Senior IT Infrastructure & Security Engineer

Scout AI•Sunnyvale, CA

5h•$175,000 - $225,000

About The Position

Scout AI is seeking a Senior IT Infrastructure & Security Engineer to design, build, and operate a secure network and infrastructure that protects CUI data and maintains CMMC Level 2 compliance. This role is the first dedicated networking hire and will own the entire stack from network architecture and data segmentation to device management and IT operations. The primary focus is building a secure, compliant network foundation, including designing network architecture that protects sensitive data, implementing CMMC Level 2 controls, and automating operations (device provisioning, monitoring, deployments). This role combines network design, infrastructure-as-code, IT operations, and compliance. The engineer will own network segmentation and data flows, build compliant infrastructure on AWS/Azure, manage company devices and access control, automate operational tasks with code, and maintain systems when issues arise.

Requirements

7+ years hands-on network and infrastructure engineering in enterprise or defense environments
CMMC and/or NIST SP 800-171 implementation
Infrastructure-as-code proficiency
Linux and Windows system administration; comfort with multiple operating systems
Python or Bash scripting; automation-first mindset
Deep understanding of network segmentation, access control, encryption, and compliance-driven architecture
Experience with identity and access management
Strong documentation discipline and meticulous attention to detail
Excellent communication skills; ability to explain technical decisions to both technical and non-technical stakeholders
Startup or scale-up infrastructure experience
Experience building internal tools or scripts that scale operational efficiency
U.S. citizen or permanent resident; ability to obtain DoD security clearance

Responsibilities

Design and implement secure network architecture that protects CUI and enforces network segmentation per NIST SP 800-171
Build and maintain CMMC-compliant infrastructure: access controls, encryption, monitoring, and audit logging
Develop and maintain Scout's System Security Plan
Implement network hardening, intrusion detection, and threat monitoring; manage firewall rules and VPNs
Architect, deploy, and operate cloud and on-premises infrastructure supporting all Scout operations
Provision and manage employee devices; maintain OS patches, software updates, and hardware refresh cycles
Design and roll out identity management with automated provisioning
Provide hands-on support for employee IT issues and help desk ticket triage
Build infrastructure-as-code solutions to automate provisioning, configuration, and scaling
Develop Python/Bash scripts to automate operational tasks and compliance validation
Establish infrastructure monitoring, logging, and alerting as repeatable, auditable code
Design and implement automated backup procedures and disaster recovery plans
Respond to outages and security incidents; conduct root-cause analysis and remediation
Coordinate with compliance team on CMMC requirements, audit preparation, and policy implementation