Lead Infrastructure and Cybersecurity Architect

Lead Infrastructure and Cybersecurity Architect

City/State: Colorado Springs, CO USA

Type and Schedule: Full-Time, Salary/Exempt, on-site with limited remote work flexibility.

Annualized Salary Range: $150,000.00 - $195,000.00 commensurate with experience.

About Us:

Caliola is an award-winning woman-owned small business that is improving and protecting our Nation''s way of life through secure collaboration and resilient communications. Our engineers, subject matter experts, and veterans are developing and delivering trusted solutions for mission-critical communications. We seek teammates who share our core values:

I3 for C3 - Insight, Innovation, and Integrity for Command, Control, and Communications

These values guide how we work every day. At Caliola, you will find technically challenging, mission-focused work within a flexible and collaborative culture that is uncommon in the defense industry. We offer flexible PTO, subsidized health insurance, 401(k) matching, professional development, and a competitive compensation structure designed to support long-term growth.

Position Description:

Caliola Engineering is seeking a Lead Infrastructure and Cybersecurity Architect to help shape the technology foundation that supports our growing organization and mission-critical work. This role is ideal for a seasoned technical leader who enjoys setting direction, solving complex infrastructure and security challenges, and building secure, resilient environments designed to scale. You''ll have the opportunity to influence technology strategy, infrastructure operations, cybersecurity, compliance readiness, and modernization across Caliola while serving as a trusted technical leader for some of our most important technology decisions. You''ll work across enterprise networks, cloud and hybrid environments, secure systems, cybersecurity, CMMC readiness, and emerging technologies such as secure AI. This is a hands-on role for someone who is equally comfortable defining architecture and rolling up their sleeves to help turn that vision into reality. You''ll partner closely with engineering, cybersecurity, compliance, facilities, and program teams to strengthen Caliola''s infrastructure, reduce risk, support new programs, and keep our technology secure, reliable, compliant, and ready for what comes next.

Essential Responsibilities:

Technology Strategy & Architecture

• Own the organization''s technology strategy and architecture across on-premises, cloud, hybrid, network, endpoint, and secure computing environments.
• Establish and maintain technical roadmaps, architecture standards, and modernization plans for infrastructure, cloud, networking, disaster recovery, secure AI, and related technologies.
• Evaluate emerging technologies and translate business, program, engineering, and security needs into scalable technical architectures and implementation plans.

IT Ops & Service Delivery

• Own the reliability, availability, and performance of core infrastructure, enterprise networks, cloud environments, identity systems, endpoints, collaboration platforms, and other business-critical technology.
• Oversee the implementation, configuration, maintenance, and improvement of infrastructure and network technologies, including LAN/WAN, SD-WAN, VPN, wireless, virtualization, cloud integration, and Infrastructure as Code.
• Establish and maintain disaster recovery, backup, high-availability, and business-continuity capabilities to support resilient technology operations.

Cybersecurity & Risk Management

• Own cybersecurity architecture and technical risk management across the organization, including access control, endpoint protection, network security, vulnerability management, logging, monitoring, and security hardening.
• Identify, assess, mitigate, and monitor technology and cybersecurity risks through secure configuration standards, vulnerability remediation, architecture reviews, and technical controls.
• Lead technical response and recovery efforts during cybersecurity incidents, including investigation, containment, remediation, documentation, and follow-up hardening.

Regulatory & Compliance Readiness / CMMC

• Own the technical implementation and sustainment of cybersecurity and compliance controls supporting CMMC Level 2, NIST SP 800-171/800-53, DFARS, DISA STIGs, and applicable DoD requirements.
• Prepare and maintain technical compliance documentation and evidence, including SSPs, POA&Ms, configuration documentation, network diagrams, technical standards, incident-response procedures, and security-control evidence.
• Support internal assessments, remediation efforts, customer reviews, and external certification or audit activities, including C3PAO assessments and requirements associated with secure or controlled environments.

Technology Asset Management

• Own the lifecycle management of the organization''s technology assets, including hardware, software, cloud resources, systems, licenses, and supporting infrastructure.
• Maintain accurate standards, inventories, configurations, documentation, and lifecycle information to support operational, security, compliance, and budgeting needs.
• Evaluate technology platforms, vendors, licensing, and replacement or upgrade needs to ensure assets remain secure, supported, cost-effective, and aligned with organizational requirements.

What We Require:

• Active (or recent, within the last 5 years) Department of War security clearance at the Secret level or higher.
• Bachelor''s degree in Computer Science, Information Technology, Network Engineering, Engineering, or a related field, or equivalent professional experience.
• 10+ years of progressive experience in enterprise networking, network engineering, network architecture, infrastructure architecture, or a closely related technical role.
• Experience supporting DoD, Federal Government, defense contractor, or similarly regulated environments.
• Advanced knowledge of enterprise network and infrastructure architecture, including routing, switching, firewalls, VPNs, wireless, segmentation, secure connectivity, and disaster recovery.
• Experience supporting Microsoft GCC High, Azure Government, or comparable secure cloud environments.
• Working knowledge of CMMC Level 2, NIST SP 800-171, RMF, DFARS, DISA STIGs, and related DoD cybersecurity requirements.
• Hands-on experience with security hardening, vulnerability management, access control, endpoint protection, logging, SIEM/security monitoring, and incident response.
• Ability to translate business, program, compliance, and engineering needs into secure technical architectures and implementation plans.
• Ability to mentor technical teammates, collaborate across functions, and influence outcomes without direct management authority.

What We Value:

• Active Top Secret or TS/SCI security clearance.
• Direct experience with CMMC Level 2 sustainment, C3PAO or DIBCAC assessments, classified or controlled environments, and continuous compliance.
• Deep knowledge of Microsoft GCC High, Azure Government, and related federal cloud and security frameworks.
• Familiarity with enterprise network platforms such as Cisco, Palo Alto, Fortinet, Aruba, or Juniper.
• Experience with Windows/Linux administration and infrastructure automation using tools such as Terraform, Ansible, PowerShell, Bash, or Python.
• Experience with secure AI architecture, governance, access controls, monitoring, and data protection.
• Relevant certifications such as CISSP, CISM, CCNP/CCIE, Microsoft Azure or Cybersecurity Architect, CCP, Security+, Network+, or SANS/GIAC.

Minimum Physical Requirements:

• Must possess exceptional written and verbal English communication skills, with the ability to convey complex technical concepts to both technical and non-technical audiences.
• Ability to multitask across multiple programs, manage competing priorities, and maintain high focus in a fast-paced environment.
• Ability to navigate an office or server room setting, including prolonged periods at a workstation.
• Ability to bend, kneel, crouch, or reach to install, inspect, or maintain IT hardware, server racks, and cabling.
• Close visual acuity required for analyzing data, engineering diagrams, and extensive reading.
• Fine motor skills and dexterity to manipulate small technical devices and components.
• Ability to occasionally lift, move, and set up infrastructure equipment weighing up to 35 lbs.

Please contact Human Resources with questions about ADA accommodations.

More About Us:

Our performance has driven rapid growth and national recognition, being named twice to the Deloitte Technology Fast 500 and inclusion on the 2026 Inc. 5000 list of America''s fastest-growing private companies. We have also been recognized as a Colorado Company to Watch, a ColoradoBiz Top Company in Aerospace & Defense, and the #2 Gazette''s Best Workplace (medium size) in 2025.

Headquartered in Colorado Springs, CO, we operate in a leading aerospace and defense hub with proximity to major military installations. Set against the Rocky Mountains, the region offers year-round outdoor recreation and a high quality of life for professionals and families considering relocation.

As a part of our selection process, we ask all applicants to complete a short, 10-12-minute survey from Culture Index. This is a survey, not a test; no passing or failing. The purpose of this survey is to identify your unique strengths as they relate to our open positions. Please copy and paste the following link into a separate browser window to complete: https://go.cultureindex.com/s/5i6Gpe3wge

Expression of Interest: By applying to this job, you are expressing interest in this position and could be considered for other career opportunities at Caliola Engineering. Should a match be identified between your skillset and Caliola''s requirements for this or a future opening, you may be contacted.

The posted salary range represents our good faith estimate for this role based on current organizational needs and the qualifications reasonably expected for the position. Final compensation will be determined based on factors such as experience, skills, education, clearance status, and business needs.

This position will remain open until filled, and applications will be reviewed on a continuous basis.

At Caliola, we believe that true innovation can only occur when teammates bring their authentic selves to collaborate in a supportive, encouraging environment. We are an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age, or any other federally protected class.

Caliola participates in E-Verify, an internet-based system used to confirm the employment eligibility of all new hires. Upon hire, all employees are required to complete Form I-9 to verify their identity and employment eligibility to work in the United States.

All candidates will be required to pass a basic background screening.