Senior IT Security Engineer - Build Space Classified Infra

Linuxconfig; Costa Mesa, Northern (CA, KY); Hybrid; USD 166,000 - 220,000; Full time

Job summary

Anduril Industries seeks a Senior IT Security Engineer to architect and stand up a classified infrastructure for the Space team from the ground up. You’ll shape architecture, tooling, and automation to ensure resilient, compliant, mission-ready environments.

You’ll build VMware-based infrastructure, implement STIG compliance, deploy AD/DNS/DHCP, create runbooks, and drive vulnerability remediation with ISSO/ISSM guidance. Expect to guide ATO efforts and security documentation.

Qualifications

• 7+ years administering and hardening Windows Server and Linux (RHEL) in classified or regulated environments.
• Demonstrated experience building infrastructure from scratch, not just maintaining existing environments.
• Deep knowledge of STIG application and validation using SCAP/SCC tools, with the ability to design compliance programs, not just execute checklists.
• Strong VMware vSphere experience, including architecture decisions, provisioning, and patching.
• Experience standing up and managing Active Directory, DNS, DHCP, and enterprise patch management in new environments.
• Advanced scripting and automation skills (PowerShell, Bash, or Python) with hands‑on Ansible experience.
• Eligible to obtain and maintain an active U.S. Secret security clearance.

Responsibilities

• Design and build classified infrastructure from scratch, including server environments, virtual platforms, networking, and enterprise services — establishing the architecture and hardened baselines the Space team will operate on
• Define and implement STIG compliance strategies across Windows, RHEL, and VMware, using SCAP, SCC, and manual validation; stand up repeatable processes for ongoing compliance scanning and remediation
• Architect and deploy virtual infrastructure (primarily VMware vSphere, and potentially vSAN and Horizon/VDI), making foundational decisions on topology, resource allocation, and scalability
• Build out enterprise services from the ground up, including Active Directory, DNS, DHCP, WSUS/patch repositories, and repository servers
• Develop automation frameworks using Ansible, scripting (PowerShell, Bash, Python), and infrastructure-as-code practices to ensure environments are reproducible, consistent, and minimally dependent on manual intervention
• Establish monitoring, alerting, and incident response processes for system health, performance, and security posture
• Lead vulnerability remediation efforts, driving technical implementation for CAT I/II/III findings and partnering with ISSO/ISSM stakeholders to meet required timelines
• Design and implement backup and disaster recovery strategies, defining RPO/RTO targets and validating them through regular testing
• Guide environments through the ATO process, producing documentation, compliance evidence, and technical demonstrations for security assessments
• Create comprehensive runbooks, architecture documentation, and knowledge transfer materials to enable the team to scale beyond a single point of ownership

Skills

Windows Server

RHEL/Linux

VMware vSphere

STIG & SCAP

Active Directory

Ansible Automation

PowerShell

Python

Security Clearance

Vulnerability Management

Tools

VMware Horizon

VMware vSAN

SCAP Tools

Job description

Anduril Industries seeks a Senior IT Security Engineer to architect and stand up a classified infrastructure for the Space team from the ground up. You’ll shape architecture, tooling, and automation to ensure resilient, compliant, mission-ready environments.

You’ll build VMware-based infrastructure, implement STIG compliance, deploy AD/DNS/DHCP, create runbooks, and drive vulnerability remediation with ISSO/ISSM guidance. Expect to guide ATO efforts and security documentation.