Senior Infrastructure Engineer

Empower AI Inc.•, DC

2d•Hybrid

About The Position

Empower AI is seeking a Senior Infrastructure Engineer for an exciting opportunity at the Department of State. This role is responsible for the development and maintenance of the enterprise infrastructure supporting the hybrid VPC and global IT infrastructure for the customer. The engineer will provide comprehensive engineering and implementation services for core physical and virtual hosting environments (including cloud) supporting all customer systems, both domestically and internationally. These services cover the full life cycle of infrastructure design, deployment, management, and modernization, ensuring alignment with customer security, operational, and performance requirements. The position involves designing and implementing physical and virtual hosting environments (including IaaS/PaaS and cloud) that support all customer IT systems, ensuring full compliance with DoS data sovereignty, security requirements, and physical/information security standards. The engineer will execute infrastructure modernization by transitioning decentralized resources to centralized or cloud-oriented environments, utilize containerization (e.g., Docker) and automated deployment strategies to improve scalability, system portability, and operational efficiency, and design automated, rapid provisioning (Infrastructure as Code) to minimize manual intervention and capacity-related downtime. The role also includes auditing managed assets to detect and remediate configuration drift, ensuring strict adherence to baseline integrity and DoS security templates, providing end-to-end engineering support for Windows, UNIX/Linux, and virtual platforms, and continuously reviewing and recommending new equipment, hardware/software, and cloud services for Government approval. The Senior Infrastructure Engineer will ensure all hosting environments (on-premises and cloud) strictly conform to FedRAMP standards and customer security requirements, maintain system integrity through rigorous lockdown protocols, regular security audits, and compliance validation, and coordinate with SaaS vendors and internal stakeholders to ensure seamless user experience, data integration, and life cycle management of cloud-agnostic solutions. Support for the adoption of converged/hyperconverged hardware deployments is also expected.

Requirements

10+ years of experience
Bachelor's in IT or related field
AWS/Azure Solutions Architect certification
VCP certification
Secret Security Clearance

Nice To Haves

COMP TIA Sec + certification
ITIL4 Foundation Certification

Responsibilities

Provide comprehensive engineering and implementation services for core physical and virtual hosting environments (including cloud) supporting all customer systems, both domestically and internationally.
Cover the full life cycle of infrastructure design, deployment, management, and modernization, ensuring alignment with customer security, operational, and performance requirements.
Design and implement physical and virtual hosting environments (including IaaS/PaaS and cloud) that support all customer IT systems, ensuring full compliance with DoS data sovereignty, security requirements, and physical/information security standards.
Execute infrastructure modernization by transitioning decentralized resources to centralized or cloud-oriented environments.
Utilize containerization (e.g., Docker) and automated deployment strategies to improve scalability, system portability, and operational efficiency.
Design automated, rapid provisioning (Infrastructure as Code) to minimize manual intervention and capacity-related downtime.
Audit managed assets to detect and remediate configuration drift, ensuring strict adherence to baseline integrity and DoS security templates.
Provide end-to-end engineering support for Windows, UNIX/Linux, and virtual platforms, ensuring ongoing availability, performance, and capacity.
Continuously review and recommend new equipment, hardware/software, and cloud services for Government approval throughout the period of performance.
Ensure all hosting environments (on-premises and cloud) strictly conform to Federal Risk and Authorization Management Program (FedRAMP) standards and customer security requirements.
Maintain system integrity through rigorous lockdown protocols, regular security audits, and compliance validation.
Coordinate with SaaS vendors and internal stakeholders to ensure seamless user experience, data integration, and life cycle management of cloud-agnostic solutions.
Support the adoption of converged/hyperconverged hardware deployments where feasible to optimize performance and reduce footprint.