Classified IT Security Engineer — VMware & STIGs Expert

Mosaic.tech; Costa Mesa (CA); On-site; USD 146,000 - 194,000; Full time

Job summary

Anduril Industries is seeking an IT Security Engineer to own and maintain classified infrastructure end-to-end, from operating system hardening and compliance scanning to virtualization management and enterprise service delivery.

This role demands deep familiarity with hardened security controls across Windows, Linux, and virtual platforms, working closely with security and engineering teams to ensure compliant, resilient, and mission-ready environments.

Qualifications

• Experience administering and hardening Windows Server and Linux (RHEL) in classified environments.
• VMware vSphere administration incl. provisioning and patching.
• Ability to apply and validate STIGs using SCAP/SCC tools.
• Experience managing Active Directory, DNS, DHCP, and enterprise patch management.
• Proficiency in scripting (PowerShell, Bash, Python) and Ansible.
• Eligible to obtain and maintain an active U.S. Secret security clearance.

Responsibilities

• Administer Windows and Linux systems with hardened baselines.
• Manage virtual infrastructure (VMware vSphere; possibly vSAN, Horizon/VDI) and STIGs.
• Apply, validate, and document STIG findings and remediation.
• Configure enterprise services including AD, DNS, DHCP, WSUS.
• Develop automation using Ansible, PowerShell, Bash, Python.
• Monitor health and security; respond to alerts.
• Support vulnerability scanning and remediation with timelines.
• Maintain backups and recovery, meet RPO/RTO.
• Provide evidence during security assessments.
• Transition environments to steady-state after ATO.

Skills

Windows Server hardening

Linux (RHEL) hardening

VMware vSphere

SCAP/SCC

Active Directory

Scripting (PowerShell, Bash, Python)

Ansible

U.S. Secret clearance eligible

Tools

VMware vSphere

vSAN

Horizon/VDI

SCAP/SCC tools

PowerShell

Bash

Python

Ansible

Job description

Anduril Industries is seeking an IT Security Engineer to own and maintain classified infrastructure end-to-end, from operating system hardening and compliance scanning to virtualization management and enterprise service delivery.

This role demands deep familiarity with hardened security controls across Windows, Linux, and virtual platforms, working closely with security and engineering teams to ensure compliant, resilient, and mission-ready environments.