Lead Infrastructure and Cybersecurity Architect

City/State: Colorado Springs, CO USA

Type and Schedule: Full-Time, Salary/Exempt, on-site with limited remote work flexibility.

Annualized Salary Range: $150,000.00 - $195,000.00 commensurate with experience.

Position Description:

Caliola Engineering is seeking a Lead Infrastructure and Cybersecurity Architect to help shape the technology foundation that supports our growing organization and mission-critical work. This role is ideal for a seasoned technical leader who enjoys setting direction, solving complex infrastructure and security challenges, and building secure, resilient environments designed to scale. You'll have the opportunity to influence technology strategy, infrastructure operations, cybersecurity, compliance readiness, and modernization across Caliola while serving as a trusted technical leader for some of our most important technology decisions. You'll work across enterprise networks, cloud and hybrid environments, secure systems, cybersecurity, CMMC readiness, and emerging technologies such as secure AI. This is a hands-on role for someone who is equally comfortable defining architecture and rolling up their sleeves to help turn that vision into reality. You'll partner closely with engineering, cybersecurity, compliance, facilities, and program teams to strengthen Caliola's infrastructure, reduce risk, support new programs, and keep our technology secure, reliable, compliant, and ready for what comes next.

Essential Responsibilities:

Technology Strategy & Architecture

• Own the organization's technology strategy and architecture across on-premises, cloud, hybrid, network, endpoint, and secure computing environments.
• Establish and maintain technical roadmaps, architecture standards, and modernization plans for infrastructure, cloud, networking, disaster recovery, secure AI, and related technologies.
• Evaluate emerging technologies and translate business, program, engineering, and security needs into scalable technical architectures and implementation plans.

IT Ops & Service Delivery

• Own the reliability, availability, and performance of core infrastructure, enterprise networks, cloud environments, identity systems, endpoints, collaboration platforms, and other business-critical technology.
• Oversee the implementation, configuration, maintenance, and improvement of infrastructure and network technologies, including LAN/WAN, SD-WAN, VPN, wireless, virtualization, cloud integration, and Infrastructure as Code.
• Establish and maintain disaster recovery, backup, high-availability, and business-continuity capabilities to support resilient technology operations.

Cybersecurity & Risk Management

• Own cybersecurity architecture and technical risk management across the organization, including access control, endpoint protection, network security, vulnerability management, logging, monitoring, and security hardening.
• Identify, assess, mitigate, and monitor technology and cybersecurity risks through secure configuration standards, vulnerability remediation, architecture reviews, and technical controls.
• Lead technical response and recovery efforts during cybersecurity incidents, including investigation, containment, remediation, documentation, and follow-up hardening.

Regulatory & Compliance Readiness / CMMC

• Own the technical implementation and sustainment of cybersecurity and compliance controls supporting CMMC Level 2, NIST SP 800-171/800-53, DFARS, DISA STIGs, and applicable DoD requirements.
• Prepare and maintain technical compliance documentation and evidence, including SSPs, POA&Ms, configuration documentation, network diagrams, technical standards, incident-response procedures, and security-control evidence.
• Support internal assessments, remediation efforts, customer reviews, and external certification or audit activities, including C3PAO assessments and requirements associated with secure or controlled environments.

Technology Asset Management

• Own the lifecycle management of the organization's technology assets, including hardware, software, cloud resources, systems, licenses, and supporting infrastructure.
• Maintain accurate standards, inventories, configurations, documentation, and lifecycle information to support operational, security, compliance, and budgeting needs.
• Evaluate technology platforms, vendors, licensing, and replacement or upgrade needs to ensure assets remain secure, supported, cost-effective, and aligned with organizational requirements.

What We Require:

• Active (or recent, within the last 5 years) Department of War security clearance at the Secret level or higher.
• Bachelor's degree in Computer Science, Information Technology, Network Engineering, Engineering, or a related field, or equivalent professional experience.
• 10+ years of progressive experience in enterprise networking, network engineering, network architecture, infrastructure architecture, or a closely related technical role.
• Experience supporting DoD, Federal Government, defense contractor, or similarly regulated environments.
• Advanced knowledge of enterprise network and infrastructure architecture, including routing, switching, firewalls, VPNs, wireless, segmentation, secure connectivity, and disaster recovery.
• Experience supporting Microsoft GCC High, Azure Government, or comparable secure cloud environments.
• Working knowledge of CMMC Level 2, NIST SP 800-171, RMF, DFARS, DISA STIGs, and related DoD cybersecurity requirements.
• Hands-on experience with security hardening, vulnerability management, access control, endpoint protection, logging, SIEM/security monitoring, and incident response.
• Ability to translate business, program, compliance, and engineering needs into secure technical architectures and implementation plans.
• Ability to mentor technical teammates, collaborate across functions, and influence outcomes without direct management authority.

What We Value:

• Active Top Secret or TS/SCI security clearance.
• Direct experience with CMMC Level 2 sustainment, C3PAO or DIBCAC assessments, classified or controlled environments, and continuous compliance.
• Deep knowledge of Microsoft GCC High, Azure Government, and related federal cloud and security frameworks.
• Familiarity with enterprise network platforms such as Cisco, Palo Alto, Fortinet, Aruba, or Juniper.
• Experience with Windows/Linux administration and infrastructure automation using tools such as Terraform, Ansible, PowerShell, Bash, or Python.
• Experience with secure AI architecture, governance, access controls, monitoring, and data protection.
• Relevant certifications such as CISSP, CISM, CCNP/CCIE, Microsoft Azure or Cybersecurity Architect, CCP, Security+, Network+, or SANS/GIAC.

Minimum Physical Requirements:

• Must possess exceptional written and verbal English communication skills, with the ability to convey complex technical concepts to both technical and non-technical audiences.
• Ability to multitask across multiple programs, manage competing priorities, and maintain high focus in a fast-paced environment.
• Ability to navigate an office or server room setting, including prolonged periods at a workstation.
• Ability to bend, kneel, crouch, or reach to install, inspect, or maintain IT hardware, server racks, and cabling.
• Close visual acuity required for analyzing data, engineering diagrams, and extensive reading.
• Fine motor skills and dexterity to manipulate small technical devices and components.
• Ability to occasionally lift, move, and set up infrastructure equipment weighing up to 35 lbs.

Please contact Human Resources with questions about ADA accommodations.

As a part of our selection process, we ask all applicants to complete a short, 10-12-minute survey from Culture Index. This is a survey, not a test; no passing or failing. The purpose of this survey is to identify your unique strengths as they relate to our open positions. Please copy and paste the following link into a separate browser window to complete: https://go.cultureindex.com/s/5i6Gpe3wge

Expression of Interest: By applying to this job, you are expressing interest in this position and could be considered for other career opportunities at Caliola Engineering. Should a match be identified between your skillset and Caliola's requirements for this or a future opening, you may be contacted.

The posted salary range represents our good faith estimate for this role based on current organizational needs and the qualifications reasonably expected for the position. Final compensation will be determined based on factors such as experience, skills, education, clearance status, and business needs.

This position will remain open until filled, and applications will be reviewed on a continuous basis.