IT Infrastructure Engineer (Hybrid Eligible)

Oak Ridge National Laboratory; Oak Ridge (TN); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical plan

Retirement plan

Wellness programs

Job summary

Oak Ridge National Laboratory (ORNL) seeks an IT Infrastructure Engineer to design, deploy, and sustain the Knowledge Discovery Infrastructure (KDI) computing environment. You will work in a collaborative team to support sensitive data and federal project requirements, including VMware Cloud Foundation, storage, AD services, and remote access management.

The role requires delivering secure, scalable infrastructure aligned with DOE cybersecurity standards, while providing off-hours support and

Qualifications

• BS degree in a related field or equivalent combination of education/experience.
• Minimum 8 years of IT Infrastructure and Linux experience.

Responsibilities

• Design, integrate, and administer a multi-tenant, virtualized research environment.
• Manage storage, AD services, and remote access infrastructure.
• Maintain hardware inventory, firmware, and network equipment.
• Ensure DOE cybersecurity standards and configuration baselines.
• Provide off-hours support and incident response.

Skills

VMware ESXi

vCenter

PowerShell

Bash scripting

Linux system administration

Networking concepts

Identity management

Security hardening

Containerization (Podman/Docker)

SCCM/Puppet/Ansible

Education

Bachelor's degree in computer science/engineering/IT or related field

Tools

VMware Cloud Foundation

NSX

Scripting: PowerShell/Bash

Job description

Oak Ridge National Laboratory (ORNL) is seeking an IT Infrastructure Engineer to support an isolated computing environment known as Knowledge Discovery Infrastructure (KDI). The KDI team supports research projects which rely on sensitive unclassified datasets, from federal agencies including Department of Veterans Affairs (VA), Department of Energy (DOE), the National Cancer Institute (NCI), and various national security organizations. As a member of the KDI team, you will use your technical expertise and critical thinking skill, in a highly collaborative environment, to design, deploy, and sustain the KDI computing infrastructure. Your contributions will directly support ORNL’s mission to advance our national security, prosperity, and health.

Major Duties and Responsibilities:

• Assist in the design, integration, and administration of a multi-tenant, virtualized research environment; supporting a VMware Cloud Foundation infrastructure, and the related physical servers, storage, and network systems.
• Assist in the ongoing lifecycle and administration of storage arrays and supporting infrastructure (fiber channel, NFS, SMB, S3).
• Manage and maintain Active Directory services and identity management.
• Manage and maintain the Omnissa Horizon remote access environment.
• Coordinate with manufacturer support to update firmware/software on a wide range of hardware, including, but not limited to servers, fiber channel switches, and storage arrays.
• Manage and maintain backups of data and system configurations.
• Coordinate with property management on hardware inventory and tracking.
• Coordinate with Facilities & Operations staff on hardware installation and maintenance in the data center.
• Assist with periodic review/audit of firewall rules.
• Ensure compliance with DOE cybersecurity standards, configuration baselines and operational policies.
• Monitor system performance.
• Troubleshoot system problems quickly and effectively.
• Work with other systems engineers and vendors to resolve hardware and software packages issues.
• Answer escalated KDI support calls in addition to primary project work.
• Manage and direct networking architecture and firewall allowances
• Develop and document policies and procedures for system configurations, directions, security hardening, etc.
• Work with scientific research users to determine needs, and balance needs against cyber requirements to provide a solution that meets both requirements.
• Provide off-hours support during system maintenance windows.
• Deliver ORNL’s mission by aligning behaviors, priorities, and interactions with our core values of Impact, Integrity, Teamwork, Safety, and Service. Promote equal opportunity by fostering a respectful workplace – in how we treat one another, work together, and measure success.

Basic Qualifications:

• A BS degree in computer science, computer engineering, information technology, information systems, science, engineering, business, or a related discipline and a minimum of 8 years of IT Infrastructure and Linux experience is required for consideration. An overall combination of equivalent education and experience may be considered in lieu of degree.
• Collaborate effectively in a team environment.

Preferred Qualifications:

• Demonstrated experience managing a large, virtualized environment and the hardware and networking that supports it.
• Experience with VMware ESXi, vCenter, VCF Operations, VCF Automation, and NSX.
• Strong understanding of SRIOV and PCI device sharing within ESXi; specifically virtualized GPU.
• Strong MS PowerShell scripting skills for configuration, automation, and reporting. Bash scripting beneficial.
• In-depth understanding of networking concepts and design, specifically layer 2 and layer 3.
• Experience managing identity and access management systems, including MFA, SSO, and zero-trust frameworks (PingFederate, RSA SecureID, Entra ID)
• Experience with Linux systems: RHEL8/9, and Ubuntu 22.04 and 24.04LTS.
• Experience with CIS Hardening, or STIGs
• Previous experience working in a government, scientific, or other highly technical environment.
• Demonstrated capabilities working in a dynamic environment and translating customer needs into actionable project plans and see plans through execution while balancing needs for short-term, high-priority tasks.
• Moderate fluency in at least one scripting language such as bash, python, ruby, perl or equivalent.
• Implementation, maintenance, and assistance to users with containerization software such as Podman and Docker.
• Demonstrated ability to balance business needs and security requirements.
• Familiarity with AI topics and scientific AI models such as LLMs.
• Experience in one or more system management tools. (SCCM, Puppet, Ansible, etc)

Special Requirements:

• Visa sponsorship is not available for this position.
• This position requires the ability to obtain and maintain a clearance from the Department of Energy. As such, this position is a Workplace Substance Abuse (WSAP) testing designated position. WSAP positions require passing a pre-placement drug test and participation in an ongoing random drug testing program.
• For Hybrid eligible positions: In addition, we offer a flexible work environment that supports both the organization and the employee. A hybrid/onsite working arrangement may be available with this position.

About ORNL:

As a U.S. Department of Energy (DOE) Office of Science national laboratory, ORNL has an impressive 80-year legacy of addressing the nation’s most pressing challenges. Our team is made up of over 7,000 dedicated and innovative individuals! Our goal is to create an environment where a variety of perspectives and backgrounds are valued, ensuring ORNL is known as a top choice for employment. These principles are essential for supporting our broader mission to drive scientific breakthroughs and translate them into solutions for energy, environmental, and security challenges facing the nation.

ORNL offers competitive pay and benefits programs to attract and retain individuals who demonstrate exceptional work behaviors. The laboratory provides a range of employee benefits, including medical and retirement plans and flexible work hours, to support the well-being of you and your family. Employee amenities such as on-site fitness, banking, and cafeteria facilities are also available for added convenience.

Other benefits include the following: Prescription Drug Plan, Dental Plan, Vision Plan, 401(k) Retirement Plan, Contributory Pension Plan, Life Insurance, Disability Benefits, Generous Vacation and Holidays, Parental Leave, Legal Insurance with Identity Theft Protection, Employee Assistance Plan, Flexible Spending Accounts, Health Savings Accounts, Wellness Programs, Educational Assistance, Relocation Assistance, and Employee Discounts.

This position will remain open for a minimum of 5 days after which it will close when a qualified candidate is identified and/or hired.

ORNL is an equal opportunity employer. All qualified applicants, including individuals with disabilities and protected veterans, are encouraged to apply. UT-Battelle is an E-Verify employer.