Security and Network Engineer

Caltech is a world-renowned science and engineering institute that marshals some of the world's brightest minds and most innovative tools to address fundamental scientific questions. We thrive on finding and cultivating talented people who are passionate about what they do. Join us and be a part of the diverse Caltech community.

Job Summary

IPAC at Caltech is seeking a Security and Network Engineer to support the cybersecurity, systems engineering, and high-performance network infrastructure powering world-class NASA, NSF, and privately funded ground and spaceborne observatories. As a member of the IPAC Support Group (ISG) Data Center Engineering team, you will play a key technical role in designing, maintaining, securing, and improving IPAC's computing and network infrastructure while working alongside other network, systems, and database engineers to build and defend the vital pipelines that connect the global astronomical community to invaluable scientific data.

IPAC, situated within the Division of Physics, Mathematics, and Astronomy at Caltech ((Use the "Apply for this Job" box below).), provides science operations, pipeline processing, user support, and data services for high-profile missions including the Nancy Grace Roman Space Telescope, SPHEREx, Euclid, the Near-Earth Object Surveyor, and the Zwicky Transient Facility (ZTF). Our diverse portfolio of research archives includes multi-petabyte datasets like the NASA/IPAC Infrared Science Archive (IRSA), alongside highly curated reference repositories like the NASA Extragalactic Database (NED) and the NASA Exoplanet Archive, which are key research references for modern astrophysics and exoplanet science.

This role encompasses cybersecurity, systems engineering, and network engineering, with responsibility for developing technical solutions to complex infrastructure challenges. As part of a close-knit team of about ten engineers, you will help shape IPAC's infrastructure and security architecture, coordinate federal compliance activities, and provide technical expertise across the organization.

As an IPAC Security and Network Engineer, your role will be to:

• Manage NASA ATO Compliance & Reporting:
  Coordinate IPAC's compliance, documentation, and reporting requirements necessary to achieve and maintain our NASA Authority to Operate (ATO) status. Lead the generation, aggregation, and continuous monitoring of evidence required to demonstrate compliance with federal mandates.
• Develop Security Plans & Frameworks:
  Design, maintain, and audit comprehensive System Security Plans (SSPs) and related Plan of Action and Milestones (POA&M) tracking for individual space missions, research projects, and IPAC-wide infrastructure.
• Implement NIST & NASA Frameworks:
  Translate federal compliance guidelines, specifically NIST SP 800-53 security controls, FIPS requirements, and NASA-specific IT security directives, into enforceable network architectures, system configurations, and operational workflows.
• Manage Enterprise Security Perimeters:
  Design, deploy, audit, and maintain firewall rules, intrusion prevention systems, and secure zone configurations across our enterprise edge, utilizing Palo Alto firewalls and related security platforms.
• Network Engineering & Infrastructure:
  Design, configure, maintain, and troubleshoot enterprise network infrastructure, including Arista and Cisco routing and switching environments. Evaluate network performance, availability, and reliability, identify complex technical issues, and recommend and implement improvements.
• Systems Engineering & Administration:
  Support the design, integration, administration, and maintenance of Linux-based systems and data center infrastructure. Analyze and resolve complex systems issues and develop solutions to improve performance, security, and operational efficiency.
• Monitor & Mitigate Threats:
  Implement and manage network-level monitoring, centralized logging, and security alerting tools to proactively analyze vulnerabilities, detect anomalies, and defend our data center environments.
• Technical Collaboration & Support:
  Serve as a senior technical resource to other engineers and project teams, providing expertise across network, systems, and security engineering. Participate in infrastructure planning, complex troubleshooting, and technical improvements, and provide guidance to colleagues as needed.
• Perform other duties as assigned.

Basic Qualifications

• Bachelor's degree in Information Technology, Computer Science, Computer Engineering, or a related field,…