Senior IT Systems Engineer

Massachusetts Institute of Technology; Lexington (MA); Presencial; USD 134.000 - 181.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Comprehensive health, dental, and view

MIT-funded pension

Matching 401K

Paid leave (vacation, sick, parental,

Tuition reimbursement and continuing教育

Mentorship programs

Work-life balance options

Descripción de la vacante

MIT Lincoln Laboratory is seeking a Sr. Systems Engineer to design and integrate a secure, scalable collateral enterprise computing environment spanning on-premises infrastructure and classified cloud capabilities.

You will set technical direction, establish patterns, and drive cross-team collaboration to support research missions with a formal security posture. You will mentor engineers, define roadmaps, and partner with cybersecurity and authorization teams to ensure compliant, resilient

Formación

• 10-15 years designing and operating complex enterprise or mission computing environments.
• Experience spanning multiple infrastructure and application domains.
• Experience establishing classified or enterprise infrastructure environments with governance.
• Strong knowledge of hybrid-cloud design including networking, compute, storage, identity, security, automation.
• Experience with classified cloud approaches or hyperscale cloud environments.
• Ability to translate requirements into scalable designs and roadmaps.
• Ability to communicate complex concepts to technical teams and senior leadership.
• Active Secret clearance (current or within past 2 years)

Responsabilidades

• Define target technical designs for collateral enterprise environment across on-prem and cloud.
• Lead classified enterprise infrastructure and integrate classified cloud capabilities.
• Develop technical patterns for a hybrid classified environment and trusted on-prem paths.
• Serve as senior technical authority for cloud systems engineering and integration.
• Design architectures for distinct research and enterprise cloud environments with proper segmentation.
• Create foundational cloud capability designs: network, IAM, encryption, logging, and governance.
• Establish reference designs, guardrails, and engineering patterns for consistency.
• Collaborate with cybersecurity and authorization stakeholders to meet security requirements.
• Ensure integration with existing on-prem services and cloud capabilities.
• Evaluate emerging tech and define roles within the collateral enterprise environment.
• Lead design reviews, identify risks, and plan dependencies and debt clearance.
• Develop roadmaps linking current to desired future state and coordinate with leadership.
• Mentor senior engineers to raise overall systems thinking and discipline.

Conocimientos

Hybrid-cloud design

Security & compliance

Technical leadership

Cross-domain collaboration

Communication to leadership

Mentoring engineers

Herramientas

Linux

Ansible

GitHub/GitLab

JFrog

Enterprise monitoring

CI/CD tooling

Descripción del empleo

Position Description

This position will help define the next generation of the Laboratory's collateral enterprise computing environment, extending today's on-premises capabilities into a secure hybrid-cloud architecture that supports both enterprise services and research missions while operating at inspection level readiness.

The Sr. Systems Engineer provides senior technical leadership for the design, evolution, and integration of the Laboratory's collateral enterprise computing environment. The position collaborates with team engineers to establish the technical vision and engineering direction necessary to deliver secure, resilient, scalable, and supportable enterprise capabilities across on-premises infrastructure, classified cloud environments, enterprise platforms, and research-facing services.

The Sr. Systems Engineer serves as a technical authority across organizational and technology boundaries, translating mission and business requirements into enterprise-level technical direction and ensuring that individual technology investments contribute to a coherent long-term strategy.

A significant near-term focus will be establishing the technical foundation required to expand the Laboratory's use of classified cloud capabilities, including AWS Secret Cloud for Industry (ASCI) and comparable classified cloud offerings, while integrating those capabilities with existing collateral enterprise services. This includes defining patterns for cloud connectivity, workload isolation, identity and access, shared services, logging and monitoring, DevSecOps, data movement, security boundaries, and the integration of research and enterprise workloads.

The position works closely with infrastructure engineering, cybersecurity and information assurance, research organizations, enterprise applications, network engineering, cloud providers, and Laboratory leadership to establish technical standards and guide complex engineering decisions.

Key Responsibilities

• Establish and maintain the target technical design for the Laboratory's collateral enterprise environment, spanning on-premises infrastructure, classified cloud, networking, compute, storage, identity, security, DevSecOps, observability, and enterprise services.
• Lead the technical classified enterprise infrastructure and apply that experience to the integration of classified cloud capabilities into the Laboratory enterprise.
• Define technical patterns for a hybrid classified environment, including the role of as the trusted on-premises enterprise access path to classified cloud services while enabling cloud workloads and services to operate within appropriately designed cloud environments.
• Serve as a senior technical authority for collateral cloud systems engineering (in alignment with our unclassified cloud team), including the integration of AWS and future classified cloud capabilities into the Laboratory enterprise.
• Develop technical designs that support distinct research and enterprise cloud environments, including appropriate segmentation and workload zones for research computing, enterprise IaaS, enterprise AI services, shared applications, and access to externally provided services.
• Define the technical design for foundational cloud capabilities including network segmentation, VPC design, routing, firewalling, IAM, encryption/key management, centralized logging, monitoring, configuration management, security services, and workload isolation.
• Establish reusable reference designs, engineering patterns, standards, and technical guardrails that enable engineering teams to implement solutions consistently without requiring each project to independently solve enterprise-level technical problems.
• Partner with cybersecurity, information assurance, and authorization stakeholders to ensure technical decisions support applicable security requirements and authorization processes while avoiding unnecessary technical complexity.
• Ensure classified-cloud technical design appropriately integrates with—or deliberately remains independent from—existing on-premises enterprise services such as identity, logging, monitoring, configuration management, software repositories, DevSecOps tooling, and security services.
• Evaluate emerging technologies and vendor capabilities and determine their appropriate role within the collateral enterprise environment, distinguishing between tactical opportunities and capabilities suitable for enterprise adoption.
• Lead technical design reviews for significant initiatives and identify technical risks, dependencies, technical debt, and integration requirements before implementation.
• Collaborate with team and department leadership to Develop technical roadmaps that connect the current-state collateral environment to the desired future state, identifying sequencing, dependencies, foundational investments, and transition strategies.
• Serve as a technical bridge between research organizations and enterprise IT, ensuring enterprise technical direction provides sufficient standardization and governance while preserving the flexibility necessary to support research and mission requirements.
• Mentor senior engineers across technology domains and raise the overall level of systems thinking and engineering discipline within the organization.

Minimum Qualifications

• 10-15 years of experience designing and operating complex enterprise or mission computing environments.
• Demonstrated experience developing technical designs spanning multiple infrastructure and application technology domains.
• Demonstrated experience establishing new classified or enterprise infrastructure environments, including governance and standardization across security domains.
• Strong knowledge of hybrid-cloud technical design, including networking, compute, storage, identity, security, automation, and cloud-native services.
• Experience with classified cloud approaches (e.g., AWS or comparable offerings) or hyperscale cloud environments more broadly.
• Strong understanding of enterprise network design, segmentation, routing, firewalling, encryption, and secure connectivity.
• Demonstrated ability to translate business, mission, cybersecurity, and operational requirements into scalable technical designs.
• Experience developing technical standards, reference designs, technology roadmaps, and design-review processes.
• Ability to communicate complex technical concepts to both technical audiences and senior leadership.
• Demonstrated ability to influence technical direction across organizational boundaries without relying solely on direct organizational authority.
• Must possess an active Secret clearance or had one in the past two years

Preferred Qualifications

• Experience designing or operating classified enterprise environments.
• Experience with AWS Secret Cloud, AWS or other classified commercial cloud offerings.
• Familiarity with NIST, RMF, DISA STIGs, Zero Trust principles, and authorization processes applicable to classified systems.
• Experience integrating cloud and on-premises environments at enterprise scale.
• Experience supporting both enterprise and research/mission computing environments.
• Experience with modern DevSecOps practices, infrastructure automation, configuration management, CI/CD, and software supply-chain security.
• Experience with technologies such as Linux, Ansible, GitHub/GitLab, JFrog, enterprise monitoring, configuration management, and cloud automation.
• Experience with AI/ML infrastructure or managed AI services in controlled computing environments.

Hiring Range: $134,100-$181,000

Disclaimer: MIT Lincoln Laboratory provides a typical hiring range as a good faith estimate of what we reasonably expect to offer for this position at the time of posting. The final salary offered to a selected candidate will depend on various factors, including—but not limited to—the scope and responsibilities of the role, the candidate’s experience, skills and education/training, internal equity considerations and applicable legal requirements. This range reflects base salary only and does not include additional forms of compensation or benefits.

At MIT Lincoln Laboratory, our exceptional career opportunities include many outstanding benefits to help you stay healthy, feel supported, and enjoy a fulfilling work-life balance. Benefits offered to employees include:

• Comprehensive health, dental, and vision plans
• MIT-funded pension
• Matching 401K
• Paid leave (including vacation, sick, parental, military, etc.)
• Tuition reimbursement and continuing education programs
• Mentorship programs
• A range of work-life balance options
• ... and much more!

Please visit our Benefits page for more information. As an employee of MIT, you can also take advantage of other voluntary benefits, discounts and perks.

Selected candidate will be subject to a pre-employment background investigation and must possess a current in scope Secret level security clearance.

MIT Lincoln Laboratory is an Equal Employment Opportunity (EEO) employer. All qualified applicants will receive consideration for employment and will not be discriminated against on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, veteran status, disability status, or genetic information; U.S. citizenship is required.

Requisition ID: 43460