Senior IT Operations Engineer (R6117)

Shield AI is a venture-backed defense-tech company with the mission of protecting service members and civilians with intelligent systems. Its products include Hivemind autonomy software, V-BAT and X-BAT aircraft, and Aechelon simulation and synthetic reality technologies. With offices and facilities across the U.S., Europe, the Middle East, and Asia-Pacific, Shield AI’s technology actively supports operations worldwide. For more information, visit www.shield.ai. Follow Shield AI on LinkedIn, X, Instagram, and YouTube. 

Job Description: The Senior IT Systems Engineer builds, improves, and sustains classified infrastructure supporting engineering work. The role covers compute, virtualization, storage, networking, identity, endpoints, and security tooling in standalone and air-gapped environments. This is a hands-on senior individual contributor position. Responsibilities include racking and imaging hardware, building and hardening systems, automating repeatable work, troubleshooting difficult issues, and helping establish technical standards across sites. The engineer must be comfortable working independently, shifting across infrastructure disciplines when needed, and owning work from design through testing, documentation, and support. The role sits between IT operations and accreditation. Systems must be secure, reliable, and ready for review by ISSMs and government assessors. Correct implementation the first time, backed by complete documentation and technical evidence, is an expected part of every build.

What you'll do:

Build and operate classified infrastructure

Deploy, configure, and sustain Windows Server and Red Hat Enterprise Linux systems, virtualization clusters, enterprise storage, and core infrastructure services in standalone and air-gapped enclaves.

Build and support VMware, Nutanix AHV/Prism, or similar virtualization environments. Nutanix experience is preferred.

Support high-density compute for AI/ML, simulation, and engineering workloads, including GPU node provisioning, performance troubleshooting, capacity planning, and coordination with facilities on rack space, power, and cooling.

Administer and support Active Directory, DNS, DHCP, Group Policy, PKI, certificate services, privileged access, and role-based access for isolated forests with no connection to corporate IT.

Build and maintain golden images and hardened baselines for servers, workstations, virtual desktops, and supporting infrastructure.

Manage patching, updates, software packages, and security content in disconnected environments through approved transfer and validation processes.

Administer backup, recovery, and continuity capabilities. Perform scheduled restore testing and document results and corrective actions.

Design, configure, and troubleshoot managed switching, VLANs, firewall rules, network segmentation, and approved network connections between facilities. Coordinate with network and security teams to maintain secure, supportable network standards.

Automate and standardize

Automate provisioning, configuration, patching, reporting, and compliance tasks using PowerShell, Ansible, Python, Terraform, or similar tools.

Create repeatable build processes, system baselines, checklists, and runbooks so systems can be deployed consistently rather than built by hand each time.

Improve existing processes by reducing manual steps, preventing common errors, and documenting effective methods for building and supporting systems.

Apply and validate DISA STIGs and SRGs using SCAP, STIG Viewer, ACAS/Nessus, scripted remediation, and other approved tools.

Maintain configuration-management records, as-built documentation, change records, and scan evidence so system configurations can be understood and defended later.

Review technical changes before production implementation, with attention to security, availability, rollback planning, and operational impact.

Support accreditation and security operations

Work with ISSMs, ISSOs, security t …