Lead Infrastructure and Cybersecurity Architect

Caliola Engineering, LLC; Colorado Springs (CO); On-site; USD 150,000 - 195,000; Full time

Benefits offered by this job

Flexible PTO

Health insurance (subsidized)

401(k) matching

Professional development

Job summary

Caliola Engineering, LLC is seeking a Lead Infrastructure and Cybersecurity Architect in Colorado Springs to shape the technology foundation for mission-critical work. You will guide architecture across on‑prem, cloud, and hybrid environments, emphasizing secure, scalable computing and resilient operations.

This hands-on leadership role requires deep expertise in infrastructure, cybersecurity, compliance readiness (CMMC/NIST), and modernization, while mentoring teams and partnering across

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Network Engineering, Engineering, or related field.
• 10+ years of progressive experience in enterprise networking, network engineering, or related role.
• Experience with DoD, federal environments or defense contractors.
• Advanced knowledge of network/infrastructure architecture, routing, switching, firewalls, VPNs, wireless, DR.
• Experience with GCC High, Azure Government, or secure cloud environments.

Responsibilities

• Own technology strategy and architecture across on‑prem, cloud, hybrid, network, endpoint, and secure computing.
• Maintain roadmaps, standards, modernization plans for infra, cloud, networking, DR, and secure AI.
• Translate business and security needs into scalable architectures and implementation plans.
• Ensure reliability, availability, and performance of core infrastructure and networks.
• Lead cybersecurity risk management, incident response, and secure configuration controls.
• Oversee disaster recovery, backup, high availability, and business continuity capabilities.

Skills

Technology strategy

Security architecture

Network architecture

Infrastructure architecture

Mentorship

Cross-functional collaboration

Clear communication

DoD compliance

Risk management

Leadership

Education

Bachelor's degree in CS/IT/Engineering

Tools

Terraform

Ansible

PowerShell

Bash

Python

Job description

Essential Responsibilities

Technology Strategy & Architecture

City/State: Colorado Springs, CO USA

Type and Schedule: Full-Time, Salary/Exempt, on-site with limited remote work flexibility.

Annualized Salary Range: $150,000.00 - $195,000.00 commensurate with experience.

About Us

Caliola is an award-winning woman-owned small business that is improving and protecting our Nation's way of life through secure collaboration and resilient communications. Our engineers, subject matter experts, and veterans are developing and delivering trusted solutions for mission-critical communications. These values guide how we work every day. At Caliola, you will find technically challenging, mission-focused work within a flexible and collaborative culture that is uncommon in the defense industry.

I3 for C3 - Insight, Innovation, and Integrity for Command, Control, and Communications

We offer flexible PTO, subsidized health insurance, 401(k) matching, professional development, and a competitive compensation structure designed to support long-term growth.

Position Description

Caliola Engineering is seeking a Lead Infrastructure and Cybersecurity Architect to help shape the technology foundation that supports our growing organization and mission-critical work. This role is ideal for a seasoned technical leader who enjoys setting direction, solving complex infrastructure and security challenges, and building secure, resilient environments designed to scale. You'll have the opportunity to influence technology strategy, infrastructure operations, cybersecurity, compliance readiness, and modernization across Caliola while serving as a trusted technical leader for some of our most important technology decisions. You'll work across enterprise networks, cloud and hybrid environments, secure systems, cybersecurity, CMMC readiness, and emerging technologies such as secure AI. This is a hands‑on role for someone who is equally comfortable defining architecture and rolling up their sleeves to help turn that vision into reality. You'll partner closely with engineering, cybersecurity, compliance, facilities, and program teams to strengthen Caliola's infrastructure, reduce risk, support new programs, and keep our technology secure, reliable, compliant, and ready for what comes next.

Technology Strategy & Architecture

• Own the organization's technology strategy and architecture across on-premises, cloud, hybrid, network, endpoint, and secure computing environments.
• Establish and maintain technical roadmaps, architecture standards, and modernization plans for infrastructure, cloud, networking, disaster recovery, secure AI, and related technologies.
• Evaluate emerging technologies and translate business, program, engineering, and security needs into scalable technical architectures and implementation plans.

IT Ops & Service Delivery

• Own the reliability, availability, and performance of core infrastructure, enterprise networks, cloud environments, identity systems, endpoints, collaboration platforms, and other business-critical technology.
• Oversee the implementation, configuration, maintenance, and improvement of infrastructure and network technologies, including LAN/WAN, SD-WAN, VPN, wireless, virtualization, cloud integration, and Infrastructure as Code.
• Establish and maintain disaster recovery, backup, high-availability, and business-continuity capabilities to support resilient technology operations.

Cybersecurity & Risk Management

• Own cybersecurity architecture and technical risk management across the organization, including access control, endpoint protection, network security, vulnerability management, logging, monitoring, and security hardening.
• Identify, assess, mitigate, and monitor technology and cybersecurity risks through secure configuration standards, vulnerability remediation, architecture reviews, and technical controls.
• Lead technical response and recovery efforts during cybersecurity incidents, including investigation, containment, remediation, documentation, and follow‑up hardening.

Regulatory & Compliance Readiness / CMMC

• Own the technical implementation and sustainment of cybersecurity and compliance controls supporting CMMC Level 2, NIST SP 800-171/800-53, DFARS, DISA STIGs, and applicable DoD requirements.
• Prepare and maintain technical compliance documentation and evidence, including SSPs, POA&Ms, configuration documentation, network diagrams, technical standards, incident‑response procedures, and security‑control evidence.
• Support internal assessments, remediation efforts, customer reviews, and external certification or audit activities, including C3PAO assessments and requirements associated with secure or controlled environments.

Technology Asset Management

• Own the lifecycle management of the organization's technology assets, including hardware, software, cloud resources, systems, licenses, and supporting infrastructure.
• Maintain accurate standards, inventories, configurations, documentation, and lifecycle information to support operational, security, compliance, and budgeting needs.
• Evaluate technology platforms, vendors, licensing, and replacement or upgrade needs to ensure assets remain secure, supported, cost‑effective, and aligned with organizational requirements.

What We Require

• Active (or recent, within the last 5 years) Department of War security clearance at the Secret level or higher.
• Bachelor's degree in Computer Science, Information Technology, Network Engineering, Engineering, or a related field, or equivalent professional experience.
• 10+ years of progressive experience in enterprise networking, network engineering, network architecture, infrastructure architecture, or a closely related technical role.
• Experience supporting DoD, Federal Government, defense contractor, or similarly regulated environments.
• Advanced knowledge of enterprise network and infrastructure architecture, including routing, switching, firewalls, VPNs, wireless, segmentation, secure connectivity, and disaster recovery.
• Experience supporting Microsoft GCC High, Azure Government, or comparable secure cloud environments.
• Working knowledge of CMMC Level 2, NIST SP 800-171, RMF, DFARS, DISA STIGs, and related DoD cybersecurity requirements.
• Hands‑on experience with security hardening, vulnerability management, access control, endpoint protection, logging, SIEM/security monitoring, and incident response.
• Ability to translate business, program, compliance, and engineering needs into secure technical architectures and implementation plans.
• Ability to mentor technical teammates, collaborate across functions, and influence outcomes without direct management authority.

What We Value

• Active Top Secret or TS/SCI security clearance.
• Direct experience with CMMC Level 2 sustainment, C3PAO or DIBCAC assessments, classified or controlled environments, and continuous compliance.
• Deep knowledge of Microsoft GCC High, Azure Government, and related federal cloud and security frameworks.
• Familiarity with enterprise network platforms such as Cisco, Palo Alto, Fortinet, Aruba, or Juniper.
• Experience with Windows/Linux administration and infrastructure automation using tools such as Terraform, Ansible, PowerShell, Bash, or Python.
• Experience with secure AI architecture, governance, access controls, monitoring, and data protection.
• Relevant certifications such as CISSP, CISM, CCNP/CCIE, Microsoft Azure or Cybersecurity Architect, CCP, Security+, Network+, or SANS/GIAC.

Minimum Physical Requirements

• Must possess exceptional written and verbal English communication skills, with the ability to convey complex technical concepts to both technical and non-technical audiences.
• Ability to multitask across multiple programs, manage competing priorities, and maintain high focus in a fast‑paced environment.
• Ability to navigate an office or server room setting, including prolonged periods at a workstation.
• Ability to bend, kneel, crouch, or reach to install, inspect, or maintain IT hardware, server racks, and cabling.
• Close visual acuity required for analyzing data, engineering diagrams, and extensive reading.
• Fine motor skills and dexterity to manipulate small technical devices and components.
• Ability to occasionally lift, move, and set up infrastructure equipment weighing up to 35 lbs.

Please contact Human Resources with questions about ADAaccommodations.

More About Us

Our performance has driven rapid growth and national recognition, being named twice to the Deloitte Technology Fast 500™ and inclusion on the 2026 Inc. 5000 list of America's fastest-growing private companies. We have also been recognized as a Colorado Company to Watch, a ColoradoBiz Top Company in Aerospace & Defense, and the #2 Gazette's Best Workplace (medium size) in 2025.

Headquartered in Colorado Springs, CO, we operate in a leading aerospace and defense hub with proximity to major military installations. Set against the Rocky Mountains, the region offers year‑round outdoor recreation and a high quality of life for professionals and families considering relocation.

As a part of our selection process, we ask all applicants to complete a short, 10–12-minute survey from Culture Index. This is a survey, not a test; no passing or failing. The purpose of this survey is to identify your unique strengths as they relate to our open positions. Please copy and paste the following link into a separate browser window to complete: https://go.cultureindex.com/s/5i6Gpe3wge

Expression of Interest

By applying to this job, you are expressing interest in this position and could be considered for other career opportunities at Caliola Engineering. Should a match be identified between your skillset and Caliola's requirements for this or a future opening, you may be contacted.

The posted salary range represents our good faith estimate for this role based on current organizational needs and the qualifications reasonably expected for the position. Final compensation will be determined based on factors such as experience, skills, education, clearance status, and business needs.

This position will remain open until filled, and applications will be reviewed on a continuous basis.

At Caliola, we believe that true innovation can only occur when teammates bring their authentic selves to collaborate in a supportive, encouraging environment. We are an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age, or any other federally protected class.

Caliola participates in E-Verify, an internet-based system used to confirm the employment eligibility of all new hires. Upon hire, all employees are required to complete Form I‑9 to verify their identity and employment eligibility to work in the United States.

All candidates will be required to pass a basic background screening.