Senior IT Infrastructure & Security Engineer

Scout AI•Sunnyvale, CA

About The Position

Scout AI is seeking a Senior IT Infrastructure & Security Engineer to design, build, and operate a secure network and infrastructure that protects CUI data and maintains CMMC Level 2 compliance. You'll be our first dedicated networking hire, owning the entire stack from network architecture and data segmentation to device management and IT operations. Your primary focus is building a secure, compliant network foundation. You'll design network architecture that protects sensitive data, implement CMMC Level 2 controls, and automate operations (device provisioning, monitoring, deployments). This role combines network design, infrastructure-as-code, IT operations, and compliance. You'll own network segmentation and data flows, build compliant infrastructure on AWS/Azure, manage company devices and access control, automate operational tasks with code, and maintain systems when things break.

Requirements

7+ years hands-on network and infrastructure engineering in enterprise or defense environments
CMMC and/or NIST SP 800-171 implementation
Infrastructure-as-code proficiency
Linux and Windows system administration; comfort with multiple operating systems
Python or Bash scripting; automation-first mindset
Deep understanding of network segmentation, access control, encryption, and compliance-driven architecture
Experience with identity and access management
Strong documentation discipline and meticulous attention to detail
Excellent communication skills; ability to explain technical decisions to both technical and non-technical stakeholders
Startup or scale-up infrastructure experience
Experience building internal tools or scripts that scale operational efficiency
U.S. citizen or permanent resident; ability to obtain DoD security clearance

Responsibilities

Design and implement secure network architecture that protects CUI and enforces network segmentation per NIST SP 800-171
Build and maintain CMMC-compliant infrastructure: access controls, encryption, monitoring, and audit logging
Develop and maintain Scout's System Security Plan
Implement network hardening, intrusion detection, and threat monitoring; manage firewall rules and VPNs
Architect, deploy, and operate cloud and on-premises infrastructure supporting all Scout operations
Provision and manage employee devices; maintain OS patches, software updates, and hardware refresh cycles
Design and roll out identity management with automated provisioning
Provide hands-on support for employee IT issues and help desk ticket triage
Build infrastructure-as-code solutions to automate provisioning, configuration, and scaling
Develop Python/Bash scripts to automate operational tasks and compliance validation
Establish infrastructure monitoring, logging, and alerting as repeatable, auditable code
Design and implement automated backup procedures and disaster recovery plans
Respond to outages and security incidents; conduct root-cause analysis and remediation
Coordinate with compliance team on CMMC requirements, audit preparation, and policy implementation