Senior Infrastructure Engineer

ITility is seeking an experienced and mission-focused Senior Infrastructure Engineer (Data Center & Wireless SME) to support a mission-critical enterprise modernization contract with the Department of Defense (DoD). This role directly supports AWS-hosted and on-premises enterprise infrastructure enabling the secure processing of recruit candidates entering the U.S. Armed Forces across geographically dispersed Military Entrance Processing Stations (MEPS) and affiliated sites nationwide.

This position serves as the senior technical lead for two major concurrent modernization initiatives: the enterprise Wireless Refresh and the data center transition from NX-OS to Cisco ACI. Operating at the intersection of on-premises infrastructure modernization, cloud integration, and Agile DevSecOps delivery, this role requires a seasoned engineer with proven expertise in advanced data center fabrics, enterprise wireless architecture, and the ability to build lasting technical capability within the team through structured mentorship and knowledge transfer.

Key Responsibilities:
Data Center Modernization — Cisco ACI Migration
- Lead the end-to-end design, architecture, and implementation of the new Cisco ACI fabric, driving the full enterprise transition from the legacy NX-OS environment
- Manage and execute the NX-OS to ACI migration strategy, including tenant configuration, endpoint group (EPG) design, contract policies, and fabric discovery
- Configure and administer the Cisco Nexus Dashboard, establishing centralized visibility, operations management, and policy orchestration across the data center fabric
- Oversee and maintain the SAN environment, ensuring storage connectivity, zoning, and fabric health are preserved and optimized throughout the ACI transition
- Develop and maintain detailed migration runbooks, cutover plans, and rollback procedures to ensure continuity of mission-critical operations during transition activities
- Collaborate with cloud architects and application teams to ensure seamless integration between the modernized data center fabric and AWS cloud environments.

Wireless Network Modernization — Wireless Refresh
- Assist with leading the complete enterprise Wireless Refresh initiative from design through deployment, delivering a modernized, high-performance wireless network infrastructure
- Architect and implement the redesigned wireless network, incorporating Wireless Intrusion Prevention and Detection Systems (WIPS/WIDS) to enforce security and detect threats across all sites
- Deploy and configure new Wireless LAN Controllers (WLCs) and Access Points (APs), ensuring optimal coverage, capacity, and performance across geographically dispersed locations
- Leverage Cisco DNA Center services for wireless network optimization, AI-driven insights, policy enforcement, and lifecycle management
- Conduct site surveys, RF planning, and post-deployment validation to ensure wireless performance meets mission operational requirements
- Assist with the development of wireless security policies and configurations aligned with DISA STIGs, RMF requirements, and DoD wireless security standards

Cloud & Enterprise Infrastructure:
- Design, deploy, and maintain scalable AWS cloud infrastructure including compute, storage, networking, and identity management components supporting mission-critical applications
- Implement and enforce infrastructure security controls aligned with DISA STIGs, RMF, NIST 800-53, and DoD cloud security requirements
- Develop and maintain Infrastructure as Code (IaC) using Terraform, AWS CloudFormation, or equivalent tooling to automate provisioning and enforce configuration standards
- Monitor infrastructure health, performance, and security posture using AWS-native tooling (CloudWatch, AWS Config, Security Hub) and integrated SIEM platforms
- Support Authority to Operate (ATO) activities including security documentation, control implementation statements, and participation in security assessments
- Lead infrastructure incident response, root cause analysis, and continuity of operations planning for mission-essential workloads

Mentorship & Knowledge Transfer
- Serve as the primary technical mentor to the infrastructure team, including the junior wireless engineer, on advanced data center and wireless technologies
- Develop and deliver structured training programs covering Cisco ACI architecture, NX-OS to ACI migration concepts, wireless design principles, and Cisco DNA operations
- Create technical documentation, standard operating procedures (SOPs), runbooks, and reference architectures to build enduring in-house expertise
- Conduct hands-on knowledge transfer sessions ensuring internal Government and contract staff can independently sustain modernized infrastructure environments post-deployment
- Contribute to team standards, best practices, and engineering playbooks to elevate the overall technical capability of the organization

Required Qualifications:
Candidates must possess experience and capabilities across the following skill areas, listed in order of importance:
- U.S. Citizenship required; ability to obtain and maintain a DoD Secret clearance.
- Minimum of twelve (12) years of progressive experience in enterprise infrastructure engineering, with demonstrated senior-level expertise in data center and wireless network architecture.
- CompTIA Security+ CE or equivalent (DoD 8570/8140 IAT II)
- Cisco Certified Network Professional – Enterprise Wireless (CCNP Enterprise)
- Hands-on expertise with Cisco ACI, including fabric design, APIC administration, tenant/EPG policy configuration, and migration from NX-OS environments
- Proven experience with Cisco Nexus platforms and NX-OS, including multi-tier data center switching architecture and SAN environments
- Strong proficiency in enterprise wireless architecture, including WLC/AP deployment, RF planning, WIPS/WIDS implementation, and Cisco DNA Center operations
- Demonstrated experience in AWS cloud infrastructure services: EC2, VPC, IAM, S3, RDS, CloudWatch, AWS Config, and Security Hub
- Proficiency in Infrastructure as Code using Terraform, AWS CloudFormation, or Ansible
- Solid working knowledge of DISA STIGs, RMF, NIST 800-53, and federal infrastructure compliance frameworks
- Experience supporting ATO processes and collaborating with ISSOs, security assessors, and compliance teams
- Proven ability to lead complex, concurrent modernization initiatives in mission-critical, compliance-driven environments
- Active DoD Secret clearance (Top Secret preferred).

Preferred Qualifications:
- Direct experience supporting DoD enterprise cloud environments.
- Familiarity with Cisco DNA Assurance, AI/ML-driven network analytics, and intent-based networking operations
- Experience integrating on-premises data center infrastructure with AWS cloud environments in hybrid architecture designs
- Working knowledge of Palo Alto Networks firewalls and network security policy administration
- Background in disaster recovery and COOP planning for mission-critical DoD infrastructure
- Experience with SIEM platforms and security event monitoring in compliance-driven federal environment.
- Prior experience delivering formal technical training programs to government personnel or junior engineering staff.
- Ability to work independently and collaboratively in Agile environments
- Cisco Certified Specialist – Enterprise Wireless Design
- AWS Certified Solutions Architect – Associate or Professional
- Bachelor’s degree in Computer Science or related Network Engineering field (or equivalent professional experience)

Work Environment:
- Required to dress appropriately for the job environment, including adherence to safety, security, and site-specific dress standards
Ability to sit or stand for extended periods while performing computer-based tasks.
- Requires sustained use of hands and fingers for keyboarding, writing, and operation of standard office equipment, as well as frequent verbal communication, active listening, and visual acuity to perform job responsibilities effectively.
- Occasional movement around the office, including climbing stairs.
- Ability to travel up to 25%, which may include occasional visits to client sites or government installations

Physical Requirements:
- Work is typically performed in an office setting.
- Prolonged periods of sitting at a desk and working on a computer.
- Must have the ability to lift 15-25 pounds.

ITility is an Equal Opportunity Employer
ITility is committed to providing a work environment that is non-discriminatory, harassment free, fair, ethical and inclusive. ITility is committed

to the principle of equal employment opportunity and complies with all applicable laws which prohibit discrimination and harassment in the workplace. ITility strictly prohibits discrimination or harassment based on race, color, religion, national origin, sex, sexual orientation, gender identity, protected veteran status, disability, or any other characteristic protected by law in all terms, conditions and privileges of employment, including without limitation, recruiting, hiring, assignment, compensation, promotion, discipline and termination. This policy covers conduct occurring at ITility’s offices, client sites, other locations where ITility is providing services, and to all work-related activities.