Staff Mission Security Engineer, Build

YOUR MISSION

As a Staff Mission Security Engineer - Build, you will be a critical hands-on technical contributor responsible for the end-to-end infrastructure design, buildout, and deployment of classified IT environments supporting U.S. Government programs up to TS/SCI and Special Access Programs (SAPs). You will work as part of the Mission Security Engineering team, translating system requirements into operational reality — from facility infrastructure and power systems through network architecture, server deployment, and system integration — across multiple classification levels and locations across the United States.

This is an execution-focused role for a senior infrastructure engineer who thrives in both data center facilities and hands-on IT system deployment — someone equally comfortable coordinating power and cooling requirements with facilities teams as they are building servers, configuring network infrastructure, and deploying operational systems. You will be responsible for the complete infrastructure stack from facility readiness through operational system deployment, including facility assessments, power and cooling design, structured cabling, network architecture implementation, server deployment, and full buildouts of classified IT environments including SCIFs and SAPFs.

This position requires an active Secret clearance to start, with the ability to obtain and maintain a TS/SCI.

Responsibilities

• Conduct facility assessments and infrastructure readiness evaluations for classified IT deployments up to TS/SCI and SAP levels, including power, space, cooling, fire suppression, and environmental requirements
• Design and coordinate power distribution systems for classified data center environments, including primary and backup power feeds, UPS systems, PDUs, power filtration, circuit requirements, and electrical grounding systems
• Specify and coordinate cooling requirements including CRAC unit capacity, HVAC integration, airflow management, hot/cold aisle design, and environmental monitoring systems
• Design rack layouts and elevations for classified IT deployments, including rack specifications, cable management systems, power distribution within racks, weight and load calculations, and physical security requirements
• Design and implement structured cabling systems including fiber optic backbone infrastructure, copper distribution, patch panel layouts, cable trays and pathways, labeling standards, and cable management best practices
• Coordinate fiber optic infrastructure deployments including single-mode and multi-mode fiber runs, fiber terminations, OTDR testing, loss budgets, and documentation of fiber paths across classified facilities
• Implement proper grounding and bonding systems for IT equipment in accordance with TIA/EIA standards and classified facility requirements, including equipment grounding, rack grounding, and telecommunications grounding infrastructure
• Implement ICD 705 physical security requirements including coordination of RF shielding, power line filter installation, penetration design and construction (waveguides, conduit penetrations), TEMPEST countermeasures, and acoustic protection measures
• Coordinate with facilities teams, electricians, HVAC technicians, and contractors to ensure power, cooling, lighting, fire suppression, and ICD 705 physical security systems meet requirements for classified IT operations
• Build, configure, and deploy physical and virtual servers including hardware assembly, BIOS/firmware configuration, operating system installation (Windows Server, RHEL, Ubuntu), and initial system hardening
• Perform hands-on rack and stack of servers, network equipment, storage systems, and security appliances within classified facilities, ensuring proper cable management, labeling, and physical security controls
• Deploy and configure network infrastructure including switches, routers, firewalls, and boundary protection devices in accordance with DoD APL and TAA compliance requirements
• Configure network infrastructure including VLANs, routing protocols (BGP, OSPF), VPNs, access control lists, and security group policies to support classified operations across multiple enclaves
• Deploy and integrate storage systems including SAN, NAS, and DAS configurations, with proper zoning, LUN masking, and multipathing for high-availability environments
• Implement virtualization infrastructure including VMware ESXi, Hyper-V, or KVM environments with proper resource allocation, network configuration, and storage integration
• Install and configure environmental monitoring systems including temperature sensors, humidity monitors, water detection systems, and alerting infrastructure
• Coordinate physical security requirements including rack access controls, equipment locks, tamper-evident seals, and video surveillance integration for classified IT assets
• Deploy, configure, and integrate NSA Type 1 cryptographic devices (KG-175, KG-142) into network architectures, including network interface configuration, key loading, and end-to-end connectivity testing
• Configure and validate network security controls including boundary protection, traffic filtering, intrusion detection/prevention systems, and network segmentation across classification boundaries
• Perform system integration testing including network connectivity validation, throughput testing, failover testing, and end-to-end application verification across deployed infrastructure
• Troubleshoot and resolve network connectivity, system performance, hardware failures, and configuration issues across complex multi-enclave classified environments
• Create and maintain comprehensive as-built documentation including network topology diagrams, IP address schemas, VLAN assignments, facility diagrams, power distribution diagrams, cooling layouts, rack elevations, cable schedules, fiber documentation, and system configuration records
• Support RMF and ATO activities by providing physical and environmental control implementation evidence, including facility documentation, power systems, cooling redundancy, and physical security measures
• Partner with ISSEs, ISSOs, industrial security personnel, facilities teams, and mission engineers to ensure physical infrastructure meets classification requirements and operational needs

Required Qualifications

• 10+ years of hands-on experience in data center infrastructure, facilities planning, or IT infrastructure deployment, with demonstrated experience building out classified DoD or IC facilities at classification levels up to and including TS/SCI and special access programs
• Active Secret clearance required; must be able to obtain and maintain TS/SCI
• DoD 8140 IAT Level III certification (CASP+, CISSP, CISA, or equivalent) required
• Deep understanding of data center power systems including primary and backup power, UPS systems, PDUs, circuit requirements, power calculations, and electrical grounding for IT equipment
• Hands-on experience with cooling systems for IT environments including CRAC units, HVAC coordination, airflow management, BTU calculations, and environmental monitoring
• Extensive experience with structured cabling systems including fiber optic infrastructure (single-mode and multi-mode), copper cabling, patch panel design, cable management, and cabling standards (TIA/EIA)
• Experience with rack design, installation, and configuration including rack elevations, cable management systems, weight and load calculations, and power distribution within racks
• Deep expertise in network infrastructure including IP addressing, VLANs, routing protocols (BGP, OSPF), switching, VPNs, and network security controls for deploying and troubleshooting complex classified networks
• Hands-on experience building, configuring, and deploying physical and virtual servers including hardware assembly, operating system installation (Windows Server, Linux), and system hardening
• Experience with storage systems (SAN, NAS, DAS) and virtualization platforms (VMware, Hyper-V, KVM) including deployment and integration into classified environments
• Experience coordinating with contractors, electricians, HVAC technicians, and facilities teams to deliver integrated infrastructure solutions
• Strong troubleshooting skills across infrastructure, network, and system layers with ability to diagnose and resolve complex technical issues in mission-critical environments
• Working knowledge of ICD 705 Technical Specifications and physical security requirements including power line filters, RF shielding (6-sided foil), penetrations and waveguide design, TEMPEST countermeasures, acoustic protection, and visual shielding for SCIF and SAPF construction
• Working knowledge of NIST SP 800-53 physical and environmental controls (PE family) and how they are implemented and documented within the RMF process
• Experience supporting RMF and ATO activities for physical and environmental controls, including facility documentation and control implementation evidence
• Strong documentation skills, with experience producing network topology diagrams, system architecture documents, facility diagrams, as-built drawings, power distribution diagrams, rack elevations, IP address schemas, and cable schedules
• Physical ability to perform hands-on work including rack installation, server mounting, cable pulling, and equipment installation in data center environments
• Bachelor's degree in Engineering, Information Technology, Computer Science, or related field (or equivalent experience)

Preferred Qualifications

• Active Top Secret or TS/SCI clearance
• BICSI certifications (RCDD, DCDC, or similar) demonstrating expertise in data center design and cabling infrastructure
• Professional engineering license (PE) or experience working with professional engineers on facility infrastructure projects
• Experience with facility design tools including AutoCAD, Visio, or similar for creating facility diagrams, rack elevations, and infrastructure drawings
• Hands-on experience with Data Center Infrastructure Management (DCIM) systems for monitoring power, cooling, and environmental conditions
• Experience with specific infrastructure vendors including APC, Liebert/Vertiv, Schneider Electric, or similar for power and cooling systems
• Experience with fiber optic testing equipment including OTDRs, power meters, light sources, and fiber inspection tools
• Direct experience building out SCIF and SAPF facilities in accordance with ICD 705 Technical Specifications including RF shielding installation, power line filter implementation, penetration construction (waveguides, fiber optic penetrations), TEMPEST zone management, and facility accreditation processes
• Experience supporting classified ground station, satellite Command & Control (C2), or mission-critical operations center infrastructure buildouts
• Familiarity with fire suppression systems for IT environments including clean agent systems (FM-200, Novec 1230) and pre-action sprinkler systems
• Understanding of building codes, electrical codes (NEC), and standards relevant to data center construction and IT infrastructure
• Experience with raised floor systems, cable trays, ladder racks, and overhead cable management infrastructure
• Professional networking certifications (e.g., CCNA, CCNP, CCIE, or equivalent) demonstrating advanced network design and configuration expertise
• Server and system certifications (e.g., Microsoft MCSE, Red Hat RHCE, VMware VCP, or equivalent) demonstrating server deployment and virtualization expertise
• Experience with network automation and Infrastructure as Code (Ansible, Terraform, Python scripting) for repeatable infrastructure deployments
• Experience with monitoring and management tools including network monitoring systems (SNMP, NetFlow), system management platforms, and log aggregation solutions
• Hands-on experience with AWS GovCloud or Azure Government cloud infrastructure including compute, networking, and storage services in IL-5 or IL-6 environments
• Experience supporting DoD or IC customers through facility ATO and certification processes including physical, environmental, and technical control assessments
  
  COMPENSATION

• Denver, Colorado Base Salary: $170,000 – $250,000 

• Long Beach, California Base Salary: $180,000 – $260,000 

• Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave 

Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, location, and experience. 

 

Work Environment

• This role will be onsite in Denver, CO (preferred), Colorado Springs, CO, or Long Beach, CA #LI-Onsite
• Fast-paced, mission-critical environment supporting national security space operations
• Primarily field-focused role requiring extensive hands-on work in data centers, server rooms, and classified facilities including SCIFs and SAPFs
• Requires physical ability to perform demanding work including lifting and mounting servers and network equipment (up to 50 lbs), working in raised floor environments, running cable in tight spaces, and working on ladders for overhead cable management
• Work performed in active construction environments and operational data centers with exposure to noise, temperature variations, and equipment hazards
• Requires coordination with contractors, electricians, HVAC technicians, facilities teams, ISSEs, ISSOs, and government partners
• Extended periods of standing, bending, kneeling, and working in confined spaces as required for equipment installation and infrastructure buildouts
• Significant travel required (up to 50%) to classified facilities, government sites, and partner locations across the United States for facility assessments and infrastructure deployments
• Work is performed in Sensitive Compartmented Information Facilities (SCIFs), Special Access Program Facilities (SAPFs), and other classified spaces
• May require occasional evening or weekend work to coordinate infrastructure deployments during facility maintenance windows