Senior IT Systems Engineer

Sr IT Systems EngineerFounded in 2023, Mach Industries is a rapidly growing defense technology company focused on developing next-generation autonomous defense platforms. At the core of our mission is the commitment to delivering scalable, decentralized defense systems that enhance the strategic capabilities of the United States and its allies. With a workforce of approximately 350 employees, we operate with startup agility and ambition.Our vision is to redefine the future of warfare through cutting-edge manufacturing, innovation at speed, and unwavering focus on national security. We are dedicated to solving the next generation of warfare with lethal systems that deter kinetic conflict and protect global security.The RoleWe are seeking a Sr IT Systems Engineer to lead the implementation, automation, and lifecycle management of enterprise IT infrastructure. This role serves as technical POC across hybrid platforms, identity, endpoint management, observability, security hardening, and infrastructure automation. This person will drive modernization through infrastructure as code, configuration management, CI/CD integration, system reliability practices, and repeatable operational workflows. You will be responsible to help build the technical foundations, standards, and deployment models required to scale IT reliably across a growing multi-site organization.Key ResponsibilitiesBuild reference architectures, deployment blueprints, and repeatable site rollout models to support offices, warehouses, production environments, and remote locations.Drive an automation-first approach using infrastructure as code, CI/CD pipelines, and operational automation for provisioning, patching, compliance, backups, certificates, and access management.Improve reliability through standardized recovery procedures, automation, and resilient support models.Oversee enterprise systems administration and operations, ensuring availability, performance, lifecycle management, and disaster readiness.Strengthen security and compliance by implementing controls aligned with frameworks such as NIST, ISO 27001, SOC 2, and CMMC, while advancing SSO, MFA, PAM, RBAC, and conditional access.Translate business needs into technical execution plansRequired QualificationsBachelor's degree in Information Technology, Computer Science, Engineering, or related field, or equivalent practical experience.5+ years of systems engineering, infrastructure engineering.Deep experience supporting complex enterprise environments across cloud and on-prem systems.Strong hands-on experience with automation and scripting, including PowerShell, Python, Bash, or similar.Experience building and maintaining infrastructure as code and configuration automation using tools such as Terraform, Ansible, Puppet, or similar.Experience with CI/CD platforms such as GitHub Actions, GitLab CI, Jenkins, Azure DevOps, or similar.Strong expertise in Windows, Linux, virtualization, identity systems, endpoint management, cloud platforms, backup/recovery, and enterprise systems operations.Experience with observability, monitoring, logging, and operational health tooling.Strong knowledge of systems security, access control, hardening, and vulnerability remediation.Ability to travel.Preferred QualificationsBackground in regulated or compliance-driven environments such as defense, manufacturing, aerospace, or similar industries.Exposure to security and compliance frameworks including NIST 800-171, CMMC, SOC 2, ISO 27001, or related standards.Experience with SRE-style operational practices and service reliability or platform engineering initiatives.Familiarity with integrating enterprise IT systems with software delivery pipelines and cloud-native tooling.Working knowledge of modern infrastructure technologies such as containers, artifact repositories, secrets management, and service orchestration.Experience developing automation for identity lifecycle management, PKI/certificates, patching, endpoint deployment, or compliance validation.Experience supporting standardized infrastructure deployments for branch offices, warehouses, or production sites.Relevant industry certifications such as Microsoft, AWS, Terraform, Kubernetes, VMware, CISSP, RHCSA/RHCE, or similar.Additional RequirementsAvailable to work extended hours and weekends as neededITAR RequirementsTo conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.Pay Range $150,000 —$175,000 USDAt Mach, we believe that compensation is more than just a paycheck. It's a comprehensive package designed to reward the time, skills, and expertise you bring to our team. We are committed to offering competitive compensation that is equitable, transparent, and aligned with market trends.Competitive Salaries: We continuously research market rates to ensure our salaries are competitive with those in our industry and geographic location.Performance-Based Incentives: Our bonus structure is tied to both individual and company performance, creating a win-win scenario that motivates our team members to excel.Equity Participation: We offer stock options or equity to employees, ensuring that you share in the success and growth of the company.Benefit Packages: Our benefits include healthcare, dental and vision plans, retirement savings, and paid time off, because we understand that your well-being extends beyond the office.Professional Development: We allocate funds for continuing education, training, and career growth.Transparency: We are committed to openness about our compensation tiers and how decisions are made, ensuring trust and mutual respect.By joining Mach, you're not just accepting a job—you're becoming a key part of a team that values your contributions and invests in your growth. Together, we aim to create a rewarding environment that sets the stage for long-term success.