Senior/Principal Information Systems Architect - Threat Analysis, Onsite

Sandia National Laboratories; New Mexico; On-site; USD 102,000 - 200,000; Full time

Benefits offered by this job

Affordable housing

Low traffic area

Resume review by recruiters

Job summary

Sandia National Laboratories in the United States is seeking an Information Systems Architect to join the Threat Analysis Technologies group, focusing on securing on‑prem and cloud environments and supporting enterprise services. This role requires working onsite in New Mexico and contributing to system-wide security, virtualization, and network management.

Responsibilities include deploying information services in high-security environments, VM management, data mirroring, and collaboration with

Qualifications

• A Bachelor's degree in a relevant discipline and five (5) years of directly relevant experience, or an equivalent combination of education and experience.
• Experience deploying information services in a high-security production environment.
• Experience with enterprise and network services (DNS, NTP, DHCP, databases, firewalls, routing).
• Ability to obtain and maintain a DOE Q and SCI clearance (polygraph possible).

Responsibilities

• Assist with managing on-premises cloud environments.
• Support VM management tasks (vmBackup, vmRestore, vmMount, vmFsck, vmView).
• Maintain ZFS snapshots, backups, and data mirroring.
• Contribute to web services administration and system health monitoring.
• Provide Linux and Windows desktop support under guidance.

Skills

VMware/OpenStack

QEMU/KVM

Proxmox

Docker/Podman

Linux

Red Hat/DISA STIGS

Scripting languages

Networking

Cloud/ virtualization

Collaboration tools (Jira/GitLab)

Education

Bachelor's degree

Tools

vmBackup/vmRestore

Wikis/Mattermost

DNS/NTP/DHCP

Job description

Sandia National Laboratories is the nation’s premier science and engineering lab for national security and technology innovation, with teams of specialists focused on cutting-edge work in a broad array of areas. Some of the main reasons we love our jobs:

Challenging work with amazing impact that contributes to security, peace, and freedom worldwide

Extraordinary co-workers

Some of the best tools, equipment, and research facilities in the world

Career advancement and enrichment opportunities

Flexible work arrangements for many positions include 9/80 (work 80 hours every two weeks, with every other Friday off) and 4/10 (work 4 ten-hour days each week) compressed workweeks, part-time work, and telecommuting (a mix of onsite work and working from home)

Generous vacation, strong medical and other benefits, competitive 401k, learning opportunities, relocation assistance and amenities aimed at creating a solid work/life balance*

World-changing technologies. Life-changing careers. Learn more about Sandia at: http://www.sandia.gov

*These benefits vary by job classification.

What Your Job Will Be Like:

The Threat Analysis Technologies group is seeking a highly motivated Information Systems Architect to join an innovative and detail-oriented team. Our team works on a variety of projects and tasks associated with protecting national security by enhancing the resilience of critical infrastructure against evolving cyber threats.

On any given day, you may be called on to:

Assist with managing on-premises cloud environments.

Support virtual machine (VM) management tasks (e.g., vmBackup, vmRestore, vmMount, vmFsck, vmView).

Help maintain ZFS snapshots, backups, and data mirroring.

Contribute to web services administration.

Monitor system health and assist with system management.

Support maintenance of the PXE Boot OS imaging system.

Perform daily systems administration tasks (e.g., smbldap-passwd, addUserAcct, addUserDir, addGroup, modGroup, lsusers, lsgroups).

Assist with repository mirroring to off-network environments.

Support activation and maintenance of KMS servers.

Provide Linux and Windows desktop support under guidance.

Assist with endpoint auto-configuration and automation.

Help with network maintenance activities.

Assist with equipment management.

Help identify and mitigate offending technology with equipment.

Assist with managing on-premises cloud environments.

Due to the nature of the work, the selected applicant must be able to work onsite.

Salary Range:

$102,400 - $199,700

*Salary range is estimated, and actual salary will be determined after consideration of the selected candidate's experience and qualifications, and application of any approved geographic salary differential.

Qualifications We Require:

A Bachelor's degree in a relevant discipline and five (5) years of directly relevant experience, or an equivalent combination of directly relevant education and experience in a computer related field.

Experience with the following:

Deploying information services in a high security production environment

Enterprise and network services like DNS, NTP, DHCP, databases, firewalls, network and routing equipment, distributed storage systems, etc.

Configuring and troubleshooting network equipment.

Ability to obtain and maintain a DOE Q and SCI clearance which may require a polygraph test.

Qualifications We Desire:

Ability to translate technical terms to layperson's terms and present them to a diverse set of technical staff/researchers.

Experience with scripting languages.

Ability to learn new IT system technologies.

Ability to work closely with customers and suppliers to define expectations and mutual responsibilities In-depth knowledge of Linux.

Ability to thrive in a teaming environment.

Understanding of Systems Engineering disciplines particularly Requirements Management and Configuration Management.

Understanding of virtualization software such as Vmware, Open Stack and QEMU/KVM, and Proxmox.

Understanding of containerization technologies such as Docker and Podman.

Experience deploying and administering Red Hat systems that are DISA STIGS and FIPS compliant.

Ability to research and propose networking solutions which satisfy requirements.

In-depth knowledge of network devices like switches, routers, VPNs and firewall devices.

Experience with and the ability to utilize collaboration tools like Wikis, Mattermost, Jira & GitLab.

Experience with process improvement activities and full life cycle development processes such as Agile, Lean 6, ISO, CMMi, or ITIL.

Project management experience preferably of large, complex, or interdependent projects.

Active DOE Q-level/SCI or DOD equivalent.

About Our Team:

Department 5631 [Threat Analysis Technologies] is one of five departments in the Cyber Intelligence Research Group and primarily executes work for the Cyber Intelligence Research organization (CIR) through the cultivation and deployment of ground-breaking cyber capabilities within 5600. We are responsible for the research and development of advanced knowledge discovery and data mining technologies and the development of information systems incorporating these technologies. Our goal is to help customers understand what their data is telling them.

Posting Duration:

This posting will be open for application submissions for a minimum of three (3) calendar days, including the 'posting date'. Sandia reserves the right to extend the posting date at any time.

Security Clearance:

Sandia is required by DOE to conduct a pre-employment drug test and background review that includes checks of personal references, credit, law enforcement records, and employment/education verifications. Applicants for employment need to be able to obtain and maintain a DOE Q-level security clearance and SCI access, both of which require US citizenship. SCI access may also require a polygraph examination. If you hold more than one citizenship (i.e., of the U.S. and another country), your ability to obtain these levels of access may be impacted.

Applicants offered employment with Sandia are subject to a federal background investigation to meet the requirements for access to classified information or matter if the duties of the position require a DOE security clearance. Substance abuse or illegal drug use, falsification of information, criminal activity, serious misconduct or other indicators of untrustworthiness can cause a clearance to be denied or terminated by the DOE, resulting in the inability to perform the duties assigned and subsequent termination of employment.

EEO:

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or veteran status and any other protected class under state or federal law.

NNSA Requirements for MedPEDs:

If you have a Medical Portable Electronic Device (MedPED) like a pacemaker, defibrillator, drug-releasing pump, hearing aids, or diagnostic equipment and other equipment for measuring, monitoring, and recording body functions such as heartbeat and brain waves, if employed by Sandia National Laboratories you may be required to comply with NNSA security requirements for MedPEDs.

If you have a MedPED and you are selected for an on-site interview at Sandia National Laboratories, there may be additional steps necessary to ensure compliance with NNSA security requirements prior to the interview date.

• Affordable housing, reasonable cost of living
• Minimal traffic congestion compared to larger cities
• At Sandia, recruiters manually review resumes on each job posting instead of using a resume screening software program
• By following the best practices outlined, this ensures that recruiters can accurately determine your qualifications for the position