Senior IT Systems Engineer

Position Description This position will help define the next generation of the Laboratory's collateral enterprise computing environment, extending today's on-premises capabilities into a secure hybrid-cloud architecture that supports both enterprise services and research missions while operating at inspection level readiness.  The Sr. Systems Engineer provides senior technical leadership for the design, evolution, and integration of the Laboratory's collateral enterprise computing environment.

The position collaborates with team engineers to establish the technical vision and engineering direction necessary to deliver secure, resilient, scalable, and supportable enterprise capabilities across on-premises infrastructure, classified cloud environments, enterprise platforms, and research-facing services. The Sr. Systems Engineer serves as a technical authority across organizational and technology boundaries, translating mission and business requirements into enterprise-level technical direction and ensuring that individual technology investments contribute to a coherent long-term strategy.

A significant near-term focus will be establishing the technical foundation required to expand the Laboratory's use of classified cloud capabilities, including AWS Secret Cloud for Industry (ASCI) and comparable classified cloud offerings, while integrating those capabilities with existing collateral enterprise services. This includes defining patterns for cloud connectivity, workload isolation, identity and access, shared services, logging and monitoring, Dev Sec Ops , data movement, security boundaries, and the integration of research and enterprise workloads.

The position works closely with infrastructure engineering, cybersecurity and information assurance, research organizations, enterprise applications, network engineering, cloud providers, and Laboratory leadership to establish technical standards and guide complex engineering decisions.

Key Responsibilities Establish and maintain the target technical design for the Laboratory's collateral enterprise environment, spanning on-premises infrastructure, classified cloud, networking, compute, storage, identity, security, Dev Sec Ops , observability, and enterprise services. Lead the technical classified enterprise infrastructure and apply that experience to the integration of classified cloud capabilities into the Laboratory enterprise. Define technical patterns for a hybrid classified environment, including the role of as the trusted on-premises enterprise access path to classified cloud services while enabling cloud workloads and services to operate within appropriately designed cloud environments.

Serve as a senior technical authority for collateral cloud systems engineering (in alignment with our unclassified cloud team), including the integration of AWS and future classified cloud capabilities into the Laboratory enterprise. Develop technical designs that support distinct research and enterprise cloud environments, including appropriate segmentation and workload zones for research computing, enterprise IaaS, enterprise AI services, shared applications, and access to externally provided services.

Define the technical design for foundational cloud capabilities including network segmentation, VPC design, routing, firewalling, IAM, encryption/key management, centralized logging, monitoring, configuration management, security services, and workload isolation. Establish reusable reference designs, engineering patterns, standards, and technical guardrails that enable engineering teams to implement solutions consistently without requiring each project to independently solve enterprise-level technical problems. Partner with cybersecurity, information…