Lead Corporate Engineer

Aalyria • Livermore, CA

4d • Hybrid

About The Position

Aalyria is looking for a Corporate Engineer Lead to own the systems, tools, and infrastructure that keep our engineering organization running securely and efficiently. You'll be a technical anchor on the Corporate Engineering team, working closely with Security Engineering leadership to build and maintain a corporate environment that meets the demands of a fast-moving startup operating in regulated government and defense markets.

This is a hands-on role with real ownership. You'll be the person who knows how everything fits together and makes sure it stays that way.

Requirements

• 5+ years in a corporate engineering, IT engineering, or systems engineering role at a technology company
• Deep experience with MDM platforms across macOS, iOS, and Windows, configuration profiles, compliance policies, certificate management, and multi-platform co-management
• Strong working knowledge of enterprise identity providers such as user lifecycle management, application SSO, group rules, workflow automation, and MFA configuration
• Demonstrated experience implementing Zero Trust architecture in a corporate environment, device posture enforcement, identity-aware access proxies, network segmentation, and least-privilege access across users, devices, and workloads
• Proficiency administering a cloud collaboration suite at scale (Google Workspace, Microsoft 365, or equivalent)
• Hands-on experience with cloud infrastructure platforms like IAM, VPC, identity-aware proxies, and cloud logging
• Solid networking fundamentals in VLAN design, firewall rule management, wireless infrastructure, and network segmentation in a corporate environment
• Experience supporting engineering tooling such as PDM/PLM platforms including administration, access control, and storage backend management
• Familiarity with security frameworks CMMC, FedRAMP, NIST 800-171, or CIS Benchmarks and what it means to implement and evidence controls in a corporate IT environment
• Strong scripting and automation ability in Bash, Python, or similar along with a track record of replacing manual processes with repeatable, maintainable tooling
• A bias toward documentation, repeatability, and getting things done without cutting corners

Nice To Haves

• Experience supporting government or defense customers under ITAR, CMMC, or FedRAMP constraints
• Familiarity with EDR platform administration
• Experience managing supervised mobile device fleets
• Exposure to source control administration or CI/CD pipeline tooling

Responsibilities

• Own endpoint management across macOS, iOS, and Windows, including MDM configuration profiles, compliance policies, software deployment, and device lifecycle management across all platforms
• Administer and evolve our cloud collaboration and productivity environment: provisioning, group policies, DLP, audit logging, and third-party integrations
• Manage corporate identity infrastructure, user lifecycle, application integrations, MFA policies, Workflows automation, and SSO federation with partner systems; identity is the backbone of our access model and you'll be expected to go deep
• Design and enforce Zero Trust access controls across corporate infrastructure, integrating device compliance signals from MDM, identity assurance from our IdP, and network-layer controls to ensure least-privilege access at every layer
• Support and maintain cloud corporate infrastructure including identity-aware access proxies, VPC networking, and internal tooling
• Own corporate networking infrastructure such as firewalls, switches, access points, VLANs, VPN, and DNS/DHCP, ensuring reliable, segmented, and secure connectivity across office and remote environments
• Manage and maintain office hardware, AV, and conferencing systems, including lifecycle tracking, procurement coordination, and hands-on troubleshooting
• Administer and support engineering-specific tooling, including PDM/PLM platforms and similar design and product lifecycle tools, ensuring reliable access, license management, integration with corporate identity, and appropriate data handling controls for CUI-adjacent environments
• Integrate and maintain endpoint protection and security tooling at the corporate endpoint and identity layer
• Contribute to CMMC Level 2 and FedRAMP High compliance efforts, implementing and evidencing controls that fall within the corporate IT boundary (access control, configuration management, audit logging, media protection)
• Manage and continuously improve the IT helpdesk function, setting response standards, escalation paths, and self-service tooling for the organization
• Partner with Security Engineering to develop and enforce policies around CUI handling, device compliance, and user access on corporate systems
• Build and maintain automation across corporate systems, scripting provisioning workflows, enforcing configuration baselines, and reducing manual toil through repeatable, code-driven processes
• Drive infrastructure-as-code practices across corporate tooling for consistency and audit-ability

Benefits

• Innovative Environment: Work at a cutting-edge company shaping the future of aerospace communications.
• Impactful Work: Directly contribute to critical national security programs and initiatives.
• Growth Opportunities: Expand your career with opportunities for professional development and advancement.
• Inclusive Culture: Be part of a collaborative, supportive, and inclusive workplace where your contributions matter.
• Flexibility: Flexible working arrangements including hybrid remote/in-office schedules.
• Compensation and Equity: Competitive salary, comprehensive benefits (401(k), dental, vision, health, life insurance), paid time off, and equity options.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed