commercial, and Anduril-internal tooling to create effective solutions for software delivery
• Provide expertise in containerization and orchestration technologies (e.g., Docker, Kubernetes).
• Implement and manage infrastructure as code (IaC) using tools such as Terraform or Ansible, etc.
• Monitor and enhance system reliability, performance, and security.

MUST HAVE REQUIREMENTS:

• Bachelor's degree in Computer Science, Engineering, or related field.
• Currently possesses and is able to maintain an active U.S. Top Secret SCI security clearance
• Proven experience in a DevOps role, demonstrating initiative and innovation.
• Proficiency in scripting languages such as Python, Bash, or PowerShell.
• Strong expertise in CI/CD tools (e.g., Jenkins, GitLab CI, Travis CI, Circle CI, Argo CD).
• In-depth knowledge of version control systems (e.g., Git).
• Experience with IaC tools (e.g., Ansible, Terraform, Puppet, Chef).
• Hands-on experience deploying and managing software in air-gapped environments.
• Solid understanding of networking, security, and system administration.
• Excellent problem-solving and communication skills.

PREFERRED QUALIFICATIONS:

• Certifications such as AWS Certified DevOps Engineer, Docker Certified Associate, or Kubernetes Administrator.
• Experience with microservices architecture.
• Familiarity with monitoring and logging tools (e.g., Prometheus, ELK stack).
• Knowledge of Agile methodologies.

ABOUT THE TEAM
Anduril Intelligence Systems (AIS) is focused on positioning Anduril as a lead provider of specialized engineering and products for Intelligence Community (IC) customers. We work within the IC to understand their requirements, shape their concepts of operation, and deliver exquisite capability across their problem set. We aim to develop and deploy critically needed capabilities that address our customers’ most pressing national security requirements.

WHAT YOU’LL DO:
We are looking for a DevOps Engineer to join our rapidly growing AIS team in Reston, VA. In this role, you will be responsible for automating the software delivery and operations across multiple classified programs. You will help guide the development and implementation of robust DevOps strategies, practices and tools. This will require hands on experience with Infrastructure as Code tools Ansible or Teraform, experience building and managing Virtual Machines, and experience orchestrating builds while understanding containers. 

• Help guide the development and implementation of robust DevOps strategies, practices, and tools.
• Collaborate with cross-functional teams to integrate DevOps best practices into the software development lifecycle.
• Design, deploy, and manage automated testing and deployment processes.
• Implement approaches to deploying and operating software on air-gapped and isolated networks.
• Create, tune, and maintain continuous integration/continuous delivery (CI/CD) pipelines.
• Integrate open source, commercial, and Anduril-internal tooling to create effective solutions for software delivery
• Provide expertise in containerization and orchestration technologies (e.g., Docker, Kubernetes).
• Implement and manage infrastructure as code (IaC) using tools such as Terraform or Ansible, etc.
• Monitor and enhance system reliability, performance, and security.

MUST HAVE REQUIREMENTS:

• Bachelor's degree in Computer Science, Engineering, or related field.
• Currently possesses and is able to maintain an active U.S. Top Secret SCI security clearance
• Proven experience in a DevOps role, demonstrating initiative and innovation.
• Proficiency in scripting languages such as Python, Bash, or PowerShell.
• Strong expertise in CI/CD tools (e.g., Jenkins, GitLab CI, Travis CI, Circle CI, Argo CD).
• In-depth knowledge of version control systems (e.g., Git).
• Experience with IaC tools (e.g., Ansible, Terraform, Puppet, Chef).
• Hands-on experience deploying and managing software in air-gapped environments.
• Solid understanding of networking, security, and system administration.
• Excellent problem-solving and communication skills.

PREFERRED QUALIFICATIONS:

• Certifications such as AWS Certified DevOps Engineer, Docker Certified Associate, or Kubernetes Administrator.
• Experience with microservices architecture.
• Familiarity with monitoring and logging tools (e.g., Prometheus, ELK stack).
• Knowledge of Agile methodologies.

Overview

Instacart’s IT organization empowers every employee to work securely, reliably, and at scale. We’re looking for a Senior Corporate Engineer II to own and evolve our security-critical workforce platforms, including our Okta identity platform, device trust program, and office networks across San Francisco, New York City, and Toronto. Your work will directly impact every Instacart employee and partner by ensuring seamless, safe access to the tools we rely on every day.

You’ll collaborate closely with Security Engineering, Enterprise Applications, Workplace, Compliance, and our Help Desk teams to ship automation, harden our posture, and raise operational reliability. This is a hands-on role in a fast-paced, ever-changing environment—ideal for someone who thrives in ambiguity, rolls up their sleeves to solve complex problems, and brings sound architectural judgment to high-stakes systems.

We are a dynamic team that loves tackling unique scenarios while building solutions that are scalable and secure. The role is remote-friendly within North America, with a preference for candidates in the Pacific Time Zone and the San Francisco Bay Area. Occasional travel to Instacart offices may be required (up to 10%).

About the Job

• Own the architecture, security, and day-to-day operations of our enterprise Okta tenant, including delivery of Okta Identity Governance (OIG), lifecycle management, SCIM provisioning, SSO integrations (SAML/OIDC), MFA, risk-based policies, and device trust.
• Design and maintain Infrastructure-as-Code for identity and access using Terraform, building reusable modules, guardrails, and automated workflows integrated with HRIS and ITSM systems to achieve least-privilege and timely provisioning/deprovisioning.
• Architect, operate, and continuously improve Instacart’s office network infrastructure (firewalls, routing/switching, wireless) across SF, NYC, and Toronto; drive zero-trust segmentation, observability, capacity planning, and vendor/partner management.
• Lead and participate in incident response for identity and network events, drive rapid mitigation and root-cause analysis, and implement durable remediations through post-incident reviews and change management.
• Standardize and execute certificate and key lifecycles for SAML/TLS across SaaS applications; eliminate manual toil with scripting and robust runbooks that increase reliability and auditability.
• Partner with Security and Compliance to meet controls and audit needs (e.g., access reviews, evidence collection), improve access risk management, and unlock license savings via automated revocation and right-sizing.
• Mentor teammates, elevate documentation and operational excellence, and help shape the roadmap by prioritizing high-impact work in a rapidly evolving environment.

About You

Minimum Qualifications

• 7+ years of experience in corporate IT engineering or a related field with a focus on identity and access management (IAM) and enterprise networking.
• 3+ years of hands-on administration of Okta in production (1,000+ users), including SSO integrations (SAML/OIDC), SCIM provisioning, MFA, and policy design.
• 2+ years implementing identity governance and automation using Okta Workflows, Okta Identity Governance (OIG), or an equivalent IGA platform.
• Proficiency with Infrastructure-as-Code and automation: Terraform (required) and at least one scripting language (Python, Bash, or PowerShell).
• Demonstrated experience planning and executing certificate rotations and key management for SAML/TLS across multiple SaaS applications.
• Hands-on experience operating and troubleshooting office network infrastructure (switching, routing, wireless, firewalls) and VPN/zero-trust access using technologies such as Cisco/Meraki, Aruba, and Palo Alto.
• Proven track record leading critical incidents and executing structured change management, including authoring runbooks and conducting post-incident reviews.
• Working knowledge of endpoint management and device trust (e.g., Jamf, Kandji, Intune) and integrating device posture into access controls.
• Bachelor’s degree in Computer Science, Engineering, Information Systems, or equivalent practical experience.

Preferred Qualifications

• Okta certifications (Administrator, Professional, or Consultant) and/or networking/security certifications (e.g., CCNP, PCNSE).
• Experience building Git-based CI/CD pipelines for identity and network automation (e.g., GitHub Actions, CircleCI) and implementing policy-as-code.
• Familiarity with compliance frameworks and audits (SOX, SOC 2, ISO 27001) and hands-on experience running access reviews and evidence collection.
• Experience administering Google Workspace and/or Microsoft 365 identity and security configurations at scale.
• Exposure to secrets management and PKI (e.g., HashiCorp Vault, AWS KMS) and log/monitoring platforms (e.g., Datadog, Splunk).
• Strong cross-functional communication skills and experience leading complex, multi-stakeholder projects from scoping through delivery.

#LI-Remote

Overview

Instacart’s IT organization empowers every employee to work securely, reliably, and at scale. We’re looking for a Senior Corporate Engineer II to own and evolve our security-critical workforce platforms, including our Okta identity platform, device trust program, and office networks across San Francisco, New York City, and Toronto. Your work will directly impact every Instacart employee and partner by ensuring seamless, safe access to the tools we rely on every day.

You’ll collaborate closely with Security Engineering, Enterprise Applications, Workplace, Compliance, and our Help Desk teams to ship automation, harden our posture, and raise operational reliability. This is a hands-on role in a fast-paced, ever-changing environment—ideal for someone who thrives in ambiguity, rolls up their sleeves to solve complex problems, and brings sound architectural judgment to high-stakes systems.

We are a dynamic team that loves tackling unique scenarios while building solutions that are scalable and secure. The role is remote-friendly within North America, with a preference for candidates in the Pacific Time Zone and the San Francisco Bay Area. Occasional travel to Instacart offices may be required (up to 10%).

About the Job

• Own the architecture, security, and day-to-day operations of our enterprise Okta tenant, including delivery of Okta Identity Governance (OIG), lifecycle management, SCIM provisioning, SSO integrations (SAML/OIDC), MFA, risk-based policies, and device trust.
• Design and maintain Infrastructure-as-Code for identity and access using Terraform, building reusable modules, guardrails, and automated workflows integrated with HRIS and ITSM systems to achieve least-privilege and timely provisioning/deprovisioning.
• Architect, operate, and continuously improve Instacart’s office network infrastructure (firewalls, routing/switching, wireless) across SF, NYC, and Toronto; drive zero-trust segmentation, observability, capacity planning, and vendor/partner management.
• Lead and participate in incident response for identity and network events, drive rapid mitigation and root-cause analysis, and implement durable remediations through post-incident reviews and change management.
• Standardize and execute certificate and key lifecycles for SAML/TLS across SaaS applications; eliminate manual toil with scripting and robust runbooks that increase reliability and auditability.
• Partner with Security and Compliance to meet controls and audit needs (e.g., access reviews, evidence collection), improve access risk management, and unlock license savings via automated revocation and right-sizing.
• Mentor teammates, elevate documentation and operational excellence, and help shape the roadmap by prioritizing high-impact work in a rapidly evolving environment.

About You

Minimum Qualifications

• 7+ years of experience in corporate IT engineering or a related field with a focus on identity and access management (IAM) and enterprise networking.
• 3+ years of hands-on administration of Okta in production (1,000+ users), including SSO integrations (SAML/OIDC), SCIM provisioning, MFA, and policy design.
• 2+ years implementing identity governance and automation using Okta Workflows, Okta Identity Governance (OIG), or an equivalent IGA platform.
• Proficiency with Infrastructure-as-Code and automation: Terraform (required) and at least one scripting language (Python, Bash, or PowerShell).
• Demonstrated experience planning and executing certificate rotations and key management for SAML/TLS across multiple SaaS applications.
• Hands-on experience operating and troubleshooting office network infrastructure (switching, routing, wireless, firewalls) and VPN/zero-trust access using technologies such as Cisco/Meraki, Aruba, and Palo Alto.
• Proven track record leading critical incidents and executing structured change management, including authoring runbooks and conducting post-incident reviews.
• Working knowledge of endpoint management and device trust (e.g., Jamf, Kandji, Intune) and integrating device posture into access controls.
• Bachelor’s degree in Computer Science, Engineering, Information Systems, or equivalent practical experience.

Preferred Qualifications

• Okta certifications (Administrator, Professional, or Consultant) and/or networking/security certifications (e.g., CCNP, PCNSE).
• Experience building Git-based CI/CD pipelines for identity and network automation (e.g., GitHub Actions, CircleCI) and implementing policy-as-code.
• Familiarity with compliance frameworks and audits (SOX, SOC 2, ISO 27001) and hands-on experience running access reviews and evidence collection.
• Experience administering Google Workspace and/or Microsoft 365 identity and security configurations at scale.
• Exposure to secrets management and PKI (e.g., HashiCorp Vault, AWS KMS) and log/monitoring platforms (e.g., Datadog, Splunk).
• Strong cross-functional communication skills and experience leading complex, multi-stakeholder projects from scoping through delivery.

#LI-Remote

CyberSheath Services International LLC is a rapidly growing Managed Services Provider primarily focused on providing CMMC Compliance and Cybersecurity services to the Defense Industrial Base (DIB). We are excited to be expanding our staff due to our growth and are looking to add to our team!   

CyberSheath integrates compliance and threat mitigation efforts and eliminates redundant security practices that don’t improve and, in fact, may weaken an organization’s security posture. Our professionals advise clients where to stop spending, where to invest, and how to take what they are already doing and integrate it in a way that delivers improved security.    

Successful candidates for CyberSheath are self-motivated, think out of the box, work, and solve issues independently. Confident, ‘doers’ who ‘get the job done’ and strive to ‘do the right thing, even when no one is looking’ are the types of candidates who thrive in our culture.  Additionally, our most successful team members are self-starters and willing to put on many hats to succeed. CyberSheath is fast-growing and seeks candidates who want to be part of our upward trajectory.   

We are seeking a Compliance Engineer who will be responsible for implementing and maintaining the technical security controls required under the Cybersecurity Maturity Model Certification (CMMC). This individual will work in close partnership with our dedicated compliance team to ensure that our organization and our clients adhere to all relevant standards, frameworks, and best practices.  

As the CMMC Compliance-Focused Engineer, you will be both a strategic partner and a hands-on contributor—collecting evidence of compliant work, configuring IT/security systems, and guiding internal teams on best practices. You will also interface directly with our clients, supporting formal CMMC audits and providing expert input on technical compliance measures.  

Key Responsibilities  

CMMC Implementation & Maintenance  

• Implement, configure, and maintain security controls in line with CMMC requirements (e.g., GPOs, M365 tenant hardening, Intune, Conditional Access, Defender for Endpoint, SIEM).  

• Collaborate with internal and external stakeholders to ensure ongoing compliance with CMMC standards.  

• Serve as the internal subject matter expert on CMMC-related technical questions and processes.  

Technical Configuration & Operations  

• Design and deploy secure configurations for Microsoft 365, Azure, Azure Virtual Desktop, and the Microsoft Defender XDR suite.  

• Manage security baselines, conditional access policies, and monitoring/alerting configurations.  

• Coordinate with IT operations and security teams to remediate vulnerabilities and align with compliance objectives.  

Hands-On Infrastructure & Security Tools  

• Utilize Active Directory, firewalls, and related security or network tools to ensure compliance and gather logs/artifacts as evidence.  

• Demonstrate the ability to log in, review configurations, and interpret outputs (e.g., system events, access logs, firewall logs) to support compliance documentation.  

• Work with cross-functional teams to update and maintain security configurations that align with CMMC requirements.  

Compliance Evidence & Artifact Collection  

• Gather, document, and maintain the artifacts necessary to demonstrate compliance (system configurations, implementation records, access control logs, and related evidence).  

• Collaborate with cross-functional teams (IT, Security, DevOps) to validate and record operational and security processes in compliance with CMMC.  

Audit Support & Client Engagement  

• Provide expert guidance and support during client-facing CMMC audits, which may include up to 25% travel.  

• Communicate technical aspects of CMMC controls and remediation strategies clearly to both technical and non-technical audiences.  

• Represent the organization’s CMMC posture to external auditors, clients, and partners.  

Flexible Schedule & After-Hours Work  

• Execute security or IT controls that must take place outside standard business hours (e.g., evenings or weekends) to minimize disruption to production environments.  

• Coordinate with relevant teams to schedule and perform critical updates or implementations that require off-peak windows.  

• Document changes, communicate outcomes, and ensure smooth transitions back to normal operations.  

Continuous Improvement & Collaboration  

• Stay current on emerging threats, security trends, and CMMC updates; integrate these insights into ongoing compliance efforts.  

• Work closely with the dedicated compliance function to define, refine, and improve internal processes that align with CMMC requirements.  

• Identify opportunities to streamline technical controls, automate evidence collection, and enhance security posture.  

Qualifications & Skills  

Required Experience:  

• Proven experience (3–5+ years) in implementing and managing technical security controls in Microsoft-focused environments.  

• Hands-on experience with:  

• • Microsoft 365 Administration & Security (tenant hardening, identity & access management, conditional access)  

• • Azure & Azure Virtual Desktop (security configuration, monitoring, role-based access control)  

• • Microsoft Defender XDR Suite (Defender for Endpoint, Defender for Office 365, etc.)  

• • Group Policy Objects (GPOs) and Intune for device and application management  

• • Active Directory (managing user/groups, reviewing logs, applying group policies)  

• • Firewalls (configuring rules, reviewing logs, interpreting firewall outputs)  

• Demonstrated track record of working with CMMC controls or similar regulatory/compliance frameworks (e.g., NIST 800-171, DFARS).  

• Strong understanding of SIEM tools and security incident management workflows.  

Technical & Professional Skills:  

• Excellent written and verbal communication skills, with the ability to present technical concepts to diverse audiences.  

• Proficiency in scripting or automating compliance evidence gathering (e.g., PowerShell) is a plus.  

• Strong organizational and project management skills, with an emphasis on attention to detail and follow-through.  

• Ability to work independently as well as collaboratively in a cross-functional team environment.  

• Willingness to work outside normal business hours when required.  

Certifications (Preferred):  

• Security+, CISSP, CISM, or similar professional security certifications.  

• Microsoft 365 and/or Azure certifications (e.g., MS-500, AZ-500) highly desirable.  

• Any CMMC-specific certifications or proven training credentials.  

Soft Skills:  

• Customer-focused mindset and client-facing experience.  

• Ability to balance technical depth with broader compliance and business considerations.  

• Self-starter with a proactive approach to identifying and solving compliance challenges.  

Work Environment   

• 100% Remote work environment with occasional (25%) travel to client sites   

CyberSheath is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender identity, national origin, age, protected veteran status, among other things, or status as a qualified individual with a disability.   

Team Description:

For Neuralink's Information Technology team, the corporate environment is production. It is where our groundbreaking research and development takes place and hosts our assembly lines, neural recording training and processing, and many other functions. The team builds critical systems and processes that safely accelerate our progress along the company's critical path.

Job Description and Responsibilities:

Neuralink is looking for a hands-on IT Systems Administrator to own the day-to-day technology experience for every employee at the company. You will be responsible for endpoint management, identity and access management, security policy enforcement, and front-line technical support across a diverse user base — from highly technical engineers to non-technical scientists and clinicians. The ideal candidate is empathetic, resourceful, and thrives in a fast-paced environment where reliable systems and excellent customer service are critical to the company’s mission.

• Provide expert end-user technical support across macOS, Windows, and Linux environments as part of a tier-1 support rotation.
• Deploy, configure, and manage endpoint devices using MDM platforms (e.g., Jamf, Intune, Kandji), including application deployment, configuration profiles, and policy enforcement.
• Administer identity provider (IDP) and IAM systems including Microsoft Entra, Google Workspace, Okta, or similar; manage user lifecycle from onboarding through off-boarding.
• Implement and enforce security policies across endpoints, SaaS applications, and corporate systems; conduct regular audits and remediation.
• Administer and maintain SaaS applications such as Google Workspace, Slack, Zoom, and other business-critical tools.
• Perform L1 and L2 network troubleshooting including connectivity issues, VLAN assignments, and Wi-Fi connectivity diagnostics.
• Manage endpoint hardware inventory including procurement, asset tagging, deployment, and lifecycle tracking.
• Develop automation and tooling using scripting (Bash, Python, PowerShell) to streamline repetitive IT operations tasks.
• Ensure compliance with HIPAA, PII handling requirements, and internal security policies through robust endpoint and access controls.
• Create and maintain documentation for systems, processes, and procedures to support knowledge sharing and business continuity.

Required Qualifications:

• Bachelor’s degree in Computer Science, Information Technology, Information Systems, or a related technical field or equivalent practical experience. 
• 3–5 years of experience providing expert-level end-user support across macOS, Windows, and Linux environments, ideally as part of a structured tier-1 support rotation
• Hands-on experience administering at least one enterprise MDM platform (Jamf, Intune, or Kandji), including application deployment, configuration profiles, and policy enforcement at scale
• Demonstrated experience administering an enterprise IDP/IAM platform (Microsoft Entra, Okta, or Google Workspace) including full user lifecycle management, SSO configuration, MFA enforcement, and access reviews
• Experience implementing and enforcing security policies across endpoints and SaaS applications, with working knowledge of HIPAA requirements, PII handling, and the ability to conduct regular audits and remediations

Preferred Skills & Qualifications: 

• Working knowledge of identity and access management protocols including SAML, SCIM, OAuth, and 802.1x.
• Familiarity with endpoint security tools, zero-trust architectures, and certificate-based authentication (TLS, X.509, U2F, WebAuthn).
• Understanding of networking fundamentals: TCP/IP, DNS, DHCP, ARP, VLANs, and basic wireless troubleshooting.
• Experience with IaC and automation tools such as Terraform, Ansible, or Cloud-Init.
• Experience maintaining and troubleshooting legacy AV equipment such as conference room displays, projectors, video conferencing systems, and audio hardware.
• Comfort supporting a diverse user base including non-technical colleagues; strong empathy and communication skills.
• Experience in regulated environments (HIPAA, SOC 2, or similar).

COMPLIANCE & DATA PRIVACY

Neuralink handles sensitive patient health information and personally identifiable information (PII). All employees are expected to understand and comply with HIPAA regulations and Neuralink’s data privacy policies. This role may involve access to protected health information (PHI) and requires a demonstrated commitment to confidentiality, data security, and responsible handling of sensitive information.

Team Description:

For Neuralink's Information Technology team, the corporate environment is production. It is where our groundbreaking research and development takes place and hosts our assembly lines, neural recording training and processing, and many other functions. The team builds critical systems and processes that safely accelerate our progress along the company's critical path.

Job Description and Responsibilities:

Neuralink is looking for a hands-on Network & Systems Engineer with deep expertise in data center design, build, and operations. You will own the end-to-end lifecycle of our compute and network infrastructure — from site buildout and hardware procurement through deployment, automation, and day-to-day operations. The ideal candidate brings equal comfort on the data center floor and at the keyboard, thrives in a fast-paced high-stakes environment, and has a passion for building reliable, scalable systems from the ground up. The job responsibilities will include:

• Design, build, and operate data center environments including power infrastructure (PDUs, UPS, generators), cooling systems (CRAC/CRAH, liquid cooling), and scalable racking solutions
• Procure, rack, cable, and commission server and network hardware; perform BIOS/firmware tuning and integration testing
• Own the full server lifecycle — from hardware selection and vendor coordination through deployment, maintenance, and decommission
• Administer and manage HPC clusters, storage systems, and high-speed networksAutomate server provisioning using PXE/HTTP boot, scripting (Bash, PowerShell, Python), and configuration management tools such as Terraform, Ansible, and Puppet
• Administer Linux and Windows server environments including OS deployment, patching, and performance tuning
• Deploy, maintain, and monitor campus network infrastructure including switching, routing, wireless, and NAC; respond aggressively to incidents to maintain uptime
• Plan and coordinate maintenance windows, upgrades, and expansions; maintain 24/7 on-call readiness
• Ensure all systems comply with HIPAA, PII handling requirements, and applicable cybersecurity standards (ISO, NIST)
• Author and maintain documentation including network topology, systems design, runbooks, and SOPs
• Manage network and server hardware inventory

Required Qualifications:

• Hands-on experience with Cisco Catalyst, Arista, and enterprise wireless technologies
• Experience building and supporting HPC or high-density compute environments: GPU clusters, high-performance storage, 
• Working knowledge of routing protocols and network technologies: BGP, OSPF, ECMP, eBPF, SFLOW, TCP/IP, DNS, DHCP, SNMP, NTP, PTP, ARP, CDP, LLDP
• Familiarity with DCIM tools and infrastructure monitoring (Prometheus, Grafana, or similar)
• Experience with firewalls, SDWAN, and enterprise security technologies

Preferred Qualifications:

• Familiarity with Wave Division Multiplexing, Fiber Optics, GPON, and FTTH
• Familiarity with cluster resource managers (Slurm, LSF, PBS)
• Experience with virtualization platforms (VMware/Hyper-V) and storage ecosystems (NAS/SAN, NFS/iSCSI)
• Exposure to real-time systems and industrial telemetry networks
• Industry certifications such as CCNA, CCNP, or equivalent data center certifications

The Position: 

OPSWAT is now searching for Tier 2 Technical Support Engineer to join our Customer Support team. The role focuses on diagnosing and resolving complex technical issues and escalated issues from tier 1 support and ensuring customer satisfaction through timely responses. We are looking for an energetic and motivated person who likes interacting with customers, tinkering with software, learning about new technologies, and “doing what it takes,” to contribute to OPSWAT’s quick growth.

Responsibilities:

• Handle complex technical issues and escalated ones from tier 1 support via phone, case system, and chat.
• Provide advanced troubleshooting and support for OPSWAT solutions via log analysis, system diagnostics, network configurations.
• Conduct remote sessions with customers.
• Reproduce customer issues in lab environments and validate solutions and bug fixes.
• Evaluate the complexity of issues and escalate to tier 3 support.
• Collaborate with Tier 1 and Tier 3 support well.
• Work closely with technically oriented customers (typical customers are engineers and IT personnel).
• Provide status updates to customers, adhering to SLA and commitments.
• Maintain clear and professional communication to ensure positive customer experience and CSAT
• Contribute to the KBs creation and updates for customer’s self-service.
• Mentor L1 support and contributes to support process improvement.
• Get involved in professional delivery services.
• Get involved in other side projects and operations per request.

Minimum requirements:

• A good foundation of basic networking concepts.
• Basic knowledge of Linux, with an interest in expanding the knowledge.
• Ability to think logically, analyze logs and troubleshoot computer software and IT related issues.
• Troubleshooting SCADA communications issues
• Hands-on understanding of major DevOps tools: Docker, Kubernetes (GCP GKE), CI/CD tools, Terraform, Ansible, Monitoring & Logging Tools (Zipkin, Sentry, Prometheus, ELK stack).
• Strong spoken and written English.
• Excellent communication and interpersonal skills.
• A proven customer-oriented attitude.
• Strong team collaboration abilities and organizational skills.
• At least 2-4 years of Experience in providing customer support of technical software products or a technical helpdesk environment or a related field.

 Nice to have

• Bachelor’s degree in computer science (CS), or technical discipline, or equivalent experience.
• Experience working with offshore teams. 
• Familiarity with computer programing.
• Technical familiarity with Mac OS.
• Cybersecurity domain experience, including file security, device security, network security, etc.
• Network integration skillsets (e.g. Cisco, Dell-EMC, Juniper, Aruba, Ruckus, Meraki, Aerohive, Extreme, etc).
• Certifications/Training: Relevant SCADA or PLC OEM certifications.
• Experience in Control System Design, PLC Programming, & SCADA Development
• Experience in Cloud Based Services (e.g. AWS, GCP).
• Experience working on Linux based infrastructure.
• Experience working with scripting languages such as bash script, PowerShell, and Python.
• Configuration and management of databases such as MySQL, Mongo.

As a Solutions Engineering Operations Intern, you will join the globally positioned SE Operations team. This team helps build high-impact demos, create training content, and develop interactive challenges that showcase the power of the SentinelOne platform. You’ll become a high-speed problem solver for our global field teams. This isn't a static role; you will learn to dismantle and rebuild complex demo environments, troubleshoot technical bugs on the fly, and bridge the gap between new product features and field readiness. You’ll master the art of technical agility–learning how to audit existing scripts, update aging documentation, and produce enablement content (videos and guides) that our SEs rely on to win. Essentially, you’ll learn how to keep a massive, global technical machine running while evolving it for the next generation of security threats.

What Will You Do?

Primary responsibilities include: 

• Working in a virtualized lab to discover, test, and document real-world malware samples for use in product demonstrations
• Testing, updating, and expanding existing demo setup, scripts, and documentation
• Building and refining ThreatOps Challenges—our custom Capture-the-Flag (CTF) experiences that teach users how to use SentinelOne
• Collaborating with experts across artificial intelligence, cybersecurity, sales engineering, and enablement to educate and support the solutions engineering team

What Skills and Knowledge Will You Bring?

Ideal candidates will have: 

• Core Skills:
  • Scripting (Python, PowerShell) or Programming (Python, Go)
  • Virtualization (VMware Workstation, VMware Aria)
  • OS Familiarity (Windows and Linux)
• Security Knowledge:
  • MITRE ATT&CK (tactics, techniques, and procedures)
  • Basic malware handling and analysis
  • Threat hunting, analysis, triage, and remediation
• Soft Skills:
  • Confluence for documentation
  • Technical storytelling
  • Relentless curiosity and tinker mindset

Why SentinelOne?

AI is redefining how the world operates and rewriting the rules of security in real time, and SentinelOne was built for this moment. From day one, we architected an AI-native platform designed to operate at machine speed, not as an add-on to legacy systems but as the foundation itself. If you want to build where innovation and impact move together, this is that place.

Our global internship program trains the next-generation of cybersecurity talent across a range of specializations, from threat intelligence to information security, engineering and marketing. Interns can learn about the network security industry from leading thinkers, grow their professional networks, and be part of a career-defining experience including: 

• 1:1 mentorship
• The opportunity to expand your knowledge and work on challenging projects
• Training and Development opportunities 
• Connections to other recent grads, and employees across the company
• Leadership speaker series where you can learn about other areas of the business and ask questions to the senior leadership team and industry experts
• Fun events!

Senior Security Engineer

Our Engineering Standards at Karbon:

Balance Speed and Quality

Engineers are expected to balance delivery speed with a strong commitment to quality, meeting agreed timelines while producing reliable, maintainable, and well-tested solutions. Sound judgment in making trade-offs between velocity and long-term sustainability is essential.

Collaborate Effectively

Engineering is collaborative by default. Team members are expected to contribute constructively in design discussions, reviews, and planning, communicate clearly about progress and risks, and support shared team outcomes in both hybrid and distributed environments.

Build and Maintain Systems

Engineers are responsible for building new capabilities while maintaining and improving existing systems. This includes designing scalable solutions, reducing technical debt, supporting operational stability, and contributing to continuous improvement.

Operate with Autonomy

A high degree of autonomy is expected. Given clear objectives, engineers should independently translate problems into actionable technical approaches, proactively identify improvements, and continuously expand relevant technical expertise.

Ownership and Accountability

Ownership is fundamental. Engineers are accountable for the quality, performance, and customer impact of their work from design through post-release support, and are expected to follow through on commitments.

AI-Enabled Engineering

AI is reshaping how software is built, and we are committed to leveraging it as a force multiplier for creativity, impact, and capability. Engineers are expected to confidently apply strong technical fundamentals while embracing AI tools and approaches to enhance productivity, problem-solving, and innovation. Curiosity, adaptability, and enthusiasm for integrating AI into meaningful product development are essential.

Contribute to Team Culture

Engineers contribute positively to a culture of professionalism, transparency, low bureaucracy, and mutual respect, strengthening team performance through authenticity, curiosity, and collaboration.

About the Role! 

Seeking a development & cloud focused Senior Security Engineer to join our expanding security team.

The ideal candidate will have passion for AppSec, Cloud and AI. They will be a skilled communicator and relationship builder capable of promoting and building security practices across the organization and into our development processes.

AI is reshaping practices across the board and at Karbon we’re fully committed. We don’t see AI as a replacement but as a force multiplier. We’re looking for Security Engineers who are confident in network & security fundamentals, driven to grow, and excited by the challenges and opportunities AI brings.

What You’ll Own:

• Partner with different areas within Karbon - You will make sure security is embedded from the start from feature design and development to participating in design reviews and threat modelling.
• Balance Security and Delivery - You know how to balance delivery needs with security and can communicate security risks and issues to non technical stakeholders. You understand when it's important to push back, when to compromise and how to work with delivery teams to reach a great outcome.
• You keep up to date on the latest technologies and approaches - You are excited by the new developments such as AI bring to security but also understand the importance of security foundational practices such as good account hygiene, least privilege, attack surface reduction and MFA.
• Identify and assess security risks introduced by AI tools - You’ll assist with reviewing the risks of AI tooling usage & Integration and AI-generated code.
• Apply AI-assisted tooling to accelerate security work - you understand the impact AI can have and utilize it across many areas including triage, threat detection, code review, and documentation.
• Flexibility and confidence to work across multiple security domains - We’re a small team responsible for Security at a fast moving company and you’ll get exposure to many different security domains; you could be assisting with refining and investigating corporate IT security processes in the morning, reviewing a cloud hosted system after lunch and then tweaking detection rules!
• Work effectively as part of a team - Security is a team sport and you understand the need to build relationships and trust across the organization to enhance Karbon’s security posture. You are happy to answer questions and offer advice to teams that will reach out for your assistance.
• Own your work - You take pride in your work, feeling a deep sense of responsibility for the products we develop and ensuring we keep our customers' valuable data secure. This sense of ownership is paramount, and you share this commitment.
• Bring your passion and personality - Your creativity, curiosity, and authentic self make the team stronger. If you've worked in highly political environments, you'll find our culture, free from office politics and valuing openness and authenticity, a refreshing change.
• Help us measure improvement and steer our roadmap - Contribute to Security Metrics so we can track progress and feedback into our roadmap.

What Sets You Apart

4+ years experience in a security or development role across most of the following:

• Collaborating with teams to review designs & implementations for security issues and embedding good security practices across software development
• Triaging issues and reports, assisting teams to remedy items and testing fixes
• Working with external penetration test companies to validate and prioritize findings
• Conducting risk and vulnerability assessments of web applications and APIs and third party suppliers and integrations
• Configuring and tuning SAST, SCA and DAST Tooling
• Working with build/deployment pipelines to incorporate security tooling (Github Actions or Azure Devops YAML based pipelines)
• Assisting with implementing security focused alerting and detections and automations
• Conducting and facilitating organizational & developer focused security training
• Assisting with operational security items such as EDR alerts and MDM
• Contributing to our security roadmap

In addition you’ll need:

• Strong communication skills (spoken and written) 
• Some of the following Languages/Frameworks: Microsoft .NET/C#, JavaScript (we use React and EmberJS frameworks and, Python)
• At least one cloud platform: Azure, AWS or GCP (we use Azure predominantly)
• Working knowledge of PowerShell or Bash and Python
• Working knowledge of at least one AI development tool e.g. Claude Code, GitHub Co-Pilot etc
• Portswigger Burp or similar
• Certifications such as Offsec OSCP & AWAE, GIAC, Burp Practitioner, PJPT, Microsoft/AWS development and cloud related are nice to have
• Experience with securing AI applications, systems and AI tooling would be highly regarded

Why Work at Karbon?

• Gain global experience across Australia, New Zealand, UK, and Canada
• Strong benefits package including:
• Flexible Time Off with an encouraged 4 weeks use per year
• Company paid medical for you and eligible spouse/partner and dependents
• Paid dental and vision and eligible spouse/partner and dependents
• 401(k) with company matching
• Flexible Spending Account
• Up to 8 weeks paid parental leave
• Work-from-home stipend
• Work with (and learn from) an experienced, high-performing team
• A collaborative, team-oriented culture that embraces diversity, invests in development and provides consistent feedback
• Be part of a fast-growing company that firmly believes in promoting high performers from within

Join the award-winning team that created God of War

You’re into technology – learning it, building it, teaching it.  You’re someone who thrives on infrastructure and on helping people, making things happen for the team, making their work lives more efficient and easier, which allows them to perform at their peak.

You’re talented, really talented, and motivated, with tons of initiative.  You get things done – and we leave you alone to do them.  Sound interesting?  Give us a shout!

Responsibilities

• Solve problems within existing pipelines, focusing on simple and robust solutions
• Help plan, configure, and deploy various open source and proprietary services on Linux and Windows such as: Perforce, Ceph, Nginx, Apache, Influxdb, Telegraf, Traefik, Sentry on premise, as well as new services to support the development team
• Support build release and patching pipeline, build deployment tool suite, code integration utilities, pre-commit testing utilities, and packaging pipeline
• Upgrade, evolve, and maintain existing infrastructure, including Jenkins server configurations and scripts and build scripts
• Interface and help support everyone on the team: get to the bottom of simple and complex problems and provide direct solutions
• Collaborate with IT to ensure a broad understanding of approaches and solutions
• Write clear, maintainable, portable, and highly functional scripts and code
• Test and document work produced
• Create and manage complex build branching schemes
• Implement and maintain effective reporting systems to facilitate team needs

Requirements

• Bachelor’s degree in computer science or equivalent
• 5+ years professional experience
• Very strong Linux System Administration skills
• Familiar with Windows system administration
• Experience with AWS as well as on premises deployments
• Proficient in a majority of the following: Docker, Git, Perforce, Jira, REST API’s, Python, C++, Qt, PowerShell, Puppet, automated testing structures and processes, build and/or content cooking pipelines
• Enthusiasm and initiative 
• Personable: gets along well with everyone; has “I can help” attitude
• Excellent spoken and written communication
• Commitment to code quality, documentation, and sound testing procedures

Preferred Experience

• Experience developing Windows GUI applications using C++ or Python

#LI-SMS
#LI-AM1

Avoid Recruitment Scams/Phishing Attempts: 

Please be aware that any official outreach in response to your application will always be done from a @sony.com email address. Always make sure to double check the spelling on Sony is correct and the characters have not been replaced with any numbers/symbols before replying.

Anyone using an email that is not @sony.com is not affiliated with us and should be reported either via the platform they are contacting you on or directly to your email service as a phishing attempt/scam.

Get to know the role

Job Title: Senior Systems Engineer (Client Services Technical Lead)

Job Summary: The Senior Systems Engineer is the most senior individual contributor within IT Client Services and serves as a technical leader, solution owner, and trusted advisor to both IT leadership and business stakeholders. This role is responsible for designing, implementing, and evolving enterprise systems and services that directly enable business outcomes and high quality employee experiences across a global organization. 

Operating at both strategic and hands on levels, the Senior Systems Engineer partners with the business to understand goals, translate needs into well engineered solutions, and lead delivery from concept through production. They provide technical thought leadership by making informed decisions in ambiguous situations, exercising clear ownership within defined guardrails, and balancing system health, service quality, and business outcomes.

This role elevates the organization through mentorship, standards, and example, while remaining actively engaged in complex system design, integration, and problem solving. In addition to core systems responsibilities, the Senior Systems Engineer identifies opportunities to apply automation and AI driven capabilities to improve operational efficiency, reliability, and measurable business impact.

People Manager: No

What you’ll do

Lead technical strategy and business aligned delivery

• Serve as a senior technical authority within IT Client Services, shaping how systems and services are designed, implemented, and evolved to support business priorities and outcomes
• Partner directly with business stakeholders to understand goals, challenges, and constraints, translating needs into scalable and supportable technical solutions
• Own solution delivery end to end, from design and implementation through operational readiness and continuous improvement
• Provide technical thought leadership by framing ambiguous problems, evaluating tradeoffs, and recommending solutions grounded in both technical and business context

Mentor and elevate client services capability

• Actively mentor system administrators and Service Desk staff through coaching, design reviews, and escalation support
• Lead by example during complex incidents and problem management, reinforcing strong engineering and operational practices
• Strengthen team effectiveness through documentation, standards, and knowledge sharing that improve consistency and service quality

Drive innovation, automation, and AI enabled outcomes

• Identify and evaluate opportunities to apply automation and AI capabilities to reduce friction, improve productivity, and deliver measurable business impact
• Collaborate with IT and business partners to assess value, run proofs of concept, and implement solutions that transition cleanly into steady state operations
• Balance innovation with operational maturity, ensuring new capabilities improve outcomes without introducing unnecessary complexity

Design, operate, and mature enterprise systems

• Design, implement, and operate cloud, on premise, and SaaS platforms with a focus on reliability, security, scalability, and the business outcomes those platforms enable
• Maintain a deep understanding of the client services technology landscape and guide its evolution as business needs change
• Diagnose and resolve complex issues across systems, platforms, and integrations, serving as a senior escalation point
• Lead post incident reviews and root cause analysis, driving improvements that strengthen long term system health
• Partner with vendors and service providers on deployments, upgrades, and integrations
• Participate in the on-call rotation as a responder for critical issues

What you’ll bring 

Senior technical leadership and influence

• Extensive experience operating as a senior individual contributor who leads through influence, mentorship, and technical authority
• 5+ years of experience partnering directly with business stakeholders to deliver technology solutions aligned to business goals
• Strong ability to communicate complex technical concepts clearly and credibly to technical and non-technical audiences
• Proven judgment in balancing short term delivery needs with long term sustainability, security, and business impact

Systems engineering and client services expertise

• 8+ years of experience designing, implementing, and operating enterprise systems in client services or enterprise IT environments
• Deep expertise across Microsoft client services technologies including Windows Server, Active Directory and Entra ID, Intune, Group Policy, Microsoft 365, identity, endpoint management, and PowerShell
• Strong experience with Azure administration and hybrid cloud environments
• Experience supporting Tier III level issues across Windows and macOS in a business critical environment
• Hands on experience integrating SaaS platforms and enterprise services used directly by end users

Innovation and continuous improvement mindset

• Demonstrated experience improving operational outcomes through automation or process optimization
• Working knowledge of AI driven capabilities and their application to productivity, service management, or operational decision making
• Ability to evaluate emerging technologies pragmatically and advocate for adoption based on real business value

Education and certifications

• Bachelor’s degree in Computer Science, Information Systems, or a related field, or equivalent practical experience
• Relevant certifications are a plus, including Microsoft Azure Solutions Architect Expert, Windows Server Hybrid Administrator Associate, VMware Certified Professional, ITIL v4, PMP, or similar
• Equivalent experience and a strong record of continuous learning are valued alongside formal education

Base Salary Range: For this role, new hires generally start between $116,445.00 - $154,934.00 per year. The full range is $116,445.00 - $209,732.00 per year. This range is applicable for the labor market where the role is intended to be hired. The final base salary is directly related to the candidate’s qualifications and professional experience uniquely.

#LI-PS #LI-Hybrid

Copper River Enterprise Services is seeking a skilled Network Security Engineer to support network infrastructure operations in Newport, Rhode Island. This role is responsible for designing, implementing, securing, and maintaining network systems across classified and unclassified environments. The Network Security Engineer will ensure network performance, security compliance, and operational continuity through proactive monitoring, troubleshooting, and system optimization.

Responsibilities (include but are not limited to):

• Ensure security compliance and provide remote troubleshooting via the Trellix ePO console
• Assist System Administrators with desktop and server issues, related to software installations and other requests
• Configure Trellix products, including ENS Client, ENS Firewall, Threat Prevention, and Access Protection, on Microsoft and Linux endpoints
• Manage the daily DAT cycle on SIPR machines to ensure Comply to Connect (C2C) Cisco compliance
• Installing, testing, and deploying hotfixes and patches for Trellix products to manage vulnerabilities
• Monitor and analyze security events in Splunk and Airlock Digital.  Analyst on Duty: Investigate alerts that are triggered in the Splunk Console to determine if a threat or normal activity is allowed in the environment.
• Provide threat detection and incident response to mitigate risks to the Network
• Troubleshoot a wide range of issues Trellix agents maybe have on Newly Imaged machines
• Create exceptions for approved DADMS software
• Building new ePO and RSD Servers to expand the environment and ensure zero downtime in case of outages

Essential Job Qualifications and Requirements:

• Education
  • Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or related field (or equivalent experience)

• Clearance
  • Active secret security clearance
• Certifications
  • CompTIA Security+ CE

• Experience
  • Experience implementing, managing, and optimizing ePO, Policy Auditor, and other components of the DISA Endpoint Security Solutions suite in DoD environments
  • Proficient in Active Directory (AD) & Domain Controller (DC) Administration
  • Expert knowledge of Windows Server Administration, including Windows Server 2016/2019/2022 internals, registry, event logs, and system services
  • Experience with Windows security baselines (CIS, DISA STIG)
  • Strong background in Security Compliance & Vulnerability Management
  • Experience with SPLUNK; Analyst on Duty
  • Prior experience with deploying enterprise tools on Domain Computers, including Antivirus, endpoint protection, and vulnerability scanning
  • Proficiency in scripting languages (PowerShell, Python, Bash, etc.)

ABOUT THE TEAM:

Anduril's Endpoint Engineering team is building the next generation of endpoint management capabilities to support our rapidly growing enterprise and manufacturing operations. As a Senior Endpoint Systems Engineer, you'll drive strategic initiatives that impact thousands of endpoints across office and factory floor environments. You'll work closely with talented engineers, while collaborating with cross-functional teams including Security, Infrastructure, Manufacturing Operations, and IT Operations. This is an opportunity to shape the future of endpoint infrastructure at scale, with a strong focus on automation, virtual desktop technologies, and operational excellence.

WHAT YOU’LL DO

Technical Leadership & Strategy:

• Lead the design, implementation, and optimization of enterprise endpoint management solutions across Windows, macOS, Linux, and mobile platforms.
• Architect and maintain virtual desktop infrastructure (VDI) solutions using AWS WorkSpaces, Dell Wyse ThinOS, Azure Virtual Desktop, Citrix, or similar technologies.
• Define and drive endpoint strategy aligned with business goals, security requirements, and operational excellence.
• Establish authoritative standards for endpoint configurations, security baselines, and compliance frameworks.
• Evaluate and recommend new technologies, tools, and practices to improve endpoint management capabilities.
• Partner with Security, Infrastructure, Network, and Application teams to ensure cohesive endpoint architecture.

Automation & Infrastructure as Code:

• Design and implement comprehensive automation frameworks for endpoint provisioning, configuration, and lifecycle management.
• Develop advanced automation scripts and tools using PowerShell, Python, Bash, and Go.
• Build Infrastructure as Code solutions using Ansible, Terraform, Salt, Puppet, or Chef for endpoint management at scale.
• Create CI/CD pipelines for endpoint configuration deployment and testing.
• Develop self-service automation capabilities for common endpoint tasks.
• Optimize and automate patch management, software distribution, and OS deployment workflows.

Virtual Desktop Technologies:

• Architect, deploy, and maintain virtual desktop environments for enterprise and manufacturing use cases.
• Design session host configurations, golden images, and application delivery strategies.
• Optimize VDI performance, user experience, and resource utilization.
• Implement virtual desktop solutions for specialized use cases including factory floor, engineering workstations, and secure environments.
• Integrate virtual desktop infrastructure with endpoint management platforms and identity systems.
• Troubleshoot complex VDI issues and performance bottlenecks.

Operational Excellence:

• Provide expert-level support for complex endpoint and VDI incidents.
• Lead major incident response and root cause analysis for endpoint-related outages.
• Monitor, analyze, and optimize endpoint infrastructure performance and reliability.
• Develop comprehensive documentation including architecture diagrams, runbooks, and standards.
• Conduct capacity planning and performance tuning for endpoint and VDI systems.

REUIQRRED QUALIFICATIONS

• 6+ years of professional experience as an Endpoint Engineer, Client Platform Engineer, Systems Engineer, VDI Engineer, or similar role with increasing technical responsibility.
• Bachelor's degree in Computer Science, Information Technology, or related field, or equivalent experience.
• Deep expertise with endpoint management platforms (Intune, SCCM, FleetDM. Workspace ONE, Jamf Pro, IGEL).
• Proven experience architecting and managing virtual desktop infrastructure (AWS WorkSpaces, Azure Virtual Desktop, Citrix Virtual Apps and Desktops, VMware Horizon, or similar).
• Strong automation and scripting skills with demonstrated proficiency in PowerShell, Python, and Bash.
• Hands-on experience with Infrastructure as Code and configuration management tools (Ansible, Terraform, Salt, Puppet, Chef).
• Expert knowledge of Windows, macOS, and Linux operating systems at an enterprise scale.
• Deep understanding of endpoint security hardening, compliance frameworks, and vulnerability management.
• Strong experience with Active Directory, Entra ID (Azure AD), Okta, and hybrid identity architectures.
• Expertise in networking concepts including TCP/IP, DNS, DHCP, VPN, load balancing, and traffic optimization for virtual desktops.
• Experience with deployment technologies (PXE, KACE, MAAS, FOG, Tinkerbell, iPXE) and imaging solutions.
• Proven ability to design and implement solutions that scale across thousands of endpoints.
• Strong architectural thinking and ability to translate business requirements into technical solutions.
• Excellent communication and collaboration skills with ability to influence across technical and non-technical stakeholders.
• Eligible to obtain and maintain a U.S. TS clearance.

PREFERRED QUALIFICATIONS

• Experience with containerization technologies (Docker, Kubernetes) for application delivery.
• Hands-on experience with cloud-native endpoint management and modern workplace solutions.
• Experience in manufacturing, industrial, or OT (operational technology) environments.
• Deep knowledge of application virtualization and packaging (App-V, MSIX, ThinApp).
• Experience implementing zero trust architecture principles for endpoints.
• Experience with Git, GitHub/GitLab, and version control workflows for automation code.
• Understanding of API development and integration for endpoint management automation.
• Experience with multi-cloud or hybrid cloud endpoint strategies.

ABOUT THE TEAM 

ABOUT THE JOB

Anduril is seeking a Systems Administrator to directly support our most sensitive programs. You will be a part of the team administering operating system infrastructure, implement automated configurations, and support environment deployments across all classification levels using IaC methodologies. You will have the opportunity to work with and learn from some of the world’s best engineers and cybersecurity professionals as you help to implement cutting edge systems. 

WHAT YOU’LL DO

• Administer Windows and Linux systems across NIPR, SIPR, JWICS, and SAP environments
• Implement and maintain automated configuration management for operating systems
• Apply security baselines and STIGs through automated configuration tools
• Support Deployment team during environment builds ensuring proper OS configuration
• Configure and maintain enterprise services (AD, DNS, DHCP, repository servers, patching infrastructure)
• Monitor system health, performance, and security compliance using automated tools
• Troubleshoot complex OS issues including authentication, permissions, and application errors
• Maintain backup and recovery procedures ensuring RPO/RTO targets are met
• Document system configurations, automation code, and troubleshooting procedures
• Own deployed environments until successful ATO and user acceptance achieved
• Transition environments to Service Desk team with proper documentation and knowledge transfer

REQUIRED QUALIFICATIONS

• Security clearance eligibility appropriate for assigned systems
• Strong expertise in Windows Server and/or Linux (RHEL, Ubuntu) administration
• Experience with automation tools (Ansible, PowerShell DSC, scripting)
• Understanding of Active Directory, Group Policy, identity management, and LDAP integration
• Knowledge of STIGs, security hardening, and compliance scanning

Expected Outcomes

• Maintain system uptime above 99.9% excluding planned maintenance
• Achieve patch compliance above 95% for critical/high severity updates within 30 days
• Reduce average provisioning time through automated deployment processes
• Pass all security audits and vulnerability scans with zero critical findings
• Successfully deliver environments achieving ATO without security deficiencies
• Document all configurations and automation enabling team knowledge sharing

ABOUT THE TEAM 

ABOUT THE JOB

Anduril is seeking a Systems Administrator to directly support our most sensitive programs. You will be a part of the team administering operating system infrastructure, implement automated configurations, and support environment deployments across all classification levels using IaC methodologies. You will have the opportunity to work with and learn from some of the world’s best engineers and cybersecurity professionals as you help to implement cutting edge systems. 

WHAT YOU’LL DO

• Administer Windows and Linux systems across NIPR, SIPR, JWICS, and SAP environments
• Implement and maintain automated configuration management for operating systems
• Apply security baselines and STIGs through automated configuration tools
• Support Deployment team during environment builds ensuring proper OS configuration
• Configure and maintain enterprise services (AD, DNS, DHCP, repository servers, patching infrastructure)
• Monitor system health, performance, and security compliance using automated tools
• Troubleshoot complex OS issues including authentication, permissions, and application errors
• Maintain backup and recovery procedures ensuring RPO/RTO targets are met
• Document system configurations, automation code, and troubleshooting procedures
• Own deployed environments until successful ATO and user acceptance achieved
• Transition environments to Service Desk team with proper documentation and knowledge transfer

REQUIRED QUALIFICATIONS

• Active Top Security security clearance appropriate for assigned systems.
• Strong expertise in Windows Server and/or Linux (RHEL, Ubuntu) administration.
• Experience with automation tools (Ansible, PowerShell DSC, scripting).
• Understanding of Active Directory, Group Policy, identity management, and LDAP integration.
• Knowledge of STIGs, security hardening, and compliance scanning.
• Active TS/SCI Clearance.

Expected Outcomes

• Maintain system uptime above 99.9% excluding planned maintenance.
• Achieve patch compliance above 95% for critical/high severity updates within 30 days.
• Reduce average provisioning time through automated deployment processes.
• Pass all security audits and vulnerability scans with zero critical findings.
• Successfully deliver environments achieving ATO without security deficiencies.
• Document all configurations and automation enabling team knowledge sharing.

ABOUT THE TEAM

Anduril's Endpoint Engineering team is seeking a skilled Endpoint Systems Engineer to join our growing team. You'll work alongside senior engineers and collaborate with cross-functional team members to manage day-to-day endpoint operations while leading projects to build more reliable and authoritative device management capabilities across our enterprise and manufacturing environments. This is an opportunity to take ownership of key endpoint technologies, drive automation initiatives, and make a significant impact on our infrastructure while growing your technical expertise.

WHAT YOU’LL DO

Operational Support:

• Provide support for endpoint-related incidents across Windows, macOS, Linux, and mobile devices.
• Manage day-to-day endpoint management tasks including software distribution, patch deployment, and device provisioning.
• Monitor endpoint health, performance, and compliance status using management platforms.
• Troubleshoot and resolve complex endpoint issues, escalating to senior engineers or infrastructure teams as needed.
• Respond to and resolve urgent incidents affecting employee productivity or manufacturing operations.
• Collaborate with Help Desk, IT Operations, Manufacturing, and cross-functional teams to resolve endpoint challenges.

Build & Improvement Initiatives:

• Design and implement more reliable endpoint management solutions using platforms like Intune, Workspace ONE, Jamf Pro, and IGEL.
• Maintain virtual desktop infrastructure (VDI) solutions using AWS WorkSpaces, Dell Wyse ThinOS, Azure Virtual Desktop, Citrix, or similar technologies.
• Build standardized device configurations, deployment workflows, and automation scripts.
• Develop authoritative baselines for endpoint security, compliance, and performance standards.
• Lead projects to improve patch management, OS deployment, and software distribution processes.
• Test and validate new endpoint tools, configurations, and automation before production rollout.
• Document configurations, processes, runbooks, and troubleshooting guides to establish knowledge standards.

REQUIRED QUALIFICATIONS

• 3-5 years of professional experience as an Endpoint Engineer, Client Platform Engineer, Systems Administrator, Desktop Support Engineer, or similar role.
• Bachelor's degree in Computer Science, Information Technology, or related field, or equivalent experience.
• Strong knowledge of Windows, macOS, and Linux operating systems.
• Proven experience with endpoint management platforms (Intune, SCCM, FleetDM, Jamf Pro, Workspace ONE, or similar).
• Hands-on experience with Active Directory/Entra ID or Okta identity management.
• Proficiency with scripting and automation using PowerShell, Bash, or Python for endpoint management tasks.
• Solid understanding of endpoint security principles, patching, compliance requirements, and device hardening.
• Strong knowledge of networking fundamentals (TCP/IP, DNS, DHCP, VPN).
• Excellent communication skills with ability to collaborate across IT, OT, and business teams.
• Ability to work independently and manage multiple priorities effectively.
• Eligible to obtain and maintain a U.S. TS clearance.

PERFERRED QUALIFICATIONS

• Experience with mobile device management platforms (iOS, Android, iPadOS) and mobile application management.
• Hands-on experience with cloud identity platforms (Azure AD/Entra ID, Okta) and hybrid identity scenarios.
• Experience with deployment technologies (PXE boot, KACE, MAAS, FOG, Tinkerbell, iPXE, imaging solutions).
• Proficiency with configuration management tools (Ansible, Salt, Puppet, Chef) and Infrastructure as Code practices.
• Experience configuring kiosk mode, device lockdown, or dedicated-use endpoint configurations.
• Familiarity with ITIL practices and ticketing systems (ServiceNow, Jira Service Management).
• Experience with virtual desktop technologies (AWS WorkSpaces, Dell Wyse ThinOS, Azure Virtual Desktop, Citrix).
• Understanding of IT and OT systems integration challenges.
• Certifications such as Microsoft 365 Certified: Endpoint Administrator Associate, Jamf Certified (200+), CompTIA Security+, Apple Certified Support Professional (ACSP), Linux+ or RHCSA.

ABOUT THE TEAM 

ISSOs help shape classified, closed, or air gapped environments in which to deploy Anduril products or software. Well versed in a combination of Information Technology, Security and government accreditation processes, ISSOs are able to utilize their sharp critical thinking skills to balance Business Line needs, product velocity, and customer requirements.

ABOUT THE JOB 

WHAT YOU’LL DO

• Provide expertise in documenting security controls that apply to respective systems to meet cybersecurity framework requirements..
• Perform required security functions on an iterative basis to meet requirements and deliver results.
• Apply technology standards from the commercial space in classified, air-gapped environments.
• Assist the ISSM, fellow ISSOs, and other members of the Classified Infrastructure team to understand key stakeholders’ needs and provide complex technical solutions to meet contractual obligations.
• Tailor NIST 800-53 controls to determine applicability to the network environment and oversee the implementation of Continuous Monitoring for respective programs.
• Define, document, and conduct security scanning on Anduril’s products and accredited information systems.
• Scope, shape, and orchestrate the development of features to ensure products meet compliance goals.

REQUIRED QUALIFICATIONS

• Design, develop, and implement secure systems and networks per NIST RMF, JSIG, and other industry standards.
• Participate and assist in security risk assessments, vulnerability assessments, and audits to identify and mitigate threats.
• Speak to and recommend security solutions, such as IDS/IPS, encryption protocols, and secure communications technologies.
• Develop and enforce access controls, encryption strategies, and other technical measures to safeguard systems.
• Maintain and update System Security Plans (SSPs), POA&Ms, and other accreditation documentation.
• Manage the organization’s security posture, ensuring compliance with internal policies and external regulatory frameworks.
• Participate in the Authorization and Accreditation (A&A) processes to obtain/maintain system Authority to Operate (ATO).
• Able to assist, even lead, incident response efforts, including investigation, root cause analysis, containment, and reporting.
• Conduct regular audits, continuous monitoring, and risk assessments to ensure ongoing compliance and system resilience.
• Collaborate with government security officials, stakeholders, and teams to address security gaps and improve controls.
• Currently possesses and is able to maintain an active U.S. Top Secret security clearance.

PREFERRED QUALIFICATIONS

• Experience with industry standard tools such as Splunk, DISA STIGs, and SCC.
• The ability to understand programming/scripting languages, i.e. Python, Powershell, Bash
• An understanding of Linux Red Hat operating systems and SELinux policy.

ABOUT THE TEAM
We are seeking an experienced and dynamic IT Hardware Manager to lead our hardware lifecycle management operations across the organization. This role will be instrumental in overseeing IT procurement, asset management, and our hardware device management platform (Oomnitza), ensuring seamless equipment delivery and tracking that supports our rapidly scaling defense technology operations. You will work at our headquarters in Costa Mesa and lead a team responsible for the strategic planning, procurement, deployment, and lifecycle management of all IT hardware assets.

WHAT YOU'LL DO

• Lead IT Hardware Operations: Manage and mentor a team responsible for IT procurement, asset management, device provisioning, and hardware lifecycle operations across all Anduril locations.
• Oversee Procurement Strategy: Define and execute IT hardware procurement strategies, including vendor management, contract negotiations, cost optimization, and supply chain coordination to ensure timely delivery of equipment.
• Manage Asset Lifecycle: Own the complete hardware asset lifecycle from requisition through deployment, maintenance, refresh cycles, and secure disposition, ensuring compliance with security and regulatory requirements.
• Optimize Oomnitza Platform: Serve as the primary owner of the Oomnitza hardware device management platform, driving continuous improvements in automation, integrations, reporting, and user experience.
• Develop Hardware Roadmap: Define and prioritize the roadmap for hardware standards, refresh cycles, emerging technologies, and asset management tool enhancements aligned with business growth and security requirements.
• Drive Process Excellence: Establish and champion hardware management policies, procedures, and best practices to ensure operational efficiency, cost effectiveness, and compliance with industry standards.
• Strategic Alignment: Partner with IT leadership, Finance, Security, and business stakeholders to align hardware strategies with organizational objectives and budget planning.
• Vendor Management: Build and maintain strategic relationships with hardware vendors, distributors, and service providers to ensure competitive pricing, quality service, and supply chain resilience.
• Data-Driven Decision Making: Monitor hardware inventory, utilization metrics, procurement cycles, and costs; generate regular reports and insights for senior leadership to inform strategic decisions.
• Support Rapid Scaling: Enable Anduril's growth by ensuring efficient onboarding/offboarding processes, supporting new office openings, and maintaining hardware availability for global operations.
• Security and Compliance: Ensure all hardware procurement and management activities comply with security policies, including device encryption, secure provisioning, and audit requirements necessary for defense contractor operations.

REQUIRED QUALIFICATIONS

• Bachelor's degree in Business, Supply Chain Management, Information Technology, or related field; MBA or Master's degree preferred.
• 10+ years of experience in IT operations with a minimum of 5 years in management roles focused on hardware procurement, asset management, or IT supply chain.
• Proven experience managing IT asset management platforms (Oomnitza strongly preferred) and leading hardware lifecycle operations at scale.
• Demonstrated experience managing and developing teams, including coaching, performance management, and building high-performing operations.
• Strong knowledge of enterprise hardware ecosystems including laptops, desktops, mobile devices, peripherals, and associated technologies (MDM, endpoint management, etc.).
• Proven track record of vendor management, contract negotiations, and procurement optimization in fast-paced, high-growth environments.
• Experience establishing and improving operational processes, with a focus on automation and efficiency gains.
• Excellent problem-solving and analytical skills with demonstrated ability to use data to drive decisions and optimize operations.
• Outstanding communication and interpersonal abilities, with proven success collaborating across technical and business functions.
• Ability to travel as needed to support multiple office locations.
• Eligible to obtain and maintain an active U.S. Secret security clearance.

PREFERRED QUALIFICATIONS

• Deep expertise with Oomnitza platform including API integrations, automation workflows, and custom reporting.
• Experience with procurement and asset management in defense, aerospace, or other highly regulated industries.
• Experience with ITIL frameworks, particularly in asset and configuration management.
• Familiarity with ERP/financial systems integrations for procurement and asset tracking (e.g., NetSuite, Coupa, SAP).
• Experience with automation technologies and scripting to streamline hardware operations (Python, PowerShell, APIs).
• Knowledge of hardware security requirements for defense contractors including device encryption, secure disposal, and audit compliance.
• Experience managing IT hardware operations in a Zero Trust security environment.
• Background supporting hardware-intensive operations such as manufacturing facilities, laboratories, or field operations.
• Professional certifications such as ITIL, CPM (Certified Purchasing Manager), or CPSM (Certified Professional in Supply Management).

ABOUT THE TEAM 

ISSOs help shape classified, closed, or air gapped environments in which to deploy Anduril products or software. Well versed in a combination of Information Technology, Security and government accreditation processes, ISSOs are able to utilize their sharp critical thinking skills to balance Business Line needs, product velocity, and customer requirements.

ABOUT THE JOB 

WHAT YOU’LL DO

• Provide expertise in documenting security controls that apply to respective systems to meet cybersecurity framework requirements..
• Perform required security functions on an iterative basis to meet requirements and deliver results.
• Apply technology standards from the commercial space in classified, air-gapped environments.
• Assist the ISSM, fellow ISSOs, and other members of the Classified Infrastructure team to understand key stakeholders’ needs and provide complex technical solutions to meet contractual obligations.
• Tailor NIST 800-53 controls to determine applicability to the network environment and oversee the implementation of Continuous Monitoring for respective programs.
• Define, document, and conduct security scanning on Anduril’s products and accredited information systems.
• Scope, shape, and orchestrate the development of features to ensure products meet compliance goals.

REQUIRED QUALIFICATIONS

• Design, develop, and implement secure systems and networks per NIST RMF, JSIG, and other industry standards.
• Participate and assist in security risk assessments, vulnerability assessments, and audits to identify and mitigate threats.
• Speak to and recommend security solutions, such as IDS/IPS, encryption protocols, and secure communications technologies.
• Develop and enforce access controls, encryption strategies, and other technical measures to safeguard systems.
• Maintain and update System Security Plans (SSPs), POA&Ms, and other accreditation documentation.
• Manage the organization’s security posture, ensuring compliance with internal policies and external regulatory frameworks.
• Participate in the Authorization and Accreditation (A&A) processes to obtain/maintain system Authority to Operate (ATO).
• Able to assist, even lead, incident response efforts, including investigation, root cause analysis, containment, and reporting.
• Conduct regular audits, continuous monitoring, and risk assessments to ensure ongoing compliance and system resilience.
• Collaborate with government security officials, stakeholders, and teams to address security gaps and improve controls.
• Currently possesses and is able to maintain an active U.S. Top Secret security clearance.

PREFERRED QUALIFICATIONS

• Experience with industry standard tools such as Splunk, DISA STIGs, and SCC.
• The ability to understand programming/scripting languages, i.e. Python, Powershell, Bash
• An understanding of Linux Red Hat operating systems and SELinux policy.

About the Role

We're looking for an experienced Endpoint Engineer to join our team and take ownership of our device management ecosystem across multiple platforms. You'll design, implement, and maintain scalable endpoint management solutions that keep our fleet secure, compliant, and running smoothly.
A core focus of this role is building and managing the systems that power our factory floor operations, ensuring reliability, security, and ease of deployment in demanding industrial environments.
Working at the intersection of IT operations, security, and manufacturing, you'll make a direct impact on the productivity and security posture of the entire organization.

What You'll Do

• Architect, deploy, and manage endpoint solutions across Windows, Android, and iOS devices at scale
• Design, build, and maintain kiosk systems for factory floor environments, including lockdown configurations, automated provisioning, remote management, and high-availability deployment strategies
• Partner with manufacturing and operations teams to deliver purpose-built endpoint solutions that meet the demands of industrial environments
• Administer and optimize MDM platforms (Intune, Workspace ONE, Fleet DM) to enforce configuration and security baselines
• Design and implement modern Windows configuration management using OMA-DM, Desired State Configuration (DSC), and cloud-native policy frameworks for large device fleets
• Develop automation and tooling using PowerShell, Python, Bash, or Go to streamline endpoint operations
• Integrate endpoint systems management with internal and third-party tools via APIs
• Lead CVE remediation efforts, including vulnerability identification, patching strategies, and compliance reporting
• Apply and maintain security hardening standards such as DISA STIGs or CIS Benchmarks across the endpoint fleet
• Partner with Security, IT, and Engineering teams to define and enforce device security policies
• Troubleshoot complex endpoint issues and provide escalation support for device management challenges
• Document standards, processes, and runbooks to enable operational excellence

Required Qualifications

• 3–5 years of professional experience as an Endpoint Engineer, Systems Administrator, or Client Platform Engineer.
• Proven experience managing MDM platforms such as Intune, Workspace ONE, or Fleet DM
• Strong expertise in Windows device management at enterprise scale, including modern management approaches
• Demonstrated experience building, deploying, and managing workstations and mission-specific kiosk systems, ideally in factory, manufacturing, warehouse, or other industrial/operational environments
• Hands-on experience with Android device management
• Proficiency with PowerShell, MDM, OMA-DM protocols, and modern device configuration management.
• Demonstrated experience with large-scale Windows configuration management using MDM/OMA-DM, PowerShell DSC, and MDM policy enforcement
• Experience driving CVE remediation and vulnerability management programs
• Hands-on experience applying DISA STIGs or CIS Benchmarks for system hardening and compliance
• Ability to work with APIs using at least one scripting language (PowerShell, Python, Go, or Bash)
• Experience in packaging and deploying complex software solutions for Windows environments
• Strong troubleshooting skills and a systematic approach to problem-solving
• Excellent written and verbal communication skills

Preferred Qualifications / Nice To Have

• Experience with Bash scripting and Linux systems management
• Hands-on experience with Jamf Pro
• Thin client experience with platforms such as ThinOS, IGEL, or 10ZiG
• Experience with Zebra device management
• Exposure to OT/manufacturing line endpoints and integration with production systems.
• Familiarity with Zero Trust principles and modern endpoint security frameworks
• Experience working with Desired State Configuration (DSC)
• Experience with Infrastructure-as-Code tools (Terraform, Ansible, Salt Project) for endpoint configuration

ABOUT THE TEAM 

ISSOs help shape classified, closed, or air gapped environments in which to deploy Anduril products or software. Well versed in a combination of Information Technology, Security and government accreditation processes, ISSOs are able to utilize their sharp critical thinking skills to balance Business Line needs, product velocity, and customer requirements.

ABOUT THE JOB 

WHAT YOU’LL DO

• Provide expertise in documenting security controls that apply to respective systems to meet cybersecurity framework requirements..
• Perform required security functions on an iterative basis to meet requirements and deliver results.
• Apply technology standards from the commercial space in classified, air-gapped environments.
• Assist the ISSM, fellow ISSOs, and other members of the Classified Infrastructure team to understand key stakeholders’ needs and provide complex technical solutions to meet contractual obligations.
• Tailor NIST 800-53 controls to determine applicability to the network environment and oversee the implementation of Continuous Monitoring for respective programs.
• Define, document, and conduct security scanning on Anduril’s products and accredited information systems.
• Scope, shape, and orchestrate the development of features to ensure products meet compliance goals.

REQUIRED QUALIFICATIONS

• Design, develop, and implement secure systems and networks per NIST RMF, JSIG, and other industry standards.
• Participate and assist in security risk assessments, vulnerability assessments, and audits to identify and mitigate threats.
• Speak to and recommend security solutions, such as IDS/IPS, encryption protocols, and secure communications technologies.
• Develop and enforce access controls, encryption strategies, and other technical measures to safeguard systems.
• Maintain and update System Security Plans (SSPs), POA&Ms, and other accreditation documentation.
• Manage the organization’s security posture, ensuring compliance with internal policies and external regulatory frameworks.
• Participate in the Authorization and Accreditation (A&A) processes to obtain/maintain system Authority to Operate (ATO).
• Able to assist, even lead, incident response efforts, including investigation, root cause analysis, containment, and reporting.
• Conduct regular audits, continuous monitoring, and risk assessments to ensure ongoing compliance and system resilience.
• Collaborate with government security officials, stakeholders, and teams to address security gaps and improve controls.
• Currently possesses and is able to maintain an active U.S. Top Secret security clearance.

PREFERRED QUALIFICATIONS

• Experience with industry standard tools such as Splunk, DISA STIGs, and SCC.
• The ability to understand programming/scripting languages, i.e. Python, Powershell, Bash
• An understanding of Linux Red Hat operating systems and SELinux policy.

ABOUT THE TEAM 

ISSOs help shape classified, closed, or air gapped environments in which to deploy Anduril products or software. Well versed in a combination of Information Technology, Security and government accreditation processes, ISSOs are able to utilize their sharp critical thinking skills to balance Business Line needs, product velocity, and customer requirements.

ABOUT THE JOB 

WHAT YOU’LL DO

• Provide expertise in documenting security controls that apply to respective systems to meet cybersecurity framework requirements..
• Perform required security functions on an iterative basis to meet requirements and deliver results.
• Apply technology standards from the commercial space in classified, air-gapped environments.
• Assist the ISSM, fellow ISSOs, and other members of the Classified Infrastructure team to understand key stakeholders’ needs and provide complex technical solutions to meet contractual obligations.
• Tailor NIST 800-53 controls to determine applicability to the network environment and oversee the implementation of Continuous Monitoring for respective programs.
• Define, document, and conduct security scanning on Anduril’s products and accredited information systems.
• Scope, shape, and orchestrate the development of features to ensure products meet compliance goals.

REQUIRED QUALIFICATIONS

• Design, develop, and implement secure systems and networks per NIST RMF, JSIG, and other industry standards.
• Participate and assist in security risk assessments, vulnerability assessments, and audits to identify and mitigate threats.
• Speak to and recommend security solutions, such as IDS/IPS, encryption protocols, and secure communications technologies.
• Develop and enforce access controls, encryption strategies, and other technical measures to safeguard systems.
• Maintain and update System Security Plans (SSPs), POA&Ms, and other accreditation documentation.
• Manage the organization’s security posture, ensuring compliance with internal policies and external regulatory frameworks.
• Participate in the Authorization and Accreditation (A&A) processes to obtain/maintain system Authority to Operate (ATO).
• Able to assist, even lead, incident response efforts, including investigation, root cause analysis, containment, and reporting.
• Conduct regular audits, continuous monitoring, and risk assessments to ensure ongoing compliance and system resilience.
• Collaborate with government security officials, stakeholders, and teams to address security gaps and improve controls.
• Currently possesses and is able to maintain an active U.S. Top Secret security clearance.

PREFERRED QUALIFICATIONS

• Experience with industry standard tools such as Splunk, DISA STIGs, and SCC.
• The ability to understand programming/scripting languages, i.e. Python, Powershell, Bash
• An understanding of Linux Red Hat operating systems and SELinux policy.

ABOUT THE TEAM 

ABOUT THE JOB

Anduril is seeking a Systems Administrator to directly support our most sensitive programs. You will be a part of the team administering operating system infrastructure, implement automated configurations, and support environment deployments across all classification levels using IaC methodologies. You will have the opportunity to work with and learn from some of the world’s best engineers and cybersecurity professionals as you help to implement cutting edge systems. 

WHAT YOU’LL DO

• Administer Windows and Linux systems across NIPR, SIPR, JWICS, and SAP environments
• Implement and maintain automated configuration management for operating systems
• Apply security baselines and STIGs through automated configuration tools
• Support Deployment team during environment builds ensuring proper OS configuration
• Configure and maintain enterprise services (AD, DNS, DHCP, repository servers, patching infrastructure)
• Monitor system health, performance, and security compliance using automated tools
• Troubleshoot complex OS issues including authentication, permissions, and application errors
• Maintain backup and recovery procedures ensuring RPO/RTO targets are met
• Document system configurations, automation code, and troubleshooting procedures
• Own deployed environments until successful ATO and user acceptance achieved
• Transition environments to Service Desk team with proper documentation and knowledge transfer

REQUIRED QUALIFICATIONS

• Active security clearance appropriate for assigned systems
• Strong expertise in Windows Server and/or Linux (RHEL, Ubuntu) administration
• Experience with automation tools (Ansible, PowerShell DSC, scripting)
• Understanding of Active Directory, Group Policy, identity management, and LDAP integration
• Knowledge of STIGs, security hardening, and compliance scanning
• Active TS/SCI Clearance.

Expected Outcomes

• Maintain system uptime above 99.9% excluding planned maintenance
• Achieve patch compliance above 95% for critical/high severity updates within 30 days
• Reduce average provisioning time through automated deployment processes
• Pass all security audits and vulnerability scans with zero critical findings
• Successfully deliver environments achieving ATO without security deficiencies
• Document all configurations and automation enabling team knowledge sharing

Purpose

The Enterprise Platform Application Specialist is responsible for aligning Microsoft’s evolving platform and capabilities with business outcomes. 
 

The Role

Platform Strategy & Governance  

• Serve as the strategic owner of the Microsoft 365 platform, aligning Microsoft’s roadmap with business priorities
• Define and maintain governance standards for Teams, SharePoint, OneDrive, and Exchange Online
• Evaluate new Microsoft features and lead enterprise readiness, risk assessment, and rollout planning  

Security, Identity & Compliance  

• Activate PIM for the Enterprise and work with the Team to better execute Role Based Access Control (RBAC)
• Partner with Security and Compliance teams to implement retention policies, sensitivity labeling, and audit capabilities
• Ensure M365 services align with regulatory, contractual, and organizational security requirements  

Adoption & Enablement  

• Lead adoption strategies for new productivity capabilities, including Microsoft Teams, Outlook and Copilot
• Use analytics and reporting to monitor usage, adoption, and value realization 
• Work with the A.I. team to enable inhouse LLM to work with documents within the M365 system 

Basic Qualifications

• Ability to lawfully access information and technology that is subject to US export controls 
• Qualified candidates should have a passion for technology, a business mindset, a customer service-oriented attitude, strong communication skills, and a willingness to work with others.
• The successful candidate will be able to prioritize, troubleshoot/resolve problems and follow-through with internal clients
• Minimum of 7 years of experience in Information Technology
• Minimum of 5 years as a hands-on administrator of Microsoft solutions, including Outlook, Office suite, Teams, SharePoint, and OneDrive, with at least 3 years in an environment with 500+ end users
• Minimum of 3 years of experience with Microsoft Active Directory and Entra ID
• Ability to understand basic Windows Active Directory; user accounts and security groups
• Strong communication, written, and customer service skills
• High aptitude and willingness to learn new technologies
• A self-starter that can work with minimal supervision; highly organized

Preferred Qualifications

• Experience in enterprise environments (500+ users preferred)
• PowerShell automation experience at scale
• Familiarity with Microsoft Purview, Defender for Office 365, Power Platform, and Microsoft Graph
• Microsoft certifications (M365, Identity) preferred

Work Environment

• Hybrid

About the team:

The Information Security organization advances the overall state of security at Rubrik through purposeful initiatives and coordination of large security projects. Information Security builds technologies, tools, and processes to better enable teams at Rubrik to develop secure software and protect data and systems with appropriate security controls. Information Security also develops systems to monitor and respond to attacks against our systems, provides awareness education to teams on security best practices for data protection, and ensures data sharing relationships with third parties in order to securely protect Rubrik information.

About the role:

Rubrik is seeking an Enterprise Security Engineer.  In this role, you will be responsible for ensuring that Rubrik's Corporate Enterprise IT technologies are designed and implemented to the highest possible security standards.  You will partner with a variety of stakeholders across the business to improve the Security posture of SaaS applications, integrations, identity and access, endpoints, wireless network, and IOT devices.. 

What you'll do:

• Design and implement security standards across Identity (Okta), Endpoint (Windows, MacOS, Linux), Secrets Management (Vault, Lastpass) and Business Applications (Salesforce, Glean, etc).
• Partner with IT and other organizations to improve the security posture of enterprise applications, integrations, and access to sensitive and business data.
• Actively participate in evaluation, development, and management of security and compliance policies within IT management systems such as JAMF, inTune, etc.
• Analyze and harden existing applications, infrastructure, automation, and deployment processes: CircleCI, Github workflows, Tines, Zapier, etc.
• Work with Corp IT teams, operations, governance, and other stakeholders to draft security standards and implement monitoring, alerting, and governance.
• Review and approve application security review requests to ensure new applications used by Rubrik and employees are secure, monitored, and security standards are enforced.
• Support the SOC in analyzing applicable threats, vulnerabilities, controls, and residual risks.
• Partner with Vulnerability Management and Threat Operations to drive remediation of critical vulnerabilities and detection of IOC’s in the environment.
• Actively monitor and manage EDR policies. 
• Partner with the organization to deploy technologies for AI usage and security.
• Leverage AI tools and agents to improve team performance, enterprise security capabilities, and team efficiency - do more with less and faster.

 Experience you'll need:

• 6+ years experience in enterprise security, with hands on experience in administration and design across Windows, Mac, Okta and public cloud infrastructure
• Broad knowledge of enterprise attack vectors and exploits in both end-user and IT Apps
• Subject matter expertise in business applications, endpoint and Identity management
• Deep understanding of endpoint systems, corporate networking including wi-fi and IT application systems (Salesforce, Mulesoft, Lastpass, etc)
• Programming experience in PowerShell, Python, Go or Java
• Experience with deploying and securing Enterprise applications and environments at scale
• Security and administrative expertise in at least one major public cloud provider (AWS, GCP, Azure) 
• Understanding of corporate security maturity model frameworks and how to apply them
• Strong written and verbal communication skills
• Knowledge of regulatory guidelines and standards such as SOC2, ISO 27001, FedRAMP, etc.

Security and Privacy Responsibilities: 

This position carries special Security and Privacy Responsibilities for protecting the U.S. Federal Government’s interests:

• Know, acknowledge, and follow system-specific security policies and procedures;
• Protect data and individual privacy per requirements and regulations;
• Perform ongoing activities in compliance with service and contractual obligations;
• Participate in role-based training, completing assignments on a timely basis; 
• Report security issues promptly, and aid investigation when needed;
• Support controlled changes and vulnerability remediation activities; and
• Work collaboratively with Information Security in designing, implementing, assessing or enhancing system-specific security and privacy controls. 

Position Risk Designation:

This position carries duties and responsibilities involving the U.S. Federal Government’s interests. The selected incumbent may be subject to one or both of the additional background checks with periodic re-screening as noted below:

Position Risk Designation: Non-Sensitive, Low Risk, Tier 1 

Incumbents without access to U.S. Government data may be required to complete Standard Form 85 and undergo a Tier 1 Investigation (T1) for non-sensitive positions of Low Risk. (Baseline screening; formerly National Agency Check and Inquiries (NACI)).

Position Risk Designation: Non-Sensitive, Moderate Risk, Tier 2 (Public Trust)

Incumbents with access to U.S. Government data may be required to complete Standard Form 85P and undergo Tier 2 (T2) Investigation for non-sensitive positions designated Moderate Risk.

Position Risk Designation:Moderate Risk Law Enforcement (CJIS)

When hired for a position where access to Moderate Risk criminal justice information is required, the employee must complete a fingerprint-based national criminal history background check within 30 days after the employee’s start date.

Rubrik is changing the way enterprises work by transforming the way Systems Integrators and the managed services community that support our joint customer base do business. Using Rubrik’s unique Data Management technology, partners can develop & implement next generation data services.  This role will allow you the opportunity to help build new lines of business for both Rubrik and its partners.

Rubrik Cloud Data Management is a single software fabric that manages all application data in the cloud, at the edge, and on-premises.  This includes backup, recovery, archival, analytics, development, and integration with today’s major public cloud providers. Rubrik enables hybrid cloud enterprises to mobilize applications across clouds, automate intelligent orchestration workflows to enable self-service, and search and analyze application data at scale.

Rubrik has partnered with the World’s leading Global Systems Integrators (GSIs) to develop successful and profitable outcomes for all involved parties. The GSI Sales Engineer candidate will be responsible for building services, driving pipelines for those services, and the broad and deep enablement of select Global Systems Integrators. The Sr. GSI Sales Engineer comes to the role with a background that includes: service creation, revenue modeling, large technical proposal authoring, and a successful track-record of managing the technical element of Global partnerships. In addition to the business skills needed, successful candidates will need to demonstrate a high technical acumen with respect to storage, virtualization, and windows/linux management.   SD-WAN and Scripting (python and PowerShell) are highly desirable skills.  This candidate will lead from the front, communicate openly, and set the example of a positive and collaborative work environment.

Required capabilities & experience:

• Successful experience partnering with Global GSIs to create and consume services 
• Provides technical leadership and direction to partners and internal staff in the development of fully integrated technology solutions   
• Architectural experience in complex infrastructures including virtualization, application high-availability, distributed systems, file systems, RDBMS, disaster recovery, public cloud, and security
• Acts as technical expert to develop partner delivered solutions that meet the technology and business requirements
• Serves as a trusted technology advisor and that delivers technical and sales presentations to partners’ technical staff and senior management
• Exemplary relationship building skills with proven ability to drive lasting relationships of mutual value with partners and sales team

Desired capabilities & experience:

• 7-8+ years of sales engineering experience preferably in a software or data center environment
• Driven – need for success, highly energetic with a strong hands-on, “can do” approach
• Entrepreneurial - willing to go the extra mile, strong work ethic, resourceful, “get it done” attitude
• Follow Up - thrives in a moving, fast-paced environment handling multiple activities per day with immediate follow up
• High business acumen and experience working with CxO level personnel, bringing technology solutions to solve complex business challenges
• Ability to demonstrate Rubrik’s RIVET values. To be a role model leading as part of a united management team, collaborating, creating a positive environment 

Rubrik provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, Rubrik complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

#LI-MR2

Rubrik is changing the way enterprises work by transforming the way Systems Integrators and the managed services community that support our joint customer base do business. Using Rubrik’s unique Data Management technology, partners can develop & implement next generation data services.  This role will allow you the opportunity to help build new lines of business for both Rubrik and its partners.

Rubrik Cloud Data Management is a single software fabric that manages all application data in the cloud, at the edge, and on-premises.  This includes backup, recovery, archival, analytics, development, and integration with today’s major public cloud providers. Rubrik enables hybrid cloud enterprises to mobilize applications across clouds, automate intelligent orchestration workflows to enable self-service, and search and analyze application data at scale.

Rubrik has partnered with the World’s leading Global Systems Integrators to develop successful and profitable outcomes for all involved parties. The GSI Sales Engineer candidate will be responsible for building services, driving pipelines for those services, and the broad and deep enablement of select Global Systems Integrators. The GSI Sales Engineer comes to the role with a background that includes: service creation, revenue modeling, large technical proposal authoring, and a successful track-record of managing the technical element of Global partnerships. In addition to the business skills needed, successful candidates will need to demonstrate a high technical acumen with respect to storage, virtualization, and windows/linux management.   SD-WAN and Scripting (python and PowerShell) are highly desirable skills.  This candidate will lead from the front, communicate openly, and set the example of a positive and collaborative work environment.

Required capabilities & experience:

• Successful experience partnering with Global GSIs to create and consume services 
• Provides technical leadership and direction to partners and internal staff in the development of fully integrated technology solutions   
• Architectural experience in complex infrastructures including virtualization, application high-availability, distributed systems, file systems, RDBMS, disaster recovery, public cloud, and security
• Acts as technical expert to develop partner delivered solutions that meet the technology and business requirements
• Serves as a trusted technology advisor and that delivers technical and sales presentations to partners’ technical staff and senior management
• Exemplary relationship building skills with proven ability to drive lasting relationships of mutual value with partners and sales team

Desired capabilities & experience:

• 7-8+ years of sales engineering experience preferably in a software or data center environment
• Driven – need for success, highly energetic with a strong hands-on, “can do” approach
• Entrepreneurial - willing to go the extra mile, strong work ethic, resourceful, “get it done” attitude
• Follow Up - thrives in a moving, fast-paced environment handling multiple activities per day with immediate follow up
• High business acumen and experience working with CxO level personnel, bringing technology solutions to solve complex business challenges
• Ability to demonstrate Rubrik’s RIVET values. To be a role model leading as part of a united management team, collaborating, creating a positive environment

#LI-MR2 

Hudson River Trading (HRT) is seeking a Windows Systems Engineer to join our Enterprise Engineering team. In this role, you will help scale HRT’s global hybrid Windows deployment and develop automation, configuration-as-code, and infrastructure-as-code solutions to seamlessly manage fleets of top-of-the-line user endpoints, mission critical servers, cloud infrastructure, and secure remote computing environments around the world. You will apply configuration-as-code practices to reduce operational overhead, build PowerShell-based systems that improve platform stability and resilience, and enhance the reliability of our Windows platform by designing and implementing automation that identifies and resolves technical inefficiencies across on-premises and Azure infrastructure.

The ideal candidate is a Microsoft-based technology engineer and eager problem solver who is comfortable working in a fast-paced environment. Terrific communication and collaboration skills, as well as a positive attitude towards team members and internal customers, are crucial to success within this role. 

Responsibilities

• Leverage configuration-as-code paradigms to reduce the operational overhead of managing Windows infrastructure
• Use infrastructure-as-code to consistently configure Microsoft Azure resources
• Develop PowerShell-based systems to automate operational tasks and enhance the reliability of the Windows platform
• Leverage automation to identify and remediate technical inefficiencies across Windows endpoints, Windows infrastructure, and Microsoft Azure resources
• Participate in ongoing engineering, maintenance, and support efforts to improve the Windows environment

Qualifications

• 10+ years of experience as a Microsoft-based technology engineer
• Experience using Ansible (or similar configuration-as-code tool) to manage a fleet of Windows devices
• Proven ability to provision Microsoft Azure resources with Terraform
• Proficiency with Microsoft Graph API development
• Experience developing scripts and tools using PowerShell
• Familiarity with Microsoft Intune, Autopilot, Entra ID, and Active Directory
• A general design approach that incorporates security best practices, business continuity, high availability, and scalability
• A self-motivated and driven work ethic

The estimated base salary range for this position is 150,000 to 250,000 USD per year (or local equivalent). The base pay offered may vary depending on multiple individualized factors, including location, job-related knowledge, skills, and experience. This role will also be eligible for discretionary performance-based bonuses and a competitive benefits package.

JOB SUMMARY:

The Jira Platform & Identity Automation Engineer is responsible for designing and implementing automation and structured data models across Jira Service Management and Jira Assets. This is a short-term project (6 months) contract with British Aerospace Engineering.  The role focuses on automating Active Directory (AD) access workflows and building scalable, maintainable systems that translate business processes into reliable, auditable automation. The engineer will support both the development of a structured asset/data model and the automation of high-volume AD group membership changes based on approved service requests.

SUMMARY OF ESSENTIAL JOB FUNCTIONS:

AD Automation & Workflow Execution

• Design and implement automation that converts approved Jira tickets into AD group membership changes
• Integrate Jira workflows with execution platforms (e.g., PowerShell services or VMware Aria Orchestrator)
• Develop and maintain automation using ScriptRunner for Jira or equivalent tools
• Implement validation, idempotency, and error handling for automated actions
• Ensure all changes are logged, auditable, and attributable

Jira Assets (CMDB) Design & Implementation

• Design object schemas in Jira Assets for devices, infrastructure, applications, and services
• Define relationships between assets (e.g., system → owner → access groups)
• Establish data standards, governance, and lifecycle processes for Assets
• Integrate Assets with Jira forms to enforce structured input and reduce errors

Platform Integration & Architecture

• Define and implement separation between request intake (Jira), data/policy (Assets), and execution (automation/orchestration)
• Build integrations between Jira, Assets, and external systems via REST APIs
• Ensure scalability and maintainability of automation workflows

Identity & Access Management Alignment                                                   

• Support and improve AD group lifecycle and access request processes
• Apply IAM principles including least privilege, role-based access, and separation of duties
• Identify opportunities to reduce manual access provisioning and improve consistency

REQUIRED SKILLS AND EXPERIENCE:

• Hands-on experience with Active Directory, including security groups and group membership management
• Experience with PowerShell-based administration
• Experience with Jira Service Management, including workflows, request types, and automation
• Experience designing or working with structured data models (CMDB, asset systems, or similar)
• Experience with scripting and automation
• Experience integrating systems via APIs
• Strong understanding of RBAC, least privilege, and separation of duties

EDUCATION: Bachelors with  3+ or Master with  1+ Years of Experience

LENGTH: 6 months

LOCATION: Full Time/ On-Site in Broomfield, CO

CLEARANCE REQUIRMENT:  TS/SCI Eligible 

DOD 8570 REQUIREMENT: IAT - Level II

SALARY RANGE: $100 to $120 per hour

PHYSICAL DEMANDS:

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this position. Reasonable accommodations may be made to enable individuals with disabilities to perform these functions.

While performing the duties of this job, the employee is regularly required to:

• Remain in a stationary position for extended periods of time.
• Operate a computer, keyboard, and other office equipment using hands and fingers.
• Communicate effectively in person, over the phone, and through electronic means.
• Occasionally move about the office to access files, office equipment, and meeting spaces.
• Lift and/or move up to 15 pounds as needed.
• Maintain specific vision abilities, including close vision and the ability to adjust focus.

WORK ENVIRONMENT:

This position is performed within a secure, classified workspace. Employees must comply with all applicable security protocols and access control procedures, including restrictions on personal electronic devices and the handling of sensitive information.

WHAT IS BOX? 

Box (NYSE:BOX) is the leader in Intelligent Content Management. Our platform enables organizations to fuel collaboration, manage the entire content lifecycle, secure critical content, and transform business workflows with enterprise AI. We help companies thrive in the new AI-first era of business. Founded in 2005, Box simplifies work for leading global organizations, including JLL, Morgan Stanley, and Nationwide. Box is headquartered in Redwood City, CA, with offices across the United States, Europe, and Asia.

By joining Box, you will have the unique opportunity to continue driving our platform forward. Content powers how we work. It’s the billions of files and information flowing across teams, departments, and key business processes every single day: contracts, invoices, employee records, financials, product specs, marketing assets, and more. Our mission is to bring intelligence to the world of content management and empower our customers to completely transform workflows across their organizations. With the combination of AI and enterprise content, the opportunity has never been greater to transform how the world works together and at Box you will be on the front lines of this massive shift.

WHAT YOU'LL DO

The Senior IT Platform & Identity Engineer will join a global team comprised of the most talented IT professionals in the industry. Box IT is looking for an exceptional candidate to support our IT Platform & Identity team across client endpoint management systems and various SaaS solutions, while also supporting our IAM ecosystem. As an IT Platform & Identity Engineer, you will work on a variety of different systems and software to maintain our corporate endpoint and mobile device ecosystem, support our Identity and Access Management strategy (IAMs), and build new integrations across various cloud services that support day-to-day operations for IT and Security. To succeed in this fast-paced, challenging position you will need to be a highly motivated problem solver, focused on frictionless outcomes in support of the best possible end user experience, and deeply passionate about all things IT.

Box lives its values, with community and in-person collaboration being a core part of our culture. Boxers are expected to work from their assigned office a minimum of 3 days per week.Your Recruiter will share more about how we work and company culture during the hiring process.

At Box, we believe unique and diverse experiences benefit our culture, our products, our customers, our company, and our world. We aim to recruit a passionate, high-performing workforce that reflects the world we live in. If you are head-over-heels about this role but unsure if you meet all the requirements, we encourage you to apply!

EQUAL OPPORTUNITY

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability, and any other protected ground of discrimination under applicable human rights legislation. Box strives to respect the dignity and ‎‎independence of people with disabilities and is committed to giving them the same ‎‎opportunity to succeed as all other employees. Inclusiveness is core to our culture at Box, and we strive to ensure you get the most from your interview experience.

Box makes reasonable accommodations for applicants with disabilities. If a reasonable accommodation is needed to participate in the job application or interview process, please complete this form. Reasonable accommodations may include scheduling adjustments, document dictation and beyond.

Notice to applicants in Los Angeles:  Box, Inc and its related branches will consider for employment, qualified applicants with criminal histories in a manner consistent with the Los Angeles Fair Chair Ordinance.  The Fair Chance Ordinance is provided here. 

Notice to applicants in San Francisco:  Box, Inc and its related branches will consider for employment, qualified applicants with criminal histories in a manner consistent with the San Francisco Fair Chair Ordinance.  The Fair Chance Ordinance is provided here. 

For details on how we protect your information when you apply, please see our Personnel Privacy Notice. If you are a California-resident, please read our California Applicant & Candidate Privacy Notice here.

Title:  Senior Solutions Architect II

Location: United States; Remote, EST or CST

Experience: Senior 

Job Function:  Professional Services

Employment Type:  Full-Time 

Industry:  Computer & Network Security

Travel Requirements: <25%

About the position

The Advanced Solutions Architect provides strategic leadership in designing and implementing solutions for large-scale projects. They drive innovation and thought leadership in customer engagements, collaborate closely with Sales teams on pre-sales activities, and serve as a key escalation point for complex technical issues.

Job Responsibilities

• Lead cross-functional teams in designing and delivering tailored solutions to meet customer requirements.
• Provide strategic leadership in designing and implementing solutions for large-scale projects.
• Drive innovation and thought leadership in customer engagements.
• Collaborate with Sales teams on pre-sales activities.
• Serve as a key escalation point for complex technical issues.
• Lead the design and architecture of enterprise-level solutions.
• Identify and mitigate risks in solution implementations. 
• Actively contribute to the improvement of service delivery processes.
• Mentor and coach junior team members.
• Engage with customers to understand their business challenges and objectives.
• Represent the company at industry events and conferences. 

Minimum Qualifications, Education, and Skills

• Bachelor's degree in Computer Science, Information Technology, or relevant field preferred; or equivalent experience.
• Solid knowledge in a technical, MSP, or software consulting capacity.
• Extensive knowledge of industry trends, company strategy, and cross-functional processes.
• Competent understanding of core networking and infrastructure fundamentals.
• Competent with Active Directory Certificate Services & Active Directory Federation Services.
• Competent with Unix/Linux.
• Competent in scripting development using various Microsoft tools (SQL, PowerShell, etc.).
• Competent in Public-Key Infrastructure (PKI), digital certificates, and cryptography.
• Competent with business application suites such as Microsoft 365.
• Ability to lead complex projects, drive strategic initiatives, and influence decision-making. 

#LI-NA1

Simtra BioPharma Solutions (Simtra) is a world-class Contract Development Manufacturing Organization, partnering with pharmaceutical and biotech companies to bring their sterile injectable products to market. With facilities in Bloomington, Indiana, US and Halle/Westfalen, Germany, we offer a wide range of delivery systems including pre-filled syringes, liquid/lyophilized vials, diluents for reconstitution, powder-filled vials and sterile crystallization.  

Our product types include biologics and small molecules, cytotoxics, highly potent compounds, diluents for reconstitution and vaccines – which are all directly injected into patients worldwide.  As such, there is a strong emphasis on quality and continuous improvement at Simtra.  We hold ourselves to the highest quality and regulatory standards.

While our primary focus is cGMP manufacturing, we offer many support services including formulation and development, lyophilization optimization, global regulatory support and secondary packaging.  Our teams are driven to help clients scale, innovate and bring life-changing medicines to patients worldwide.

Why join Team Simtra? Because we:

Make it HAPPEN – We bring a growth mindset to every opportunity, developing new skillsets and exceeding our expectations and those of our customers.

Make it TOGETHER – We work as one, respecting each voice and tapping into our unique strengths across teams—so we can solve problems in new ways.

Make it RIGHT – We hold ourselves to a high standard of excellence, fulfilling our commitments to the customer, their patients, and our team members.

Make it COUNT – We take pride in our day-to-day work, knowing the impact we make – taking on challenges big and small to improve patient health.

This role:

We are seeking a highly experienced and strategic Senior Database Administrator (DBA) and enterprise application architect to join our IT team. The ideal candidate will bring over fifteen years of hands-on expertise in Oracle Database Administration, MS SQL Server, and multi-platform enterprise application  environments such as Oracle, SAP, JDEdwards, on different operating systems including Linux/Unix and Windows. This role also requires deep technical knowledge of application architecture, datacenter infrastructure, including networking, virtualization, and enterprise storage systems. The Senior DBA and architect will play a key role in architecting and designing database and infrastructure solutions, providing day-to-day operational support, and leading technical delivery of complex projects to support our enterprise applications.

What you'll be doing:

• Architect and design scalable, secure, and high-performance database solutions across Oracle and MS SQL Server platforms.
• Lead the architecture and integration of database systems with datacenter technologies including networking, virtualization, and storage.
• Provide day-to-day support for production, development, and test database environments, ensuring optimal performance and uptime.
• Collaborate with infrastructure, application, and security teams to align database and datacenter strategies with business goals.
• Lead the technical delivery of database and infrastructure projects, including upgrades, migrations, and consolidations.
• Develop and enforce database standards, best practices, and security policies.
• Perform capacity planning, performance tuning, and disaster recovery planning.
• Troubleshoot and resolve complex issues across database, OS, network, and storage layers.
• Ensure core enterprise applications are performing at optimal speeds and are fully backed up and redundant.
• Mentor junior DBAs and technology managers to serve as a subject matter expert across all IT teams.

Technical Skills & Expertise:

Enterprise Applciations:

• JDEdwards
• Oracle Applications
• D365
• SAP
• PTC
• Siebel
• Salesforce
• Workday
• Other HRIS Platforms

Database Platforms:

• Oracle: 10g, 11g, 12c, 19c
• MS SQL Server: 2008, 2012, 2016, 2019, 2022
• Postgres
• NoSQL Databases
• ODBC
• Reporting Replicas
• Datawarehousing Techniques
• Snowflake
• PL/SQL, T-SQL, SQL performance tuning

Operating Systems:

• Unix/Linux: Solaris 5, AIX, RHEL, CentOS
• Windows Server: 2003, 2008, 2012, 2016, 2019, 2022

Datacenter Technologies:

• Networking: TCP/IP, DNS, DHCP, VLANs, firewalls, load balancers
• Virtualization: VMware vSphere/ESXi, Microsoft Hyper-V, Oracle VM
• Storage: SAN/NAS, RAID, Fibre Channel, iSCSI, NetApp, EMC, Dell EqualLogic

Cloud Technologies:

• AWS
• Azure
• Datalakes
• Data Lakehouses
• Data warehouses

Scripting & Automation:

• Bash, PowerShell, Python (for automation)
• Infrastructure automation tools (e.g., Terraform, preferred)

Preferred Certifications:

• Oracle Certified Professional (OCP)
• Microsoft Certified: Database Administrator
• VMware Certified Professional (VCP)
• Red Hat Certified Engineer (RHCE)

What you'll bring:

• 15+ of experience in life sciences, pharma or biotech
• 15+ years of leadership in technology & architecture
• Ability to travel internationally as necessary.

Physical / Safety Requirements

• Position requires sitting for long hours, but may involve walking or standing for periods of time

In return, you’ll be eligible for[1]:

• Day One Benefits
• Medical & Dental Coverage
• Flexible Spending Accounts
• Life and AD&D Insurance
• Supplemental Life Insurance
• Spouse Life Insurance
• Child Life Insurance
• 401(k) Retirement Savings Plan with Company Match
• Time Off Program
• Paid Holidays
• Paid Time Off
• Paid Parental Leave and more
• Adoption Reimbursement Program
• Education Assistance Program
• Employee Assistance Program
• Community and Volunteer Service Program
• Additional Benefits
• Short and Long-Term Disability Insurance
• Voluntary Insurance Benefits
• Vision Coverage
• Accident
• Critical Illness
• Hospital Indemnity Insurance
• Identity Theft Protection
• Legal and more
• Onsite Campus Amenities
• Workout Facility
• Cafeteria
• Credit Union

[1] Current benefit offerings are in effect through 12/31/26

Disclaimer

This job description is intended to provide the minimum knowledge, skills and abilities necessary to perform the job.  It may not be inclusive of all the duties and responsibilities of the job.  Simtra reserves the right to make modifications based on business requirements.

Equal Employment Opportunity

Simtra is proud to be an equal opportunity employer. Simtra evaluates qualified applicants without regard to race, color, religion, gender, national origin, age, sexual orientation, gender identity or expression, protected veteran status, disability/handicap status or any other legally protected characteristic.

Data Privacy

To learn more about Simtra's approach to data privacy, please review the Simtra Recruitment Platform Global Privacy Policy:  https://simtra.com/privacy-policy/

Job Summary: 

The RPA Developer I is responsible for the development and administration of solutions for managed RPA environments. The RPA developer will partner with various teams to design, implement, test, document, and deploy enhancements, fixes, and configuration changes needed. RPA developers should also have an understanding of API design, including principles of REST, JSON and OAuth and be comfortable working with databases and web technologies.

Job Expectations: 

• Develop stable, secure, and scalable RPA solutions using UiPath that focus on identity and user access control processes.
• Design, develop, and maintain RPA workflows using UiPath Studio
• Integrate RPA solutions with other systems and applications, such as databases, APIs, and third-party software
• Monitor bots post-deployment, and proactively fixes bugs
• Open to learning new automations and technical tools
• Directing meetings and workshops with other business units to gather requirements and design solutions.
• Documenting process workflows, creating technical designs, release notes, and other project documentation to support development, security, operations, and maintenance of a project.
• Ensure that RPA solutions adhere to industry best practices and compliance standards, including data security and privacy regulations
• Be available to work after hours and provide support for a 24/7 operation
• The duties and responsibilities described above may provide only a partial description of this position. This is not an exhaustive list of all aspects of the job.  Other duties and responsibilities not outlined in this document may be added as necessary or desirable, with or without notice.

The duties and responsibilities described above may provide only a partial description of this position. This is not an exhaustive list of all aspects of the job. Other duties and responsibilities not outlined in this document may be added as necessary or desirable, with or without notice.

Job Requirements:

• Background developing with UiPath
• Experience with scripting languages (PowerShell, Python, Javascript, etc.)
• Solid understanding of workflow design principles.
• Experience with databases (SQL or NoSQL)
• Knowledgeable on agile-driven development using Scrum methodology
• Strong grasp on how to use RESTful API
• Experience with Amazon S3
• Intermediate to advanced knowledge of Microsoft Excel

Experience Requirements:

• Generally prefers minimum of two (2) years of Robotic Process Automation Experience (UIpath, Blueprism, Nice) or two (2) years of Development Experience

Education Requirements:

• Bachelor's Degree in Computer Information Systems or related field required.

Judgment/Reasoning Ability:  Able to identify, troubleshoot and resolve problems quickly using sound judgment, poise, and diplomacy.  Ability to use judgment and reasoning skills, and determine when to escalate issues, as required, in a timely manner.

Physical Demands: The physical demands described here are representative of those that must be met by a Team Member to successfully perform the essential functions of this job. While performing the duties of this job, the Team Member is regularly required to talk and hear. The Team Member is frequently required to sit, walk, climb stairs, use hands and fingers, bend, stoop and reach with hands and arms.  Reaching above shoulder heights, below the waist or lifting as required to file documents or store materials throughout the workday. The Team Member may occasionally lift or move office products and supplies up to 25 pounds. Proper lifting techniques required.  Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Work Environment: The noise in the work environment is usually moderate for those working onsite. Other factors are:

• Hectic, fast-paced with multi-level distractions.
• Professional, yet casual work environment.
• Office / Warehouse environment.
• Ability to work extended hours as required.

#LI-JC1

Simtra BioPharma Solutions (Simtra) is a world-class Contract Development Manufacturing Organization, partnering with pharmaceutical and biotech companies to bring their sterile injectable products to market. With facilities in Bloomington, Indiana, US and Halle/Westfalen, Germany, we offer a wide range of delivery systems including pre-filled syringes, liquid/lyophilized vials, diluents for reconstitution, powder-filled vials and sterile crystallization.  

Our product types include biologics and small molecules, cytotoxics, highly potent compounds, diluents for reconstitution and vaccines – which are all directly injected into patients worldwide.  As such, there is a strong emphasis on quality and continuous improvement at Simtra.  We hold ourselves to the highest quality and regulatory standards.

While our primary focus is cGMP manufacturing, we offer many support services including formulation and development, lyophilization optimization, global regulatory support and secondary packaging.  Our teams are driven to help clients scale, innovate and bring life-changing medicines to patients worldwide.

Why join Team Simtra? Because we:

Make it HAPPEN – We bring a growth mindset to every opportunity, developing new skillsets and exceeding our expectations and those of our customers.

Make it TOGETHER – We work as one, respecting each voice and tapping into our unique strengths across teams—so we can solve problems in new ways.

Make it RIGHT – We hold ourselves to a high standard of excellence, fulfilling our commitments to the customer, their patients, and our team members.

Make it COUNT – We take pride in our day-to-day work, knowing the impact we make – taking on challenges big and small to improve patient health.

Senior Desktop Engineer and Executive Support

Overall: The Senior Desktop Engineer and Executive Support serves as the primary Endpoint Manager, responsible for managing all endpoint devices using Microsoft Intune and SCCM to ensure security, compliance, and optimal performance. This role requires deep expertise in Windows operating systems, including registry management, Autopilot, Active Directory (AD), and group policies. The position emphasizes endpoint security, efficient deployment strategies, and enterprise device reliability. Additionally, the Senior Desktop Engineer acts as the on-site technical expert at our Global Headquarters in Parsippany, NJ, providing white-glove IT support to executive leadership and efficient IT support to corporate employees on-site and remotely.

Key Responsibilities:

1. Endpoint & Device Management:
• Serve as the primary Endpoint Engineer, managing endpoints with Intune and SCCM.
• Develop, design and support our desktop image, autopilot deployment scripts, and group policies to fully control, secure, and manage our desktop and workstation environments.
• Oversee application deployment for Win32, MSI, and line-of-business apps.
• Monitor device health, troubleshoot, and resolve issues proactively.
2. Windows Operating System Expertise:
• Manage Windows OS, including registry settings, updates, and servicing models.
• Create and manage GPOs for user and device configurations.
• Administer endpoints in Active Directory and Azure AD.
• Troubleshoot advanced OS issues, including performance and compatibility.
3. Security and Compliance:
• Manage endpoint security tools (Defender, BitLocker, AppLocker).
• Ensure compliance with frameworks like NIST and ISO 27001.
• Configure Conditional Access policies integrated with Intune and Azure AD.
4. Executive & VIP Support:
• Provide white-glove IT support to executive leadership.
• Quickly resolve critical issues and act as a trusted advisor for VIP users.
5. Corporate IT Support:
• Resolve technical issues for on-site and remote corporate employees.
• Troubleshoot hardware and software problems efficiently.
6. Automation and Scripting
• Use PowerShell to automate endpoint tasks, app packaging, and deployments.
• Develop scripts to improve efficiency and resolve recurring issues.
7. Audio/Visual & Collaboration Tools:
• Manage AV systems, including Teams Rooms, for events and meetings.
• Test and monitor AV readiness and support high-profile events.
• Ensure seamless integration of M365 tools like Teams and OneDrive.
8. Incident & Problem Management:
• Serve as the primary interface to Microsoft for Windows and desktop-related issues.
• Provide Level 3/4 support, collaborating with IT teams and vendors.
• Identify recurring problems and implement long-term solutions.
9. Infrastructure & Networking:
• Maintain local network infrastructure and perform server administration to ensure the reliability, security, and optimal performance of critical IT systems.
10. Project Management
• Build and maintain strong relationships with corporate users, including executive leadership
• Lead endpoint refreshes, rollouts, and migrations.
• Work with teams to implement new endpoint policies and technologies.

Candidate Requirements:

• Bachelor’s degree (Preferred) in information technology, Computer Science, or a related field.
• Certifications (Preferred): Microsoft Certified (Endpoint, M365, Azure, and/or Teams), ITIL Foundation; CompTIA A+, Network+, Security+
• 8+ years of experience in IT support roles, with at least 3+ years focused on endpoint management using Intune and SCCM
• Extensive expertise in:
• Microsoft Intune: Enrollment, compliance policies, Autopilot, and Conditional Access.
• SCCM: Imaging, application packaging, and software/patch deployment.
• Windows OS: Registry, updates, GPOs, Active Directory, and troubleshooting.
• Endpoint security tools: Windows Defender, BitLocker, AppLocker.
• Strong PowerShell scripting skills for automation and efficiency.
• Strong knowledge of networking, including DNS, DHCP, and VPN for endpoint connectivity.
• Experience with ServiceNow or similar ITSM tools, and remote support technologies
• Exceptional problem-solving skills and ability to handle high-pressure situations.
• Excellent communication and interpersonal skills, with experience supporting executives
• Highly organized and detail-oriented, with the ability to manage multiple priorities effectively.

Why Join Us?
As the Lead IT Support Engineer, you’ll play a crucial role in shaping the technology experience for our executive leadership and broader employee base. This is an exciting opportunity to drive impactful IT initiatives in a fast-paced, biopharma environment.

In return, you’ll be eligible for [1]:

• Day One Benefits
  • Medical & Dental Coverage
  • Flexible Spending Accounts
  • Life and AD&D Insurance
  • Supplemental Life Insurance
    • Spouse Life Insurance
    • Child Life Insurance
  • 401(k) Retirement Savings Plan with Company Match
  • Time Off Program
    • Paid Holidays
    • Paid Time Off
    • Paid Parental Leave and more
  • Adoption Reimbursement Program
  • Education Assistance Program
  • Employee Assistance Program
  • Community and Volunteer Service Program
• Additional Benefits
  • Short and Long-Term Disability Insurance
  • Voluntary Insurance Benefits
    • Vision Coverage
    • Accident
    • Critical Illness
    • Hospital Indemnity Insurance
    • Identity Theft Protection
    • Legal and more
  • Onsite Campus Amenities
    • Workout Facility
    • Cafeteria
    • Credit Union

[1] Current benefit offerings are in effect through 12/31/26

The pay range reflected represents what we reasonably expect to pay for this job.  The pay offered will depend on factors such as the candidate’s education, experience, skills and geographical location.  In addition to base pay, employees are eligible to participate in an annual bonus plan and employee ownership plan.  Eligible employees also receive a comprehensive and highly competitive benefits package, including a variety of health, retirement, caregiving, emotional wellbeing, and other flexible benefits – plus elective options to support the diverse needs of our workforce.

Salary Range – New Jersey

$120,000 - $135,000 annually.

Disclaimer

This job description is intended to provide the minimum knowledge, skills and abilities necessary to perform the job.  It may not be inclusive of all the duties and responsibilities of the job.  Simtra reserves the right to make modifications based on business requirements.

Equal Employment Opportunity

Simtra is proud to be an equal opportunity employer. Simtra evaluates qualified applicants without regard to race, color, religion, gender, national origin, age, sexual orientation, gender identity or expression, protected veteran status, disability/handicap status or any other legally protected characteristic.
                                                                                                                                                            
EEO is the Law 
EEO is the law - Poster Supplement 
Pay Transparency Policy

Data Privacy

To learn more about Simtra's approach to data privacy, please review the Simtra Recruitment Platform Global Privacy Policy:

https://biopharmasolutions.baxter.com/simtra-recruitment-platform-privacy-policy

THE POSITION
Our roster has an opening with your name on it

We're seeking a Security Engineering Manager to lead our Cyber Defense Engineering team — a high-performing group of security engineers responsible for managing security risk across FanDuel’s global operations. This role sits at the intersection of technical depth and people leadership. You'll need genuine security credibility to earn the trust of your team and partners, paired with the managerial craft to develop engineers, drive a compelling roadmap, and scale your charter through partnerships and automation. 

Your team's purview spans endpoint security, SaaS security risk, AI guardrails and enablement, and Data Protection to name a few—a broad and consequential scope that touches every FanDueler. You will report to the Sr. Manager of Cyber Defense Engineering. 

In addition to the specific responsibilities outlined above, employees may be required to perform other such duties as assigned by the Company. This ensures operational flexibility and allows the Company to meet evolving business needs.

THE GAME PLAN
Everyone on our team has a part to play

• Lead, develop, and grow a team of security engineers, investing in their technical craft, career progression, and day-to-day effectiveness
• Own the strategy and roadmap for security engineering and drive its execution
• Serve as a hands-on technical leader and security subject matter expert; earn credibility with engineers and partners alike by engaging meaningfully in technical decisions and pragmatic risk discussions 
• Scale impact through automation, AI-motivated workflows, and a disciplined approach to key partnerships
• Translating 'secure by default' into practical controls that reduce risk without impeding the business
• Drive team accountability to operational excellence — owning incident response within your sphere, eliminating toil, and holding a high standard of execution 

THE STATS
What we're looking for in our next teammate

• Demonstrated experience leading and growing a security engineering team, with a track record of delivering meaningful risk reduction at scale
• You have experience leading or managing engineers, either as a people manager or technical leader with people responsibility.
• Deep technical credibility across multiple security domains: Zero Trust/Conditional Access approaches, Endpoint Security, Data Protection, Mobile Device Management (MDM), SaaS Security are a few you can expect to operate in.
• Ability to engage substantively in technical design and architecture decisions — you don’t need write code, but you need to understand what your team is building and why
• Familiarity with development and automation approaches in a security context. Our team uses Python, PowerShell, Terraform, and has dabbled a little bit in Go.
• Hands-on experience building with AI tools and securing AI technologies. You understand both how to leverage AI to multiply your team's output and how to identify and mitigate the risks AI introduces to the enterprise.
• Strong strategic and roadmap planning skills: you can identify the highest-leverage opportunities, build conviction around a direction, and rally partners to execute
• Excellent communication and stakeholder management skills
• Ability to lead with calm and clarity in a rapidly evolving threat landscape and high-ambiguity environment
• You care deeply about developing people and creating healthy, high-performing teams. 

Don’t check all the boxes? That’s okay! We encourage you to still apply if you feel like you possess an adjacent skill set and are interested in learning more about this position. 

ABOUT FANDUEL

FanDuel Group is the premier mobile gaming company in the United States and Canada. FanDuel Group consists of a portfolio of leading brands across mobile wagering including: America’s #1 Sportsbook, FanDuel Sportsbook; its leading iGaming platform, FanDuel Casino; the industry’s unquestioned leader in horse racing and advance-deposit wagering, FanDuel Racing; and its daily fantasy sports product.  

In addition, FanDuel Group operates FanDuel TV, its broadly distributed linear cable television network and FanDuel TV+, its leading direct-to-consumer OTT platform. FanDuel Group has a presence across all 50 states, Canada, and Puerto Rico.

The company is based in New York with US offices in Los Angeles, Atlanta, and Jersey City, as well as global offices in Canada and Scotland. The company’s affiliates have offices worldwide, including in Ireland, Portugal, Romania, and Australia.

FanDuel Group is a subsidiary of Flutter Entertainment, the world's largest sports betting and gaming operator with a portfolio of globally recognized brands and traded on the New York Stock Exchange (NYSE: FLUT).

PLAYER BENEFITS
We treat our team right

We offer amazing benefits above and beyond the basics. We have an array of health plans to choose from (some as low as $0 per paycheck) that include programs for fertility and family planning, mental health support, and fitness benefits. We offer generous paid time off (PTO & sick leave), annual bonus and long-term incentive opportunities (based on performance), 401k with up to a 5% match, commuter benefits , pet insurance, and more - check out all our benefits here: FanDuel Total Rewards. *Benefits differ across location, role, and level.

FanDuel is an equal opportunities employer and we believe, as one of our principles states, “We are One Team!”. As such, we are committed to equal employment opportunity regardless of race, color, ethnicity, ancestry, religion, creed, sex, national origin, sexual orientation, age, citizenship status, marital status, disability, gender identity, gender expression, veteran status, or any other characteristic protected by state, local or federal law. We believe FanDuel is strongest and best able to compete if all employees feel valued, respected, and included.

The applicable salary range for this position is $173,000 - $ 216,000 USD, which is dependent on a variety of factors including relevant experience, location, business needs and market demand. This role may offer the following benefits: medical, vision, and dental insurance; life insurance; disability insurance; a 401(k) matching program; among other employee benefits. This role may also be eligible for short-term or long-term incentive compensation, including, but not limited to, cash bonuses and stock program participation. This role includes paid personal time off and 14 paid company holidays. FanDuel offers paid sick time in accordance with all applicable state and federal laws.

FanDuel is committed to providing reasonable accommodations for qualified individuals with disabilities. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please email Benefits@fanduel.com.

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

#LI-Hybrid

As a Windows Server Team Lead, you will work within Infrastructure to design, build, and operate scalable systems that support the business. Your focus will be on Windows server platforms, identity services, automation, and reliability engineering across on‑prem Windows environments and hybrid cloud integrations.

What You’ll Do

• Lead and develop a team of Windows Server engineers, setting priorities and focusing effort on high‑impact reliability and platform initiatives.
• Design and implement high‑performance Windows Server solutions with a strong emphasis on availability, operational excellence, and latency‑sensitive trading workloads.
• Drive automation and infrastructure‑as‑code practices to improve deployment consistency, reduce manual work, and scale operations.
• Lead Active Directory modernization and hybrid identity initiatives, ensuring secure, reliable access across the firm.
• Partner closely with Security, Infrastructure, and Development teams to plan and deliver changes safely and predictably.
• Improve incident response through clear leadership during events, root cause analysis, and durable preventative follow‑ups.
• Contribute to resource management, forecasting requirements, and enhancing performance to support peak market activity.
• Produce and maintain documentation (runbooks, diagrams, post‑incident reviews) to support knowledge sharing and continuous improvement.
• Participate in an on‑call rotation and provide leadership during critical incidents as needed.

What We’re Looking For

• Good interpersonal skills with the ability to lead, mentor, and collaborate across technical teams.
• A pragmatic approach that balances fast delivery with long‑term maintainability and operational excellence.
• Ability to triage and resolve issues end‑to‑end, including clear ownership of root cause and prevention.
• 8+ years of hands‑on Windows Server administration experience in critical, high‑availability environments.
• Deep expertise in Windows Server, Active Directory, Group Policy, DNS, DHCP, and Failover Clustering, including performance tuning and resolving complex challenges.
• Proven leadership experience running infrastructure teams (or acting as a senior technical lead), with a record of developing engineers and driving standards.
• Strong PowerShell scripting/automation skills; experience with infrastructure‑as‑code tools and/or configuration management (or demonstrated willingness to adopt and lead these efforts).
• Willingness to participate in an on‑call rotation and lead through high‑severity incidents.
• Meticulous attention to procedure, change management, and meeting service expectations.

Nice to Haves

• Experience with enterprise platforms such as SCCM/MECM, endpoint/server monitoring, backup systems, and/or load balancers.
• Familiarity with ITIL concepts, operational workflows, project management, and DevOps/CI/CD practices.
• Experience supporting financial services infrastructure, trading systems, or market data platforms.
• Exposure to modern deployment approaches (e.g., containerization, orchestration).

Work Location and Collaboration

This role is based in Chicago, working closely with Infrastructure, Security, Networking, and Development teams for high‑bandwidth collaboration. We value face‑to‑face teamwork and pragmatic flexibility.

Are you an experienced infrastructure engineer who has a passion for the latest cloud strategies? Do you thrive in fun yet challenging environments with complex distributed systems? If so, join us and be a key contributor in Ivanti’s success.

Site Reliability Engineering (SRE) is a growing team that partners closely with Product Engineering, Security, and Support. We are responsible for the reliability, deployment, and continuous operation of the Ivanti Cloud services.  We need your help to take our existing platform to the next level with observability, release automation, chaos engineering and more.

The SRE role is a blend of infrastructure, networking, operating systems, automation, development, and application administration. It is a hands-on technical position in a fast-paced atmosphere. The ideal candidate has prior experience managing cloud-based SaaS applications and strives to solve traditional operations problems through automation and software. More so, the candidate must possess a high standard of excellence, have a strong customer focus, and is capable of technical deep dives into code, app servers, databases, load balancers, operating systems, and/or networks.

What we need:

• BS in Computer Science/Software Engineering.
• Enthusiastic self-starter who is eager to learn
• Linux deployment and troubleshooting skills
• Windows deployment and troubleshooting skills
• Network deployment and troubleshooting skills
• Experience deploying and troubleshooting Kubernetes and Docker containers and networks
• Able to code in one or more: Java, Python, Ruby, PowerShell, advanced Shell Script, other OOP language
• Participate in a 24x7 production on-call rotation
• Strong verbal and written communication skills
• U.S. Citizenship on U.S. soil (FedRAMP)
• U.S. Swing shift hours (2 PM Pacific start time)
• Able to work remotely from within the U.S.

 Bonus Points

• Industry experience
• Familiar with one or more: MongoDB, MySQL, PostgreSQL, Redis, Kafka, or similar
• Familiar with one or more: Amazon Web Services, Microsoft Azure
• Able to configure and fine tune at least one: Webapps (Azure), Function Apps (Azure), Load balancers (Azure), HAProxy, Apache, Nginx, or similar
• Familiar with continuous integration tools: Chef, Ansible, Jenkins, Terraform, Git, or similar
• Familiar with log event aggregation, metric collection and application monitoring/exception handling: New Relic APM, InfluxDB, OpenTSD, Graphite, Elastic Search, Splunk, etc.
• Familiar with VNet/Subnetting, Firewalls, Security Groups
• Strong understanding of DevOps practices and Object-Oriented Design principles
• Experience with SOC 2, FedRAMP, and/or ISO 27001 controls

Why Ivanti?

• Friendly flexible working model: Empower excellence whether you’re at home or in the office and support work-life balance.
• Competitive total rewards: Health, wellness, and financial plans tailored for you and your family.
• Global, diverse teams: Collaborate with talented people from over 23 countries.
• Learning & development: Access best-in-class learning tools and programs so you can grow your skills.
• Equity & belonging: Every voice counts. Your story helps shape our solutions for a changing world.

What drives us?

Ivanti’s mission is to elevate human potential through technology—managing, protecting, and automating IT for continuous innovation. Our commitment to diversity, inclusion, and our global teams powers the world-class solutions we deliver for our customers.

Inclusion at Ivanti

Ivanti is proud to be an Equal Opportunity Employer. We’re dedicated to building a diverse team and creating an inclusive environment where everyone belongs. We welcome applicants from all backgrounds and walks of life.

Need adjustments during the process? Reach out to talent@ivanti.com—we’re happy to help.

Ready to make an impact? Apply now and help us build the future of IT!

#LI-Remote
#LI-AA1

About the Role

The Security Operations Engineer is responsible for operating the security controls that protect the company's enterprise, cloud, and mission systems, and technical response to security events across the environment. This role operates the day-to-day execution of detection, investigation, vulnerability management, and cloud security posture work, and serves as a hands-on technical authority across the security tooling stack. The Security Operations Engineer partners closely with IT, infrastructure, engineering, and product teams to reduce risk, shorten time-to-detect and time-to-respond, and ensure that security controls function reliably in regulated and non-regulated environments alike. This is a deeply technical role requiring strong engineering fundamentals, incident response experience, and the judgment to make sound security decisions under pressure.

Key Responsibilities:

Detection, Monitoring & Response

• Operate and continuously improve the company's Security Information and Event Management (SIEM) platform, including log source onboarding, parser and normalization maintenance, detection content development, and alert tuning to minimize false positives while preserving coverage.
• Build and maintain detection rules mapped to adversary behaviors and develop corresponding response playbooks and automation.
• Serve as a first responder and technical liaison for security incidents, including triage, containment, forensic collection, root cause analysis, and post-incident review; coordinate with IT, engineering, and legal stakeholders throughout the lifecycle.
• Maintain incident response documentation, runbooks, and evidence-handling procedures suitable for regulated environments and contractual reporting obligations.

Vulnerability Management

• Operate the vulnerability management lifecycle across endpoints, servers, containers, and cloud workloads, including scanning cadence, finding validation, prioritization, remediation tracking, and exception governance.
• Partner with system owners and engineering teams to drive remediation within agreed service levels, and escalate aging or high-severity findings through defined risk channels.
• Produce vulnerability posture reporting and trend analysis for technical and leadership audiences.

Cloud Security Posture Management

• Operate Cloud Security Posture Management tooling across the company's cloud environments, including configuration baseline enforcement, drift detection, and continuous compliance monitoring against internal standards and applicable frameworks.
• Investigate misconfigurations and risky resource states, coordinate remediation with cloud and platform teams, and contribute guardrails and preventive controls where appropriate.

Endpoint Security

• Administer and tune endpoint detection and response (EDR) tooling across corporate and engineering fleets, including policy management, exclusion governance, telemetry quality, and response action workflows.
• Investigate endpoint alerts and suspicious activity, and coordinate containment, isolation, and recovery actions with IT.

Identity, Access & Secrets

• Support operational identity and access management activities, including privileged access monitoring, access review execution, anomaly investigation, and integration of identity telemetry into detection pipelines.
• Partner with IT and engineering on secrets management hygiene, including monitoring for leaked or misused secrets and supporting remediation workflows.

Threat Intelligence

• Consume, evaluate, and operationalize threat intelligence from commercial, open-source, and government sources; translate relevant intelligence into detections, hunts, and control recommendations.
• Conduct periodic threat hunting across available telemetry based on current intelligence and environmental risk.

Data Loss Prevention

As capacity allows, support Data Loss Prevention (DLP) tooling operations, including policy tuning, alert triage, and coordination with data owners on sensitive data handling concerns.

Security Tooling

• Act as a technical liaison for assigned security tools, including deployment, upgrade, integration, and health monitoring; author and maintain the integrations, scripts, and automation that connect security tooling into the broader engineering and IT ecosystem.
• Evaluate new security technologies through proof-of-concept exercises and provide technical input into procurement and platform strategy decisions.

Required Qualifications:

• Five or more years of progressive hands-on experience in security operations, detection engineering, incident response, or a closely related technical security discipline.
• Demonstrated expertise operating a SIEM platform in production, including detection content authoring, data pipeline management, and tuning at scale.
• Proven incident response experience, including acting as a technical lead during material security events from initial triage through post-incident review.
• Strong working knowledge of cloud security in at least one major provider (AWS, Azure, or GCP), including native security services, identity constructs, and common misconfiguration patterns.
• Practical experience with vulnerability management tooling and remediation workflows across mixed environments.
• Solid scripting and automation skills in Python, PowerShell, or a comparable language, including integrating APIs across security and IT tools.
• Familiarity with common detection engineering practices, and established incident response frameworks.
• Ability to communicate complex technical findings clearly in writing and to translate security risk for non-security audiences.
• Bachelor's degree in Computer Science, Information Security, Engineering, or equivalent practical experience.

Preferred Qualifications:

• Experience operating in environments subject to NIST SP 800-171, CMMC, FedRAMP, ISO 27001, or comparable regulated frameworks.
• Hands-on experience with AWS GovCloud, Microsoft 365 GCC High, or other sovereign cloud environments.
• Experience with EDR platforms such as CrowdStrike, SentinelOne, or Microsoft Defender for Endpoint at enterprise scale.
• Experience with CSPM platforms such as Wiz, Prisma Cloud, Orca, or equivalents.
• Detection engineering experience using Sigma, KQL, SPL, or similar query and rule languages.
• Exposure to identity platforms such as Okta, Entra ID, or Ping, including their audit and telemetry surfaces.
• Industry certifications such as GCIH, GCIA, GCFA, GCED, OSCP, or equivalent technical credentials.
• Active US security clearance, or eligibility to obtain one.

Spire operates a hybrid work model, and this position will require you to work a minimum of three days per week in the office.

Access to US export-controlled software and/or technology may be required for this role. If needed, Spire will arrange the necessary licenses—this is not something candidates need to have before applying. #LI-DC1

Application Database Administrator (SQL Server DBA)

Clinical Architecture is seeking an experienced Application Database Administrator (SQL Server DBA) to join our team in the Indianapolis, IN area. This role blends hands-on SQL development and developer support (approximately 80%) with core DBA responsibilities (approximately 20%). The DBA will play a critical role in delivering high-quality, reliable healthcare data solutions by partnering closely with Application Developers, Cloud Engineers, Implementation Architecture, and DevOps teams.

The ideal candidate is an experienced SQL Server professional who thrives in a collaborative development environment. This individual will write, review, and optimize SQL, assist with schema design, improve query performance, and promote best-practice coding standards across multiple systems. The role also includes DBA responsibilities such as managing on-premises SQL Server environments and cloud-based SQL platforms (including Amazon RDS, Azure Managed SQL Instances, and Google Cloud SQL), with a focus on availability, security, and overall platform reliability. Experience must be rooted in 3-tier application development with real-time, high-volume transactional (OLTP) workloads — not ETL pipelines or data warehouse environments.

• This role is required to be on site at our Carmel, IN Headquarters. Clinical Architecture offers ample flexibility to accommodate a healthy work-life balance. 
• Applicants must be authorized to work in the U.S. without sponsorship. 
• Providing false information on application questions may result in automatic dismissal of your application. Please answer questions truthfully and to the best of your ability.

Responsibilities 

Database Administration:

• Install, configure, and maintain on-prem SQL Server instances (SQL Server 2016 and newer).
• Administer Cloud Service Provider SQL Server instances, including monitoring, snapshots, and instance configuration.
• Manage SQL Server Agent jobs, linked servers, Database Mail, and other database platform components.
• Implement, monitor, and continuously improve backup and disaster recovery strategies.

Performance and Reliability:

• Troubleshoot performance issues using execution plans, Query Store, and dynamic management views (DMVs).
• Identify and resolve blocking, deadlocks, and query performance bottlenecks.
• Design and maintain effective indexing and statistics strategies.

SQL Development:

• Write, review, and optimize stored procedures, functions, views, and inline SQL used by application teams.
• Collaborate with developers to improve schema design, query patterns, and performance optimization.
• Promote and enforce SQL coding standards and best practices.

Security and Compliance:

• Apply least‑privilege security models and manage database access and permissions.
• Support compliance initiatives such as HIPAA, SOC 2, and HITRUST, as required.
• Ensure encryption, auditing, and secure connectivity are consistently implemented.

Monitoring and Automation:

• Configure monitoring and alerting for both on-prem SQL Server and Amazon RDS instances.
• Automate routine tasks using T‑SQL or PowerShell.
• Assist with capacity planning and system lifecycle management.

Qualifications and Experience 

• 5+ years of experience as a SQL Server DBA in a production environment.
• Strong experience with SQL Server installation, configuration, and ongoing maintenance.
• Hands‑on experience with Amazon RDS for SQL Server.
• Advanced T‑SQL skills, including writing and optimizing complex queries.
• In-depth knowledge of indexing strategies, execution plans, and performance tuning.
• Experience with database security, backup and restore processes, and high availability/disaster recovery (HA/DR) methodologies.
• Proven ability to collaborate across Engineering, IT, and Product teams.