Lead Infrastructure and Cybersecurity Architect

Caliola Engineering, LLC•Colorado Springs, CO

1d•$150,000 - $195,000•Hybrid

About The Position

Caliola Engineering is seeking a Lead Infrastructure and Cybersecurity Architect to help shape the technology foundation that supports our growing organization and mission-critical work. This role is ideal for a seasoned technical leader who enjoys setting direction, solving complex infrastructure and security challenges, and building secure, resilient environments designed to scale. You'll have the opportunity to influence technology strategy, infrastructure operations, cybersecurity, compliance readiness, and modernization across Caliola while serving as a trusted technical leader for some of our most important technology decisions. You'll work across enterprise networks, cloud and hybrid environments, secure systems, cybersecurity, CMMC readiness, and emerging technologies such as secure AI. This is a hands-on role for someone who is equally comfortable defining architecture and rolling up their sleeves to help turn that vision into reality. You'll partner closely with engineering, cybersecurity, compliance, facilities, and program teams to strengthen Caliola's infrastructure, reduce risk, support new programs, and keep our technology secure, reliable, compliant, and ready for what comes next.

Requirements

Active (or recent, within the last 5 years) Department of War security clearance at the Secret level or higher.
Bachelor's degree in Computer Science, Information Technology, Network Engineering, Engineering, or a related field, or equivalent professional experience.
10+ years of progressive experience in enterprise networking, network engineering, network architecture, infrastructure architecture, or a closely related technical role.
Experience supporting DoD, Federal Government, defense contractor, or similarly regulated environments.
Advanced knowledge of enterprise network and infrastructure architecture, including routing, switching, firewalls, VPNs, wireless, segmentation, secure connectivity, and disaster recovery.
Experience supporting Microsoft GCC High, Azure Government, or comparable secure cloud environments.
Working knowledge of CMMC Level 2, NIST SP 800-171, RMF, DFARS, DISA STIGs, and related DoD cybersecurity requirements.
Hands-on experience with security hardening, vulnerability management, access control, endpoint protection, logging, SIEM/security monitoring, and incident response.
Ability to translate business, program, compliance, and engineering needs into secure technical architectures and implementation plans.
Ability to mentor technical teammates, collaborate across functions, and influence outcomes without direct management authority.

Nice To Haves

Active Top Secret or TS/SCI security clearance.
Direct experience with CMMC Level 2 sustainment, C3PAO or DIBCAC assessments, classified or controlled environments, and continuous compliance.
Deep knowledge of Microsoft GCC High, Azure Government, and related federal cloud and security frameworks.
Familiarity with enterprise network platforms such as Cisco, Palo Alto, Fortinet, Aruba, or Juniper.
Experience with Windows/Linux administration and infrastructure automation using tools such as Terraform, Ansible, PowerShell, Bash, or Python.
Experience with secure AI architecture, governance, access controls, monitoring, and data protection.
Relevant certifications such as CISSP, CISM, CCNP/CCIE, Microsoft Azure or Cybersecurity Architect, CCP, Security+, Network+, or SANS/GIAC.

Responsibilities

Own the organization's technology strategy and architecture across on-premises, cloud, hybrid, network, endpoint, and secure computing environments.
Establish and maintain technical roadmaps, architecture standards, and modernization plans for infrastructure, cloud, networking, disaster recovery, secure AI, and related technologies.
Evaluate emerging technologies and translate business, program, engineering, and security needs into scalable technical architectures and implementation plans.
Own the reliability, availability, and performance of core infrastructure, enterprise networks, cloud environments, identity systems, endpoints, collaboration platforms, and other business-critical technology.
Oversee the implementation, configuration, maintenance, and improvement of infrastructure and network technologies, including LAN/WAN, SD-WAN, VPN, wireless, virtualization, cloud integration, and Infrastructure as Code.
Establish and maintain disaster recovery, backup, high-availability, and business-continuity capabilities to support resilient technology operations.
Own cybersecurity architecture and technical risk management across the organization, including access control, endpoint protection, network security, vulnerability management, logging, monitoring, and security hardening.
Identify, assess, mitigate, and monitor technology and cybersecurity risks through secure configuration standards, vulnerability remediation, architecture reviews, and technical controls.
Lead technical response and recovery efforts during cybersecurity incidents, including investigation, containment, remediation, documentation, and follow-up hardening.
Own the technical implementation and sustainment of cybersecurity and compliance controls supporting CMMC Level 2, NIST SP 800-171/800-53, DFARS, DISA STIGs, and applicable DoD requirements.
Prepare and maintain technical compliance documentation and evidence, including SSPs, POA&Ms, configuration documentation, network diagrams, technical standards, incident-response procedures, and security-control evidence.
Support internal assessments, remediation efforts, customer reviews, and external certification or audit activities, including C3PAO assessments and requirements associated with secure or controlled environments.
Own the lifecycle management of the organization's technology assets, including hardware, software, cloud resources, systems, licenses, and supporting infrastructure.
Maintain accurate standards, inventories, configurations, documentation, and lifecycle information to support operational, security, compliance, and budgeting needs.
Evaluate technology platforms, vendors, licensing, and replacement or upgrade needs to ensure assets remain secure, supported, cost-effective, and aligned with organizational requirements.