Senior Physical Security Systems Engineer - Data Center Operations

ByteDance; Ashburn (VA); On-site; USD 127,000 - 288,000; Full time

Job summary

ByteDance is seeking a Senior Physical Security Systems Engineer for Data Center Operations in Ashburn. You will own regional security estate end-to-end, interfacing with VMware, storage, networking, and security apps to maintain a robust global datacenter platform.

Responsibilities include operating regional systems, managing privileged access, and coordinating regional engineers and vendors. Occasional international travel is required. A strong emphasis on documentation and SOP adherence.

Qualifications

• Bachelor’s degree or equivalent practical experience.
• Windows and Linux server administration experience, including VMware vSphere and enterprise storage.
• Networking fundamentals and AD, PKI, DNS/DHCP knowledge.
• Experience with Genetec Security Center and Lenel/on-premise security tech.
• Incident/change/vendor-escalation discipline with strong documentation.
• Experience directing contractors or junior engineers in operations.

Responsibilities

• Operate regional physical security systems across virtualization, storage and network platforms.
• Manage privileged access and approve region-wide changes.
• Troubleshoot security applications and dependencies; escalate to global engineering.
• Enforce SOPs, patch cycles and document operational evidence.
• Monitor health, incidents, and vendor support across regional sites.
• Lead regional outsourcing teams and ensure standard execution.

Skills

Vendor management

Incident management

Documentation

Problem solving

Education

Bachelor’s degree in Computer Science or related field

Tools

VMware vSphere

vSAN

Active Directory

DNS/DHCP

Genetec Security Center

Lenel

Job description

Senior Physical Security Systems Engineer - Data Center Operations

Location:

Ashburn

Team:

Infrastructure

Employment Type:

Regular

Job Code:

A71286A

Responsibilities

The Security Devops team within Data Center Operations - Security and EHS; designs, builds and operates the physical security platform protecting TikTok’s global datacenter fleet - the virtualization, storage, network, identity and application stack behind CCTV/VMS, access control and IoT systems across AMER, EMEA and APAC. The team runs as an internal platform provider: a single global architecture, deployed from one automation pipeline, operated to one standard. By joining this team you will own a production security estate end-to-end at datacenter scale, work hands-on with VMware Cloud Foundation, Dell PowerScale, Arista networking, Genetec and Lenel, and be part of a multi-region buildout spanning new datacenters in Europe, APAC and the Americas. We are looking for a Senior System Administrator to own the operation of the physical security infrastructure in their region. As the regional service owner, your responsibilities will include:

• Own the day-to-day operation of regional physical security systems across virtualization (VMware VCF/vSphere), storage (vSAN, Dell PowerScale), network (Arista) and Windows/Linux server platforms.


• Act as the regional privileged-access custodian - holding administrative rights across servers, directory, PKI, virtualization and security applications - and approve all changes within the region.


• Support physical security applications and their dependencies (Genetec Security Center, Lenel, Active Directory, PKI, DNS/DHCP, monitoring), providing Tier 2 troubleshooting and escalating to global engineering for Tier 3.


• Enforce SOPs, runbooks and patching cycles across all regional sites; maintain compliance evidence and operational documentation.


• Monitor system health and alerts, manage the regional incident lifecycle, and coordinate vendor support engagements for hardware, software and circuit faults.


• Lead and direct the regional BPO/contract engineers - task allocation, quality review, onboarding and performance feedback - and ensure procedure-based work is executed to standard.


• Support new site commissioning, migrations and platform upgrades delivered by global engineering, and take operational handover.


• Travel requirement: regular travel to datacenter sites within the region, with occasional international travel for site commissioning and team collaboration. Candidates must hold a valid passport and be able to obtain necessary visas.

Qualifications

Minimum Qualifications

• Bachelor’s degree in Computer Science, Information Technology or a related field, or equivalent practical experience.


• Hands-on experience administering enterprise Windows and Linux server environments, including VMware vSphere and enterprise storage.


• Working knowledge of enterprise networking (VLANs, routing, switching) and Active Directory, PKI and DNS/DHCP fundamentals.


• Experience supporting physical security platforms (Genetec Security Center, Lenel or equivalent VMS/access control) and networked IoT devices.


• Demonstrated incident, change and vendor-escalation discipline with strong documentation practices.


• Experience directing contractors or junior engineers in an operational or support function.


• Eligible to hold privileged access to security-critical systems as a full-time employee.

Preferred Qualifications

• 5 years of experience in system administration or datacenter infrastructure operations, including at least 2 years in a senior or lead capacity.


• 3 years of experience operating VMware-based platforms (vSphere/VCF, vSAN) and enterprise storage in production.


• Relevant certifications such as VMware VCP/VCAP, RHCSA, Genetec or Lenel vendor certifications.


• Scripting and automation experience (PowerShell, Python, Ansible) for operational tasks.


• Experience working in multi-region or follow-the-sun operating models with outsourced/BPO teams.

Job Information

The base salary range for this position in the selected city is $127200 - $288000 annually.

Compensation may vary outside of this range depending on a number of factors, including a candidate’s qualifications, skills, competencies and experience, and location. Base pay is one part of the Total Package that is provided to compensate and recognize employees for their work, and this role may be eligible for additional discretionary bonuses/incentives, and restricted stock units.

Benefits may vary depending on the nature of employment and the country work location. Employees have day one access to medical, dental, and vision insurance, a 401k savings plan with company match, paid parental leave, short-term and long-term disability coverage, life insurance, wellbeing benefits, among others. Employees also receive 10 paid holidays per year, 10 paid sick days per year and 17 days of Paid Personal Time (prorated upon hire with increasing accruals by tenure).

The Company reserves the right to modify or change these benefits programs at any time, with or without notice.

For Los Angeles County (unincorporated) Candidates:

Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state, and local laws including the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Our company believes that criminal history may have a direct, adverse and negative relationship on the following job duties, potentially resulting in the withdrawal of the conditional offer of employment:

1. Interacting and occasionally having unsupervised contact with internal/external clients and/or colleagues;


2. Appropriately handling and managing confidential information including proprietary and trade secret information and access to information technology systems;


3. Exercising sound judgment.

About Us

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok, Lemon8, CapCut and Pico as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join ByteDance

Inspiring creativity is at the core of ByteDance's mission. Our innovative products are built to help people authentically express themselves, discover and connect - and our global, diverse teams make that possible. Together, we create value for our communities, inspire creativity and enrich life - a mission we work towards every day.

As ByteDancers, we strive to do great things with great people. We lead with curiosity, humility, and a desire to make impact in a rapidly growing tech company. By constantly iterating and fostering an \"Always Day 1\" mindset, we achieve meaningful breakthroughs for ourselves, our Company, and our users. When we create and grow together, the possibilities are limitless. Join us.

Diversity & Inclusion

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

Reasonable Accommodation

ByteDance is committed to providing reasonable accommodations in our recruitment processes for candidates with disabilities, pregnancy, sincerely held religious beliefs or other reasons protected by applicable laws. If you need assistance or a reasonable accommodation, please reach out to us at https://tinyurl.com/RA-request