Senior Infrastructure Automation Architect

Leidos LLC; Chantilly (VA); On-site; USD 131,300 - 237,350; Full time

Benefits offered by this job

Competitive compensation

Health and Wellness programs

Paid leave

Retirement plans

Job summary

Leidos LLC, located in Chantilly, Virginia, is seeking a senior-level automation engineer to design and build fully automated Windows-based enterprise environments. The role is critical for developing systems within isolated networks that require advanced automation skills.

Ideal candidates will have significant experience in PowerShell and Infrastructure as Code principles. The position offers a competitive salary range of $131,300 - $237,350 and comprehensive health benefits.

Qualifications

• Must have a Top Secret/SCI with Polygraph clearance.
• At least 12 years of experience with a Bachelor's degree or 10 with a Master's degree.
• Deep experience with PowerShell Desired State Configuration (DSC) and automation.

Responsibilities

• Architect and implement fully automated Windows domain deployments.
• Design provisioning of Active Directory Domain Controllers and other servers.
• Engineer automation solutions without internet dependencies.

Skills

PowerShell development

Infrastructure as Code (IaC)

Active Directory architecture

Virtualization platform APIs (Nutanix, VMware)

Education

Bachelor’s degree or equivalent experience

Job description

We are seeking a senior-level automation engineer to design and build fully automated Windows-based enterprise environments using Infrastructure as Code principles. The role operates within a highly controlled, air-gapped enterprise environment and requires proven experience engineering and automating systems in isolated networks with no direct internet connectivity.

Responsibilities

• Architect and implement fully automated Windows domain deployments in an air-gapped infrastructure.
• Build reusable PowerShell Desired State Configuration (DSC) frameworks for disconnected networks.
• Design configuration-driven provisioning of Active Directory Domain Controllers, PKI/ADCS, Exchange, file, print, and application servers.
• Engineer automation solutions that do not rely on public repositories or internet-based package management.
• Partner with senior Windows and virtualization engineers to integrate automation into existing enterprise platforms.
• Implement Git-based configuration management within isolated repositories.
• Design automation for multi-domain, multi-tenant, and segmented environments.
• Eliminate configuration drift using declarative tooling.
• Develop standardized infrastructure blueprints deployable on demand.
• Integrate secure credential vaulting into automation workflows.

Required Qualifications

• Clearance: Must have a Top Secret/SCI with Polygraph.
• Bachelor’s degree and at least 12 years of experience, OR Master’s degree and at least 10 years of relevant experience, OR 16 years of relevant career experience in lieu of a degree.
• Demonstrated experience designing and operating automation within air-gapped or fully disconnected environments.
• Expert-level PowerShell development (modular, reusable, testable code).
• Deep experience with PowerShell Desired State Configuration (DSC).
• Strong Infrastructure as Code (IaC) experience in Windows environments.
• Advanced Active Directory architecture and automation experience.
• Experience automating enterprise Windows Server deployments.
• Experience with virtualization platform APIs (e.g., Nutanix, VMware).
• Experience implementing configuration drift detection and remediation.
• Strong understanding of secure automation, artifact management, and least-privilege design.
• Required to pass a customer-required medical and psychological screening.

Preferred Qualifications

• Experience building internal artifact repositories for disconnected environments.
• Automation of multi-tenant networks.
• Enterprise-scale configuration management strategy development.
• Building golden images.
• Experience designing automation supply chains for restricted networks.

What Success Looks Like

• A new domain can be deployed by supplying configuration data (name, users, roles).
• Infrastructure builds are repeatable and version-controlled inside isolated repositories.
• Server configuration drift is automatically remediated.
• New environments can be provisioned in hours instead of weeks.
• Automation operates fully within air-gapped constraints without external dependencies.

Benefits

• Pay Range: $131,300.00 - $237,350.00 (general guideline, not a guarantee).
• Competitive compensation.
• Health and Wellness programs.
• Income protection.
• Paid leave and retirement plans.

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.