Infrastructure Engineer/Architect

Job summary

Guides strategy and architecture for secure mission services operating in denied, disrupted, intermittent, or limited connectivity, adapting Zero Trust controls when enterprise identity, policy, and cloud services are unreachable. The role defines resilient edge identity and access services, local policy enforcement, security-information caching, and safe synchronization and reconnection. It also translates mission constraints into requirements and validates designs through prototypes and testing of tactical network impairments.

Benefits

Qualifications

• Active TS/SCI clearance and ability to obtain a CI polygraph
• Experience designing, evaluating, or fielding systems for DDIL conditions
• Experience architecting disconnected operations, local processing, and eventual synchronization
• Ability to translate operational constraints into architecture decisions and testable performance criteria
• Knowledge of distributed systems, including consistency, replication, caching, conflict resolution, and recovery
• Experience managing offline identity, authentication, authorization, and credential dependencies
• Understanding of risks from stale attributes, delayed revocations, expired credentials, and unavailable policy or key services
• Ability to explain technical tradeoffs and risks to Government leaders and guide multidisciplinary engineering teams
• Intelligence Community experience preferred
• Operational experience in tactical, deployed, expeditionary, or edge environments preferred

Responsibilities

• Develop DDIL strategies, architectures, and implementation roadmaps for mission applications and security services.
• Translate operational scenarios into requirements for local autonomy, bandwidth, latency, outages, synchronization, and recovery.
• Define identity, authorization, directory, credential, and data-protection capabilities needed without enterprise reachback.
• Architect local identity and attribute services, virtual directories, and approved security-information caching.
• Define cached-attribute freshness, credential expiration, revocation awareness, and authorization-policy update approaches.
• Design synchronization and reconnection processes for conflicting updates, stale identity data, audit records, and enterprise consistency.
• Assess application, identity, policy, directory, encryption, and key-management dependencies.
• Develop architecture diagrams, interface requirements, alternatives analyses, risk assessments, and phased recommendations.
• Guide prototypes and demonstrations under representative network impairments; define acceptance criteria for continuity, security, and recovery.
• Coordinate with Government stakeholders, mission partners, security personnel, and engineering teams.

Skills

Degrees

Work schedule

Industry

Security clearance

Relocation