Senior/Principal Solutions Architect - Z Facility Infrastructure and Operations, Onsite

Sandia National Laboratories is the nation's premier science and engineering lab for national security and technology innovation, with teams of specialists focused on cutting-edge work in a broad array of areas. Some of the main reasons we love our jobs:

• Challenging work with amazing impact that contributes to security, peace, and freedom worldwide
• Extraordinary co-workers
• Some of the best tools, equipment, and research facilities in the world
• Career advancement and enrichment opportunities
• Flexible work arrangements for many positions include 9/80 (work 80 hours every two weeks, with every other Friday off) and 4/10 (work 4 ten-hour days each week) compressed workweeks, part-time work, and telecommuting (a mix of onsite work and working from home)
• Generous vacation, strong medical and other benefits, competitive 401k, learning opportunities, relocation assistance and amenities aimed at creating a solid work/life balance*

World-changing technologies. Life-changing careers. Learn more about Sandia at: http://www.sandia.gov

*These benefits vary by job classification.

We are seeking an experienced and mission-focused Solutions Architect to lead the Z Machine IT Infrastructure Operations team. This role is central to enabling reliable, secure, and resilient IT and operational technology capabilities for the Z Machine, the worlds most powerful and efficient laboratory radiation source, and for the Z Beamlet facility.

In this role, you will provide technical leadership for the architecture, operations, modernization, and cyber assurance of complex computing, networking, virtualization, and data infrastructure supporting high-consequence pulsed power experiments. You will work closely with scientists, engineers, cyber professionals, system administrators, and facility leadership to design and sustain solutions that meet operational needs while aligning with cybersecurity and mission assurance requirements.

This position combines hands-on technical expertise with architectural leadership and cybersecurity assurance responsibilities. The selected candidate will lead the team responsible for daily IT infrastructure operations while also guiding the development, implementation, and maintenance of System Security Plans, security controls, risk documentation, and accreditation activities for the Z Machine and Z Beamlet networks.

On any given day, you may be called on to:

• Lead the Z Machine IT Infrastructure Operations team, including managing work intake and ticket queues, coordinating day-to-day operational support, working with management to prioritize tasks, and ensuring reliable delivery of IT services for Z Machine and Z Beamlet operations.
• Serve as the lead architect for Z Machine and Z Beamlet IT infrastructure solutions, designing and guiding implementation of scalable, secure, resilient, and maintainable systems across compute, storage, virtualization, networking, identity, backup, monitoring, endpoint, and infrastructure management environments.
• Lead or support the development, implementation, and maintenance of cybersecurity System Security Plans (SSP) for the Z Machine and Z Beamlet facility networks, including security control implementation, evidence collection, risk documentation, and remediation planning.
• Partner with engineering, operations, cybersecurity and mission stakeholders to translate customer requirements into secure technical architectures, implementation plans, and operational support models.
• Develop and improve processes for configuration management, patching, vulnerability remediation, monitoring, backup, recovery, lifecycle management, and infrastructure automation using tools such as PowerShell, Python, or configuration management platforms.
• Troubleshoot and resolve complex technical issues impacting Z Machine operations, including urgent operational problems requiring rapid response and cross-disciplinary coordination.
• Develop and maintain technical and cybersecurity documentation, including architecture diagrams, system descriptions, configuration baselines, operating procedures, security documentation, operator aids, and accreditation artifacts.

$117,500 - $235,700

*Salary range is estimated, and actual salary will be determined after consideration of the selected candidate's experience and qualifications, and application of any approved geographic salary differential.

• Bachelors degree in a relevant Information Technology, Cybersecurity, Computer Science, Engineering, or other STEM discipline plus five or more years of directly related experience that demonstrates the knowledge, skills, and ability to perform the duties of the job; or equivalent combination of education and experience that demonstrates the knowledge, skills, and ability to perform the duties of the job.
• Demonstrated experience architecting, administering, or supporting complex enterprise IT infrastructure across operating systems and virtualization platforms.
• Demonstrated experience applying cybersecurity requirements, security control implementation, compliance activities, risk management, and system accreditation processes.
• Proven ability to provide technical leadership by shaping solution approaches, resolving complex operational issues, and coordinating with diverse stakeholders to deliver effective outcomes.
• Ability to obtain and maintain a DOE Q Security Clearance.

• Proficiency in administering, securing, and troubleshooting Windows desktop/server and Red Hat Enterprise Linux environments, including both modern and legacy operating systems.
• Proficiency in deploying, provisioning, and sustaining enterprise virtualization or hyperconverged infrastructure platforms such as Nutanix, VMware ESXi/vSphere, Hyper-V, or equivalent technologies.
• Proficiency in configuring and troubleshooting enterprise network infrastructure, including Cisco routers, switches, firewalls, VLANs, routing protocols, and network segmentation.
• Experience serving in a senior technical role such as solutions architect, systems architect, infrastructure architect, cybersecurity architect, cyber assurance lead, ISSO, ISSE, ISSM, or SCA support.
• Relevant industry certifications in IT service management, enterprise architecture, networking, cloud, or virtualization, such as ITIL, TOGAF, CCNP, CCNA, or platform-specific certifications.
• Industry-recognized cybersecurity certifications such as CISSP, CEH, CISM, GIAC, CCSP, Security+, or equivalent.
• Experience with NIST Risk Management Framework concepts, security control families, continuous monitoring, vulnerability management, and system authorization processes.
• Experience administering Active Directory, Group Policy, DNS, DHCP, PKI, identity services, or related enterprise infrastructure services.
• Experience scoping, configuring, or administering IT infrastructure such as servers, storage arrays, backup systems, server racks, monitoring tools, and data center technologies.
• Experience with vulnerability scanning, patch management, configuration compliance, endpoint protection, logging, monitoring, or security information and event management tools.
• Experience automating infrastructure or security processes using PowerShell, Python, Ansible, configuration management tools, patch management platforms, containerization, or infrastructure-as-code approaches.
• Familiarity with Sandia IT and Cyber Security policies, standards, and procedures.
• Current DOE or DoD security clearance.

The Z Data Management & Insights department, org. 1678, provides Information Technology and Operational Technology infrastructure, products, and services for the Z Machine enterprise in the Pulsed Power Sciences center, center 1600. Additionally, the department is tasked with developing and implementing data management strategies for Z facility data, including facilitating the implementation of Artificial Intelligence (AI) and Machine Learning (ML) solutions using Z data. This work is accomplished through collaborations with operations, engineering, science, and program teams. Solutions address quality, efficiency, safety, and security that are well-aligned to achieving, and enabling, the scientific goals of the programs performing experiments at Z. The departments teams consist of an IT infrastructure operations team, an application solutions team, a Control, Monitor and Data Acquisition (CM/DAS) team, and a web content management team. This team is part of the Radiation, Electrical and High Energy Density Science (REHEDS) Research Foundation at Sandia.

This posting will be open for application submissions for a minimum of three (3) calendar days, including the 'posting date'. Sandia reserves the right to extend the posting date at any time.

Sandia is required by DOE to conduct a pre-employment drug test and background review that includes checks of personal references, credit, law enforcement records, and employment/education verifications. Applicants for employment need to be able to obtain and maintain a DOE Q-level security clearance, which requires U.S. citizenship. If you hold more than one citizenship (i.e., of the U.S. and another country), your ability to obtain a security clearance may be impacted.

Applicants offered employment with Sandia are subject to a federal background investigation to meet the requirements for access to classified information or matter if the duties of the position require a DOE security clearance. Substance abuse or illegal drug use, falsification of information, criminal activity, serious misconduct or other indicators of untrustworthiness can cause a clearance to be denied or terminated by DOE, resulting in the inability to perform the duties assigned and subsequent termination of employment.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or veteran status and any other protected class under state or federal law.

If you have a Medical Portable Electronic Device (MedPED), such as a pacemaker, defibrillator, drug-releasing pump, hearing aids, or diagnostic equipment and other equipment for measuring, monitoring, and recording body functions such as heartbeat and brain waves, if employed by Sandia National Laboratories you may be required to comply with NNSA security requirements for MedPEDs.

If you have a MedPED and you are selected for an on-site interview at Sandia National Laboratories, there may be additional steps necessary to ensure compliance with NNSA security requirements prior to the interview date.