Sr Staff Infrastructure Systems Engineer

We are looking for an Infrastructure Systems Engineer to build and own the internal platform that powers the company: identity, endpoints, networks, and security that will make company-wide impact.

Responsibilities

Own identity as a first-class system (SSO, RBAC, lifecycle, device trust); Build a fully automated onboarding/offboarding pipeline; Design and operate endpoint infrastructure across Mac, Windows, and Linux; Eliminate manual IT work through automation, scripting, and tooling; Spend the majority of time building systems and automation rather than responding to tickets; Architect secure network infrastructure across office, lab, and remote environments; Design and implement modern access patterns (e.g., WireGuard-based networking, zero-trust, device-aware access); Own firewall and perimeter security (Palo Alto, Juniper, or equivalent); Enable secure, compliant access to cloud environments (AWS GovCloud, GCP Assured Workloads); Drive compliance (CMMC, ITAR) through systems; Partner directly with engineering to remove friction and increase velocity; Define how these systems are built and operated with high ownership and autonomy

Requirements

12+ yrs proven experience building and owning infrastructure systems; Deep experience with identity systems (Azure AD / Entra or equivalent; SAML/OAuth/SCIM); Strong experience managing heterogeneous endpoint fleets (Mac, Windows, Linux; MDM such as Intune/Jamf/Kandji); Hands-on experience with network security and modern connectivity patterns (VPNs, WireGuard, zero-trust networking); Strong scripting and automation skills (Python, Bash, or similar); Experience integrating systems via APIs and event-driven workflows; Experience operating in regulated environments (CMMC, ITAR, FedRAMP-like)

Nice to have

Experience in GCC High environments (Microsoft Entra ID); Familiarity with Amazon Web Services GovCloud or Google Cloud Platform Assured Workloads; Experience with WireGuard-based networking or modern secure access platforms (e.g., Tailscale, Cloudflare Zero Trust); Experience supporting hardware, lab, or manufacturing environments; Experience designing zero-trust or device-trust architectures; You treat internal infrastructure like a product, not a helpdesk; You automate everything that happens more than once; You reduce complexity instead of adding it; You think in terms of identity-first and network-minimized architectures; You can debug across identity, network, endpoint, and cloud boundaries; You have strong opinions about how systems should be built and can back them up

Benefits

Health insurance; Vision insurance; Dental insurance; 401K; Equity; Lunch provided; Snacks and drinks