Senior Infrastructure & Cybersecurity Engineer

PMAT•Aurora, CO

1d•$110,000 - $120,000•Onsite

About The Position

PMAT is seeking a Senior Infrastructure & Cybersecurity Engineer to design, deploy, secure, and sustain Secret and Top Secret mission-critical environments supporting government and intelligence community customers. This role is ideal for a technically hands-on engineer with deep experience in on-prem cloud, virtualization, Linux/Windows systems, and compliance-driven security architectures. The ideal candidate is comfortable operating in classified environments, has a strong background in NIST 800-53 and DISA STIG compliance, and can lead complex infrastructure efforts from concept through production.

Requirements

10+ years of experience in infrastructure engineering, systems administration, or network engineering
Extensive experience with: VMware ESXi / vSAN RHEL and Windows Server environments Infrastructure automation (Ansible preferred) DISA STIGs and NIST 800-53 compliance
Strong understanding of on-prem cloud architectures, enterprise virtualization, and secure datacenter operations
Proven ability to manage and remediate large vulnerability backlogs in classified environments
Experience working in DoW / IC mission systems or similarly regulated environments
US Citizenship and an active TS/SCI clearance with CI Poly
CompTIA Security+
CompTIA Network+
ITIL Foundations

Nice To Haves

Prior experience supporting the Intelligence Community or National-level organizations
Background in network engineering (LAN/WAN, routing, switching)
Experience with ACAS, Splunk, Nessus, Veeam, Horizon, Dell Wyse
Leadership experience managing teams or acting as a technical lead
Familiarity with DevSecOps workflows in classified environments
Additional DoD 8570/8140 certifications a plus

Responsibilities

Architect, build, and secure Secret and Top Secret infrastructure stacks in on-prem and private cloud environments
Design and manage large-scale VMware ESXi / vSAN virtualization platforms
Deploy, configure, and maintain RHEL 6/7/8 and Windows Server 2019/2022 systems
Implement and remediate security controls in accordance with NIST 800-53 (r4/r5) and DISA STIGs
Automate system builds, patching, and hardening using Ansible, Jenkins, PDQ, WSUS, and related tools
Lead vulnerability remediation efforts using ACAS, Nessus, and Splunk, dramatically reducing attack surfaces
Support enterprise services including Active Directory, databases, Veeam, Horizon, Atlassian Suite, YUM repositories, and monitoring platforms
Design and maintain LAN/WAN and virtualized network backbones, including troubleshooting Tier-3 routing issues (OSPF/BGP)
Lead and mentor technical teams, collaborating across engineering, security, and mission stakeholders
Support accreditation efforts including ATO packages, compliance documentation, and security audits