Staff Senior Systems Engineer, OT

Your Impact at LILA

Lila Sciences is seeking a Staff Senior Systems Engineer, OT to design, build, commission, and maintain the  compute, storage, network, and virtualization infrastructure that underpins Lila’s Operational Technology environment across instruments, automation platforms, lab compute, and building automation systems. This role owns hands-on systems engineering for OT and Lab IT infrastructure and turns OT network and IT/OT convergence architecture into commissioned, reliable, secure systems that scientists and automation depend on every day.

This is a senior individual contributor role reporting to the Senior Director, OT Operations & Security, working in close partnership with OT security architecture, corporate IT, controls and automation, the SOC, and laboratory operations leadership. Architectural intent — network topology, segmentation and conduit boundaries, storage tiering, host build standards — is set collaboratively; this role owns taking that intent from design into commissioned, validated, documented systems and keeping them running. The right person operates with high autonomy inside an established architecture, sets technical direction for implementation patterns, engineering standards, and operational practice, and serves as the senior technical authority for how OT infrastructure is built, commissioned, and maintained across Lila’s OT estate.

This is a foundational hire for Lila’s OT program. Lila is building autonomous laboratories where reliability and security are designed into laboratory platforms before they ship, and our governing survivability standard is simple: if the WAN drops for 72 hours, science continues — on-premises first, locally survivable, with cloud as an extension rather than a dependency. The work spans new buildouts and standardization across active lab sites, so bringing existing environments up to a common standard is as much of this role as building what comes next.

What You'll Be Building

 Design, administer, commission, and maintain on-premises compute, storage, and network infrastructure supporting OT and Lab IT — from instrument-attached PCs and edge compute to lab orchestration servers and lab-area network gear across multiple sites.

Build and operate virtualized environments (Proxmox VE today; VMware vSphere and Hyper-V experience transfers), including host provisioning, resource allocation, high availability, clustering, patching, and lifecycle management.

 Implement and validate OT network configurations — VLANs, routing, firewall policy, and zone-and-conduit segmentation aligned to IEC 62443 — within the established addressing standard and topology, and understand how on-premises OT connects to SD-WAN and cloud services without exposing scientific IP.

Own commissioning and technical sign-off for new automation platforms, instrument deployments, and lab buildouts: rack-and-stack, network cutover, golden-image and SKU standardization, validation, and post- cutover stabilization. Instruments integrate through serial-to-Ethernet and USB-to-Ethernet device servers rather than direct host passthrough, keeping virtual machines host-agnostic and migration-viable.

Operate and extend a signed, Git-backed provisioning model with hardware-rooted host identity, and build the infrastructure-as-code and automation (Terraform, PowerShell, Python, APIs) that makes provisioning,configuration, and lifecycle management repeatable and auditable.

Maintain the instrument host golden image standard on Windows IoT Enterprise LTSC across defined build classes, including application allowlisting, kernel-mode code integrity and Secure Boot posture, and documented exceptions where vendor software constrains standard hardening.

Administer core infrastructure services for OT and Lab IT — Active Directory, Group Policy, DNS, DHCP, failover clustering, and certificate and machine identity — and own IP address management and addressing standards for the OT estate as it s …