Senior IT Systems Engineer

JT4, LLC provides engineering and technical support to multiple western test ranges for the U.S. Air Force, Space Force, and Navy under the Joint Range Technical Services Contract, better known as J-Tech II. JT4 develops and maintains realistic, integrated test and training environments and prepares our nation's war-fighting aircraft, weapons systems, and aircrews for today's missions and tomorrow's global challenges.

JOB SUMMARY -- ESSENTIAL FUNCTIONS/DUTIES

The Senior IT Systems Engineer (Hybrid Cloud & Infrastructure) will lead the architectural integration, modernization, and technical sustainment of our secure software development networks across both on-premises bare-metal/virtualized environments and secure hybrid cloud infrastructure (AWS FENCES).

In this role, you will serve as the internal technical authority and bridge between legacy on-premises infrastructure and our expanding cloud footprint. Working in tandem with our current Systems Administrators, Cybersecurity Analysts, and DevSecOps teams, you will provide critical technical oversight for third-party contractor implementations, partner with AWS Solutions Architects, and ensure our hybrid infrastructure meets stringent DoD security standards while providing exceptional performance for developer workloads.

The Senior IT Systems Engineer will serve as the internal technical authority and bridge between legacy on-premises infrastructure and our expanding cloud footprint. Working in tandem with our current Systems Administrators, Cybersecurity Analysts, and DevSecOps teams, you will provide critical technical oversight for third-party contractor implementations, partner with AWS Solutions Architects, and ensure our hybrid infrastructure meets stringent DoD security standards while providing exceptional performance for developer workloads.

 Employee will be responsible for the following functions/duties:

• Architectural Strategy, Hybrid Design & Cloud Operations
• Plan, architect, document, and execute the phased migration of software development workloads, enclaves, and shared storage into AWS FENCES / GovCloud.
• Architect and manage core cloud services, including AWS EC2, S3, VPC, IAM, Transit Gateway, Route 53, and CloudWatch.
• Meet with other organizational groups and stakeholders to gather requirements and ensure technical needs are met with the architecture.
• Design, implement, and maintain resilient, secure hybrid network connectivity (Direct Connect, IPSec VPN tunnels, cross-domain proxies) bridging on-premises development labs with AWS cloud VPCs.
• Direct Identity and Access Management (IAM) policies, role-based access controls, and boundary trust relationships according to strict zero-trust and least-privilege principles.

• On-Premise Systems & Enterprise Virtualization 
• Maintain high-availability architectural baselines for enterprise Linux (RHEL, Rocky Linux, Ubuntu) and Windows server environments supporting developer pipelines.
• Architect and manage enterprise hypervisors (VMware vSphere/ESXi, KVM) and underlying physical compute clusters across air-gapped development labs.
• Oversee bare-metal server hardware provisioning, lifecycle management, capacity planning, and hardware-level performance tuning.
• Design and manage distributed storage clusters and centralized storage systems (Ceph, SAN, NAS, NFS), ensuring high I/O throughput for CI/CD builds, robust backup strategies, and comprehensive disaster recovery readiness.

• Networking, PKI, & Enclave Connectivity 
• Oversee core network infrastructure services within development networks: DNS, DHCP, NTP, LDAP / Active Directory / FreeIPA, and reverse proxies.
• Lead the implementation, issuance, and automated renewal of internal and external SSL/TLS certificates across Linux hosts, Kubernetes ingress points, and network appliances.
• Collaborate with network operations to configure switches, VLAN segmentations, routing policies, and firewall rules to strictly isolate development enclaves.

• Cybersecurity Hardening & Compliance Auditing 
• Enforce compliance with DoD Security Technical Implementation Guides (STIGs) and NIST SP 800-53 controls across operating systems, hypervisors, and cloud environments.
• Lead vulnerability assessment remediation (e.g., ACAS / Tenable Nessus findings) and coordinate system patching schedules to maintain continuous Authority to Operate (ATO).
• Architect unified logging and observability pipelines (Syslog, CloudWatch Logs, Splunk/ELK) for enterprise auditability and incident investigation.

• Automation, Infrastructure as Code (IaC) & Mentorship
• Drive infrastructure automation and configuration consistency using Ansible, Terraform, and operational scripting in Python, Bash, or PowerShell.
• Provide technical guidance and mentorship to junior and mid-level systems administration staff, establishing standard operating procedures (SOPs) and comprehensive architectural documentation.
• Partner closely with Platform and DevSecOps personnel to ensure underlying compute, network, and storage primitives seamlessly support container runtimes and automated pipelines.

DESIRED QUALIFICATIONS

REQUIREMENTS -- EDUCATION, TECHNICAL, AND WORK EXPERIENCE

One of the following educational requirements must be met for this position:

1. A bachelor’s degree in an associated discipline and a minimum of 14 years of related experience
2. A master’s degree in an associated discipline and a minimum of 10 years of experience
3. A PhD in an associated discipline and a minimum of eight years of experience

In addition, a Computer Scientist V must possess the following qualifications:

• Demonstrated expertise with computer-based systems and applications
• Senior-level programing skills in languages used for job-specific programming tasks
• Senior-level expertise in the application of industry standard hardware and software design and documentation techniques
• Extensive knowledge of systems engineering and software development lifecycles
• Excellent verbal and written communication skills
• Excellent planning/organizational skills
• Ability to work under deadlines

BENEFITS

• Medical, Dental, Vision Insurance
  • Benefits Active on Day 1
• Life Insurance
• Health Savings Accounts/FSA's
• Disability Insurance
• Paid Time Off
• 401(k) Plan Options with Employer Match
  • JT4 will match 50%, up to an 8% contribution
  • 100% Immediate Vesting
• Tuition Reimbursement

OTHER RESPONSIBILITIES

Each employee must read, understand, and implement the general and specific operational, safety, quality, and environmental requirements of all plans, procedures, and policies pertaining to their job.

WORKING CONDITIONS

Work is performed in a typical office environment with no unusual hazards. Occasional lifting (up to 20 pounds), constant sitting while using the computer terminal, constant use of sight abilities while reviewing documents, constant use of speech/hearing abilities for communication, and constant mental alertness are required.

Travel to remote company work locations may be required.

DISCLAIMER 

The above statements are intended to describe the general nature and level of work being performed by personnel assigned to this classification. They are not intended to be construed as an exhaustive list of all responsibilities, duties, and skills required of persons so classified.

Tasking is in support of a federal government contract that requires U.S. citizenship. Some jobs may require a candidate to be eligible for a government security clearance, state-issued driver's license or other licenses / certifications and the inability to obtain and maintain the required clearance, license or certification may affect an employee's ability to maintain employment.

SCC: JSD12; JCORP12