Virtualization and PKI Architect

Job ID: 2503403

Location: SPRINGFIELD, VA, US

Date Posted: 2025-03-17

Category: Information Technology

Subcategory: IT Systems Engineer

Schedule: Full-time

Shift: Day Job

Travel: No

Minimum Clearance Required: None

Clearance Level Must Be Able to Obtain: Top Secret

Potential for Remote Work: No

Description

We are seeking a highly motivated and experienced Virtualization Architect to join our team to support a Department of State customer in Springfield, Virginia. The preferred candidate will be someone who can design, implement and maintain a virtualized MS windows based private IaaS solution. We are looking for someone who can analyze, design, plan, and deploy a solution following best practices, while ensuring high levels of data quality and availability. This individual is also responsible for developing specifications, sizing, development plan, and life-cycle management policies, standards, and procedures to ensure consistent architecture and management.

This role is hybrid and allows some remote work.

Responsibilities:

• Hand-on architecting systems and solutions across multiple vendor and technologies, and serving as an escalation point to senior engineers on complex cloud solutions.
• Developing systems requirements, design specifications, CONOPs, etc.
• Create and maintain documentation on SOPs and System Design.
• Develop System Design Documents (SDDs), architecture diagrams, system and software build documentation, installation guidelines, test plans, and other core architecture documentation.
• Participate in the analysis and redesign of existing infrastructure systems and services.
• Participate in the analysis, design and implementation of future infrastructure systems and services.
• Participate in the identification of vulnerabilities and their mitigation.
• Research, evaluate, recommend and implement new technologies.
• Maintain effective communications with vendors, peers and clients in support of assigned projects.
• Auditing technologies and tools, and provide reports, as needed.
• Auditing and security policies and procedures.
• Domain Name System (DNS) Services.
• Dynamic Host Configuration Protocol (DHCP) Services.
• Network Time Protocol (NTP) Services.
• AD security.
• Auditing and security policies, procedures, technologies, and tools to support audit requirements.
• Deploy VMWare virtualized environments and technologies.
• AD application integration methods and tools (single-sign-on) and Privileged access management through CyberArk.
• Deploy Just in time administration based on Active directory.
• Architect and deploy multiple virtualized environments leveraging VMware NSX micro segmentation with the goal of managing lateral movement.
• Design and deploy multi-tiered environments at different level of security assurance.
• Develop and deploy a NAS, SANs and backup solutions meeting various virtualization and data management requirements.

Qualifications

Required Education & Experience:

• Bachelor's degree and 9 years of experience; Master's degree and 7 years of experience; May accept additional experience in lieu of degree.
• Excellent Knowledge of Private, Public and Hybrid Cloud environments.
• Excellent Knowledge of Cloud Orchestration platforms.
• Excellent knowledge of Windows Server, Linux, in HA/DR type configurations.
• Excellent knowledge of Sever hardware platforms: x86.
• Excellent knowledge of VMWare ESX, vSphere.
• Excellent knowledge of HSM, SAN, NAS, DAS, RAID, SCSI, Fibre Channel, Backup to Disk, clustering, encryption technologies from multiple vendors.
• In-depth understanding of Cloud, Server, Storage, and Virtualization architecture design techniques, theories, principles, and practices.
• Experience leading and collaborating with technical teams of diverse IT related skill sets.
• Extensive knowledge and understanding of various cloud technologies.
• Experience with DLP, Data Privacy, Disaster Recovery, and Privileged Access Management Strategies.
• Strong attention to detail, multitasking, and analytical skills.
• Ability to work independently and as part of a team.
• Knowledge of security frameworks that inform risk and design considerations.
• Exemplary communication, analytical skills, and technical knowledge across the client environment.
• Knowledge and experience of Zero Trust frameworks.
• Expert level hands-on experience in Microsoft Windows and Active directory.

Required Clearance:

• ship.
• Ability to obtain a Top Secret clearance. Must be able to obtain an interim TS prior to starting work.

Desired:

• VMWARE Cloud, Virtualization, Server and Storage vendor Certifications preferred.
• Solid experience and knowledge of Networking and perimeter security is required, and hands-on working knowledge of Palo-alto Firewall is preferred.
• Experience with Azure and Entra ID is preferred.

SAIC accepts applications on an ongoing basis and there is no deadline.

Covid Policy: SAIC does not require COVID-19 vaccinations or boosters. Customer site vaccination requirements must be followed when work is performed at a customer site.

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.